SOCI 8B and 8C: Security After the Internet Cable Is Unplugged
Understand SOCI 8B and 8C, phishing-resistant MFA, and OT isolation. Plan secure access and recovery that keep critical infrastructure running without the cloud.
Topic
Incident Response
What to do before, during, and after security incidents.
NSA and FBI Warn on QTFY: What Security Teams Should Do About Chinese Hacker Covert Networks
The NSA, FBI, and Cyber National Mission Force warned that China-linked QTFY actors used QScan, QTRouter, compromised IoT devices, and covert proxy infrastructure to target military, government, telecommunications, higher education, and critical infrastructure networks. The defender lesson is clear: patch fast, reduce exposed operational data, isolate critical systems, and hunt with evidence.
The Hack Wednesday Ritual: A Weekly Vulnerability Response Playbook
Run a focused Hack Wednesday review with an owner-led agenda, exposure checks, verified fixes, and a copyable vulnerability-response handoff for your team.
Miasma Worm Turns Microsoft GitHub Repositories and AI Coding Agents into Supply Chain Risk
The Miasma worm reportedly led GitHub to disable 73 repositories across four Microsoft organizations. The campaign shows how compromised maintainer identity, CI trust, repository configuration, and AI coding agents can become one self-replicating supply chain.
MiniPlasma Shows Why Security Teams Cannot Treat Old Windows Fixes as Closed Forever
MiniPlasma is a newly published Windows privilege-escalation proof of concept that reportedly revives the old CVE-2020-17103 path and turns a standard user foothold into SYSTEM access. The bigger lesson is about patch confidence, regression risk, and why defenders need validation beyond release notes.
Why Every Company Needs a Secure Break-Glass Recovery Path After a Breach
When a breach takes down identity, admin access, or critical systems, companies need a tightly controlled recovery path to restore essential services without improvising under pressure. The answer is not a hidden backdoor. It is a secured, tested break-glass architecture.
The Playbook for Security Incident Aftermath
A strong post-incident response needs more than containment. It needs clarity, communication, and durable operational learning.