Credential stuffing attack on our web app – detection and response
We detected a massive credential stuffing attack against our web application last week. Over 2 million login attempts from 15,000 unique IPs in 24 hours.…
The MOVEit breach affected us – sharing our response timeline
Our organization was one of the thousands affected by the MOVEit vulnerability. I want to share our response timeline and lessons learned to help others…
Building an incident response playbook from scratch
I’m building our company’s first incident response playbook and want to make sure I cover all the bases. I’m following NIST SP 800-61 as a…
URGENT: Our company was just hit by ransomware – what do we do?
We discovered this morning that our file servers are encrypted. The ransom note says LockBit and demands 50 BTC. We have about 200 employees and…