Colorado Springs, CO

Stand2

Security & Emergency Management Blog

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Covenant Health Ransomware: The Real Cost of Revised Impact

Aaron Gilmore

Published on: 2026/01/28

When breach impact gets revised upward, the cost isn’t just records—it’s trust, governance, notification waves, and long-tail recovery work. Lessons from Covenant Health.

Security & Emergency ManagementIncident Field NotesRisk Management & Threat AnalysisOperations Security (OPSEC) & Sensitive Info ProtectionCybersecurity & Systems SecurityInformation & Data Security

China Plant Explosion: First Hours of Incident Command

Aaron Gilmore

Published on: 2026/01/23

What the first hours after a chemical plant explosion require: scene safety, HazMat monitoring, unified command, and protective-action messaging.

Security & Emergency ManagementGovernance, Policy & OversightIncident Field NotesRisk Management & Threat AnalysisEmergency Preparedness & Resilience

Port Strike Deadline: Slow-Motion Incident Planning

Aaron Gilmore

Published on: 2026/01/21

Treat port-strike deadlines like countdown incidents: triggers, PACE routing, inventory buffers, and comms cadence to protect deliveries and readiness.

Security & Emergency ManagementGovernance, Policy & OversightIncident Field NotesRisk Management & Threat AnalysisWorkforce/Personnel Security (PerSec) & TrustworthinessEmergency Preparedness & Resilience

Starlink Global Outage: Single-Point Software Failures

Aaron Gilmore

Published on: 2026/01/16

Starlink’s July 2025 outage shows “global” systems can share one weak point: the control-plane software that coordinates everything.

Security & Emergency ManagementGovernance, Policy & OversightIncident Field NotesRisk Management & Threat AnalysisInformation & Data SecuritySupply Chain & Third-Party Security

About Our Content

AI tools assist with research, ideation, and content organization on this blog. All posts are reviewed and approved by our cybersecurity team before publication. Our goal is to provide accurate, actionable insights informed by real-world experience.