Colorado Springs, CO

Your Clarity. Your Strategy. Your Next Step.

Stand2

Security & Emergency Management Blog

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Covenant Health Ransomware: The Real Cost of Revised Impact

Aaron Gilmore

Published on: 2026/01/28

When breach impact gets revised upward, the cost isn’t just records—it’s trust, governance, notification waves, and long-tail recovery work. Lessons from Covenant Health.

revised impact breach notification healthcare ransomware impact analysisbreach notification wavesHIPAA breach notification timelineforensic investigation scopecredit monitoring costsincident response governance

Starlink Global Outage: Single-Point Software Failures

Aaron Gilmore

Published on: 2026/01/16

Starlink’s July 2025 outage shows “global” systems can share one weak point: the control-plane software that coordinates everything.

Starlink global outage satellite internet outagecontrol plane failuresingle point of failuredependency mappingPACE communications

Jaguar Land Rover’s Production Disruption: Cyber Risk Becomes Supply Chain Risk

Aaron Gilmore

Published on: 2026/01/09

JLR’s 2025 cyber disruption shows how IT outages become supply-chain failures. Protect ERP/MES/identity, test IT/OT segmentation, and plan fallback operations.

cyber supply chain riskJaguar Land Rover cyber incidentmanufacturing cyber disruptionbusiness interruptionIT/OT segmentationoperational resiliencesupplier cyber riskC-SCRM

Bybit $1.5B Theft: Cold Wallet Controls Still Fail

Aaron Gilmore

Published on: 2026/01/02

The Bybit theft shows “cold storage” fails when signing/approval workflows are deceived. Lessons for privileged approvals, vendor risk, and comms.

Bybit $1.5B theft cold wallet workflowSafe{Wallet} compromiseprivileged approval workflowthird-party signing interface

About Our Content

AI tools assist with research, ideation, and content organization on this blog. All posts are reviewed and approved by our cybersecurity team before publication. Our goal is to provide accurate, actionable insights informed by real-world experience.