Colorado Springs, CO

Stand2

Security & Emergency Management Blog

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Right-Sized Third-Party Security for SMB Organizations

Aaron Gilmore

Published on: 2025/12/26

A practical vendor-risk program for SMBs: tier vendors, set minimum controls, collect lightweight evidence, and review access on a cadence—without GRC bloat.

Security & Emergency ManagementGovernance, Policy & OversightQuick BriefRisk Management & Threat AnalysisOperations Security (OPSEC) & Sensitive Info ProtectionSupply Chain & Third-Party Security

First 24 Hours of Ransomware: Executive QuickBrief

Aaron Gilmore

Published on: 2025/12/25

What executives must do in the first 24 hours of ransomware: stabilize operations, preserve evidence, manage communications, and set recovery decisions.

Security & Emergency ManagementGovernance, Policy & OversightQuick BriefRisk Management & Threat AnalysisOperations Security (OPSEC) & Sensitive Info ProtectionCybersecurity & Systems SecurityInformation & Data Security

Supply Chain Disruption: 8 Questions in 15 Minutes

Aaron Gilmore

Published on: 2025/12/20

A rapid triage playbook for supply chain disruption. Ask 8 questions in 15 minutes to define impact, options, owners, and next updates—without chaos.

Security & Emergency ManagementQuick BriefRisk Management & Threat AnalysisSupply Chain & Third-Party Security

About Our Content

AI tools assist with research, ideation, and content organization on this blog. All posts are reviewed and approved by our cybersecurity team before publication. Our goal is to provide accurate, actionable insights informed by real-world experience.