Colorado Springs, CO

Your Clarity. Your Strategy. Your Next Step.

Stand2

Security & Emergency Management Blog

Beware the Sandworm: Shai‑Hulud and the New Shape of Package‑Manager Worms

Aaron Gilmore Published on: 2026/01/30

Shai‑Hulud and Sha1‑Hulud 2.0 show how npm worms spread via stolen tokens. Learn how to lock publishing, harden CI, and rotate secrets fast.

Covenant Health Ransomware: The Real Cost of Revised Impact

Aaron Gilmore

Published on: 2026/01/28

When breach impact gets revised upward, the cost isn’t just records—it’s trust, governance, notification waves, and long-tail recovery work. Lessons from Covenant Health.

revised impact breach notification healthcare ransomware impact analysisbreach notification wavesHIPAA breach notification timelineforensic investigation scopecredit monitoring costsincident response governance

China Plant Explosion: First Hours of Incident Command

Aaron Gilmore

Published on: 2026/01/23

What the first hours after a chemical plant explosion require: scene safety, HazMat monitoring, unified command, and protective-action messaging.

chemical plant explosion incident command HazMat first hoursunified commandshelter-in-place vs evacuationperimeter controlpublic informationindustrial incident responseresponder coordination

Port Strike Deadline: Slow-Motion Incident Planning

Aaron Gilmore

Published on: 2026/01/21

Treat port-strike deadlines like countdown incidents: triggers, PACE routing, inventory buffers, and comms cadence to protect deliveries and readiness.

port strike deadline planning ILA–USMX tentative agreementsupply chain disruption mitigationcontinuity planning for labor actionscountdown operationsstakeholder communications