Ransomware-as-a-service is a growing threat model that threatens governments’ ability to defend networks. Zero-trust practices are increasingly critical to shore up defenses.