Storagepipe Is Now Thrive

GridWay Is Now Thrive

Threat Intelligence

Qilin has come a long way since emerging in 2022. This Ransomware-as-a-Service operation has grown into one of the most active and damaging threats facing enterprise organizations today, with a particular focus on healthcare, manufacturing, and education. The…

Amber Atkins, incident response analyst
April 29, 2026 5 Min Read

In the theater of modern cybersecurity, there is no irony more bitter than a defensive shield being sharpened into a spear. “BlueHamme...

Simon White, Incident Response Team Lead
April 15, 2026 4 Min Read

While routine CI/CD pipelines ran and developer machines updated their dependencies, a state-sponsored actor had already poisoned one of the...

Christopher Clark, Cybersecurity Incident Responder and Threat Hunter
April 1, 2026 6 Min Read
Subscribe Via Email

While Handala’s wiper operation made headlines, a stealthier and more dangerous campaign was already underway. Iran’s Seedworm group has quietly pre-positioned inside U.S. and Israeli critical infrastructure and the clock is ticking.  The Quieter Campaign  When the Handala wiper operation hit Stryker…

Christopher Clark, Cybersecurity Incident Responder and Threat Hunter
March 20, 2026 6 Min Read

A Fortune 500 medical technology giant left with 200,000 wiped devices, surgical supply chains halted, and cardiac monitoring systems taken offline — all without a single line of malware touching the network. This post is…

Christopher Clark, Cybersecurity Incident Responder and Threat Hunter
March 13, 2026 6 Min Read