Tag: incident-response

All the articles with the tag "incident-response".

• The Account That Cried VPN

  1 Sep, 2026

  A phishing alert led to a compromised account, tampered refund settings, and five months of VPN and onion-routing noise that turned out to be the user's own. How the pieces came apart, and why the MFA fallback was the weak link.

• The Party Invite That Wasn't: Anatomy of a ScreenConnect Phishing Campaign

  12 Aug, 2026

  A fake e-vite, a compromised sender you actually trust, and a remote access tool that never should have been installed. Six devices, one campaign, and the logical inconsistency that gave it away.

• The Store That Wasn't There

  30 Jul, 2026

  An IDS alert, a personal device, and a skimmer that never got past the door.

• Poisoned at the Source

  8 Jun, 2026

  Someone shared an interesting article. A colleague forwarded it. Three managed devices got wiped before the week was out.