Experiences of CrowdStrike global IT outage
In July 2024, CrowdStrike’s security software update caused global chaos. This event highlighted the delicate balance between security and system stability.
incident
MedusaLocker ransomware – Part 2
After discussing the nature of ransomware attacks and aspects of MedusaLocker’s behavior, we delve into the malware analysis and explain why it is interesting.
Incident response case study featuring Ryuk and Trickbot (part 2)
This is part 2 of our recent incident response study encountering a Trickbot infection. Initial compromise Right after tricking a user into running the malicious Office macro on their machine, thus gaining code execution, the first stage Trickbot executable is downloaded and executed. The first stage payload is responsible for ...
Startup Safari – Incident Communication
Startup Safari – Incident Communication In recent years more and more data breaches seem to have reached world-wide publicity. Rightly so: after all, most companies collect and store vast amounts of PII for their services (see all the GDPR scare and hissy fit for proof), thus a compromise usually means ...