Do Not Stop at the First Host
Treat the first infected host as the starting point, not the end of the incident.
Security
Vulnerabilities, defensive security, architecture and operational security.
Dell System Update patch closes a path to root
Upgrade Dell System Update and verify version 2.3.0.0.
Splunk Patches Command Path
Fix available.
Old Patches, Active Hunt
Replace unsupported software, preserve evidence and hunt beyond the patch.
Keep Your Recovery Path Outside the Cloud
Backups, evidence and trust checks must survive outside the incident boundary.
Map the Feature Before You Patch
Map exposure before patching.
Cerner Breach: 19.9m People Reported Affected
A newly reported scale for the Cerner breach, with evidence limits and practical guidance for affected people.
Malicious Tensorlake npm Release
The malicious Tensorlake npm release requires containment first, followed by evidence-led cleanup and prompt credential rotation.
Publica Leak Confirmed
Scope unknown.
FortiBleed Turns Access Into Ransomware Risk
Resetting credentials is only the start.