Colorado Springs, CO

Your Clarity. Your Strategy. Your Next Step.

Stand2

Security & Emergency Management Blog

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore

Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Shai‑Hulud npm wormpackage manager wormsoftware supply chain attacknpm supply chain compromiseCI/CD token thefttrusted publishing OIDCsecrets leakageGitHub reposdependency install scriptsSBOM and dependency inventory

Covenant Health Ransomware: The Real Cost of Revised Impact

Aaron Gilmore

Published on: 2026/01/28

When breach impact gets revised upward, the cost isn’t just records—it’s trust, governance, notification waves, and long-tail recovery work. Lessons from Covenant Health.

revised impact breach notification healthcare ransomware impact analysisbreach notification wavesHIPAA breach notification timelineforensic investigation scopecredit monitoring costsincident response governance

China Plant Explosion: First Hours of Incident Command

Aaron Gilmore

Published on: 2026/01/23

What the first hours after a chemical plant explosion require: scene safety, HazMat monitoring, unified command, and protective-action messaging.

chemical plant explosion incident command HazMat first hoursunified commandshelter-in-place vs evacuationperimeter controlpublic informationindustrial incident responseresponder coordination

Port Strike Deadline: Slow-Motion Incident Planning

Aaron Gilmore

Published on: 2026/01/21

Treat port-strike deadlines like countdown incidents: triggers, PACE routing, inventory buffers, and comms cadence to protect deliveries and readiness.

port strike deadline planning ILA–USMX tentative agreementsupply chain disruption mitigationcontinuity planning for labor actionscountdown operationsstakeholder communications

About Our Content

AI tools assist with research, ideation, and content organization on this blog. All posts are reviewed and approved by our cybersecurity team before publication. Our goal is to provide accurate, actionable insights informed by real-world experience.