Colorado Springs, CO

Stand2

Security & Emergency Management Blog

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore

Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Security & Emergency ManagementIncident Field NotesCybersecurity & Systems SecuritySupply Chain & Third-Party Security

Covenant Health Ransomware: The Real Cost of Revised Impact

Aaron Gilmore

Published on: 2026/01/28

When breach impact gets revised upward, the cost isn’t just records—it’s trust, governance, notification waves, and long-tail recovery work. Lessons from Covenant Health.

Security & Emergency ManagementIncident Field NotesRisk Management & Threat AnalysisOperations Security (OPSEC) & Sensitive Info ProtectionCybersecurity & Systems SecurityInformation & Data Security

Jaguar Land Rover’s Production Disruption: Cyber Risk Becomes Supply Chain Risk

Aaron Gilmore

Published on: 2026/01/09

JLR’s 2025 cyber disruption shows how IT outages become supply-chain failures. Protect ERP/MES/identity, test IT/OT segmentation, and plan fallback operations.

Security & Emergency ManagementIncident Field NotesOperations Security (OPSEC) & Sensitive Info ProtectionCybersecurity & Systems SecurityInformation & Data SecuritySupply Chain & Third-Party Security

Bybit $1.5B Theft: Cold Wallet Controls Still Fail

Aaron Gilmore

Published on: 2026/01/02

The Bybit theft shows “cold storage” fails when signing/approval workflows are deceived. Lessons for privileged approvals, vendor risk, and comms.

Security & Emergency ManagementIncident Field NotesOperations Security (OPSEC) & Sensitive Info ProtectionCybersecurity & Systems SecurityInformation & Data SecuritySupply Chain & Third-Party Security

About Our Content

AI tools assist with research, ideation, and content organization on this blog. All posts are reviewed and approved by our cybersecurity team before publication. Our goal is to provide accurate, actionable insights informed by real-world experience.