https://northstarlabs.ai/news/closing-the-gap-network-layer-visibility-against-rapid-ransomware-evol-mcmb North Star Labs en 2026-08-20T11:04:25.871Z Closing the gap: network-layer visibility against rapid ransomware evolution higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-blind-spot-monitoring-lateral-movement-in-the-era-of-infil-e404 North Star Labs en 2026-08-20T11:04:24.622Z Closing the blind spot: monitoring lateral movement in the era of infiltrated identities federal_defense, insider_authorized_misuse, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-speed-gap-securing-water-infrastructure-against-lateral-mo-p84d North Star Labs en 2026-08-20T11:04:23.615Z Closing the speed gap: securing water infrastructure against lateral movement critical_infrastructure, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-gap-between-medusa-s-lateral-movement-and-infrastructure-r-p1sb North Star Labs en 2026-08-20T11:04:23.334Z Closing the gap between Medusa's lateral movement and infrastructure response state_local, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/restoring-visibility-to-the-infrastructure-we-depend-on-82q8 North Star Labs en 2026-08-20T11:04:23.061Z Restoring visibility to the infrastructure we depend on water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-gap-on-dwell-time-a-network-layer-approach-to-ransomware-i-v2y1 North Star Labs en 2026-08-20T11:04:22.303Z Closing the gap on dwell time: a network-layer approach to ransomware in healthcare healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-gap-why-higher-education-networks-remain-exposed-to-sta-4jz2 North Star Labs en 2026-08-20T11:04:18.982Z the dwell time gap: why higher education networks remain exposed to staged extortion higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-control-plane-gap-monitoring-industrial-communication-to-p-4cn1 North Star Labs en 2026-08-20T11:04:18.786Z Closing the control plane gap: monitoring industrial communication to prevent unauthorized PLC configuration changes manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/defending-the-insurance-sector-against-the-medusa-ransomware-timeline-wqek North Star Labs en 2026-08-20T11:04:18.415Z defending the insurance sector against the medusa ransomware timeline insurance, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-of-theft-why-lateral-movement-remains-the-blind-spot-in-h-w0uf North Star Labs en 2026-08-20T11:04:18.194Z the velocity of theft: why lateral movement remains the blind spot in higher education security higher_education, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-industrial-pivot-securing-the-edge-beyond-the-endpoint-dv12 North Star Labs en 2026-08-20T11:04:17.802Z the industrial pivot: securing the edge beyond the endpoint cloud_msp, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-trap-why-network-layer-visibility-is-the-only-answer-to-r-fs7v North Star Labs en 2026-08-20T11:04:17.686Z the velocity trap: why network-layer visibility is the only answer to rapid lateral movement cloud_msp, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-logistics-collapse-navigating-the-collapse-of-dwell-time-and-attac-4qev North Star Labs en 2026-08-20T11:04:17.479Z the logistics collapse: navigating the collapse of dwell time and attacker timelines retail_ecommerce, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-silent-path-network-layer-visibility-against-the-storm-ransomware--tv0e North Star Labs en 2026-08-20T11:04:17.078Z the silent path: network-layer visibility against the storm ransomware group insurance, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-case-for-layer-2-4-visibility-in-municipal-service-resilience-5zbt North Star Labs en 2026-08-20T11:04:17.049Z the case for layer 2-4 visibility in municipal service resilience state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-case-for-layer-2-4-visibility-in-the-wake-of-the-new-jersey-munici-3dab North Star Labs en 2026-08-20T11:04:16.694Z the case for layer 2-4 visibility in the wake of the new jersey municipal water incident state_local, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-control-system-perimeter-why-network-visibility-is-the-fin-lgm7 North Star Labs en 2026-08-20T11:04:16.603Z Closing the control system perimeter: why network visibility is the final defensive frontier for OT operators manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-dwell-time-gap-in-healthcare-infrastructure-8dgh North Star Labs en 2026-08-20T11:04:16.585Z Closing the dwell time gap in healthcare infrastructure healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-architecture-of-silence-addressing-staged-exfiltration-in-telecomm-m8hg North Star Labs en 2026-08-20T11:04:16.168Z the architecture of silence: addressing staged exfiltration in telecommunications telecommunications, staged_exfiltration, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/securing-the-silent-layer-defending-water-infrastructure-from-lateral--jsug North Star Labs en 2026-08-20T11:04:15.755Z Securing the silent layer: defending water infrastructure from lateral movement critical_infrastructure, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/beyond-the-perimeter-reframing-the-ransomware-timeline-at-the-universi-o1yk North Star Labs en 2026-08-20T11:04:15.131Z beyond the perimeter: reframing the ransomware timeline at the university of mississippi medical center healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-operational-silence-of-port-infrastructure-closing-the-detection-g-p56n North Star Labs en 2026-08-20T11:04:14.548Z the operational silence of port infrastructure: closing the detection gap at the network layer transportation, low_slow_c2, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-municipal-infrastructure-blind-spot-beyond-the-internet-ex-j7hv North Star Labs en 2026-08-20T01:04:22.384Z Closing the municipal infrastructure blind spot: beyond the internet-exposed device state_local, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-main-street-bank-breach-identifying-the-signal-in-the-staging-phas-upi4 North Star Labs en 2026-08-20T01:04:12.676Z the main street bank breach: identifying the signal in the staging phase banking, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-hidden-path-securing-water-utilities-through-network-layer-vigilan-dj9y North Star Labs en 2026-08-20T01:04:12.505Z the hidden path: securing water utilities through network-layer vigilance critical_infrastructure, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-staging-crisis-re-evaluating-visibility-in-financial-cloud--1j7u North Star Labs en 2026-08-20T01:04:10.978Z the silent staging crisis: re-evaluating visibility in financial cloud environments financial_services, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-visibility-deficit-in-critical-water-infrastructure-8znr North Star Labs en 2026-08-20T01:04:10.384Z the visibility deficit in critical water infrastructure critical_infrastructure, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/beyond-the-perimeter-understanding-supply-chain-risk-through-network-l-6ie0 North Star Labs en 2026-08-20T01:04:09.828Z beyond the perimeter: understanding supply chain risk through network-layer behavior retail_ecommerce, supply_chain, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-identity-of-the-breach-why-aws-workload-movement-remains-the-defin-3t27 North Star Labs en 2026-08-20T01:04:05.181Z the identity of the breach: why AWS workload movement remains the definitive blind spot identity_secrets, cloud_east_west, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-operational-technology-gap-visibility-for-unmanaged-indust-1jcg North Star Labs en 2026-08-20T01:04:04.975Z Closing the operational technology gap: visibility for unmanaged industrial assets manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/passive-visibility-and-the-collapse-of-the-municipal-response-timeline-ljuy North Star Labs en 2026-08-20T01:04:04.815Z passive visibility and the collapse of the municipal response timeline state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-of-defense-intercepting-gunra-ransomware-at-the-network-l-qlhk North Star Labs en 2026-08-20T01:04:04.672Z the velocity of defense: intercepting gunra ransomware at the network layer federal_defense, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-silent-window-shifting-campus-resilience-from-recovery-to-network--dy6s North Star Labs en 2026-08-20T01:04:04.586Z the silent window: shifting campus resilience from recovery to network-layer detection higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-production-network-turning-visibility-into-a-defensive-advantage-a-elzk North Star Labs en 2026-08-20T01:04:04.369Z the production network: turning visibility into a defensive advantage after the fairlife event manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-architecture-of-visibility-neutralizing-lateral-movement-in-higher-e3qy North Star Labs en 2026-08-20T01:04:04.094Z the architecture of visibility: neutralizing lateral movement in higher education infrastructure higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-cl0p-campaigns-and-the-collapse-of-the-dwell-time-advantage-q7tn North Star Labs en 2026-08-20T01:04:04.022Z the cl0p campaigns and the collapse of the dwell-time advantage enterprise, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-case-for-layer-2-4-visibility-in-the-wake-of-the-suisun-city-incid-u1ri North Star Labs en 2026-08-20T01:04:03.950Z the case for layer 2-4 visibility in the wake of the suisun city incident state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-of-compromise-rethinking-defense-for-the-storm-ransomware-gshc North Star Labs en 2026-08-20T01:04:03.916Z the velocity of compromise: rethinking defense for the storm ransomware lifecycle insurance, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-visibility-gap-in-financial-infrastructure-sf7q North Star Labs en 2026-08-20T01:04:03.659Z Closing the visibility gap in financial infrastructure financial_services, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-silent-pivot-addressing-lateral-movement-in-academic-environments-nu23 North Star Labs en 2026-08-20T01:04:03.450Z the silent pivot: addressing lateral movement in academic environments higher_education, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-windows-socket-driver-flaw-and-the-necessity-of-network-layer-beha-mibz North Star Labs en 2026-08-20T01:04:01.917Z the windows socket driver flaw and the necessity of network-layer behavioral visibility enterprise, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-silent-dwell-time-network-layer-visibility-in-the-face-of-no-click-t8jv North Star Labs en 2026-08-20T01:04:01.596Z the silent dwell time: network-layer visibility in the face of no-click exploits federal_defense, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/breaking-the-municipal-dwell-time-cycle-through-network-layer-detectio-kqqg North Star Labs en 2026-08-19T19:04:11.034Z breaking the municipal dwell time cycle through network-layer detection state_local, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-crisis-why-lateral-movement-remains-invisible-after-the-vmds North Star Labs en 2026-08-19T19:04:00.687Z the dwell time crisis: why lateral movement remains invisible after the initial breach identity_secrets, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-of-defense-preventing-campus-infrastructure-collapse-thro-5ca9 North Star Labs en 2026-08-19T19:04:00.567Z the velocity of defense: preventing campus infrastructure collapse through network-layer vigilance higher_education, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-ptc-windchill-compromise-shifting-from-perimeter-defense-to-latera-cdvc North Star Labs en 2026-08-19T19:03:59.670Z the PTC windchill compromise: shifting from perimeter defense to lateral movement visibility identity_secrets, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-why-healthcare-network-visibility-must-move-be-rc0b North Star Labs en 2026-08-19T19:03:52.665Z the dwell time collapse: why healthcare network visibility must move beyond the perimeter healthcare, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-logistics-collapse-why-network-visibility-is-the-only-answer-to-co-hs5g North Star Labs en 2026-08-19T19:03:52.579Z the logistics collapse: why network visibility is the only answer to compressed dwell time retail_ecommerce, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-operational-cost-of-reactive-containment-visibility-gaps-in-univer-7gyh North Star Labs en 2026-08-19T19:03:52.540Z the operational cost of reactive containment: visibility gaps in university infrastructure higher_education, living-off-the-land (lotl), 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-logistics-breach-and-the-reality-of-staged-exfiltration-yc2j North Star Labs en 2026-08-19T19:03:50.980Z the logistics breach and the reality of staged exfiltration retail_ecommerce, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-of-failure-securing-the-modern-university-against-lateral-2eq5 North Star Labs en 2026-08-19T19:03:50.908Z the velocity of failure: securing the modern university against lateral movement higher_education, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-gap-between-access-and-impact-in-municipal-water-infrastru-amim North Star Labs en 2026-08-19T19:03:50.164Z Closing the gap between access and impact in municipal water infrastructure water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-control-system-blind-spot-learning-from-the-new-jersey-mun-jhaq North Star Labs en 2026-08-19T19:03:50.039Z Closing the control system blind spot: learning from the New Jersey municipal water attacks manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-blind-spot-monitoring-the-unmanaged-edge-in-critical-infra-84cw North Star Labs en 2026-08-19T19:03:49.865Z Closing the blind spot: monitoring the unmanaged edge in critical infrastructure critical_infrastructure, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-collapse-why-healthcare-network-visibility-determines-t-54kp North Star Labs en 2026-08-19T19:03:49.809Z the dwell time collapse: why healthcare network visibility determines the outcome of ransomware attacks healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-logistics-of-digital-visibility-how-transport-networks-fall-behind-zrbj North Star Labs en 2026-08-19T19:03:49.023Z the logistics of digital visibility: how transport networks fall behind in the speed of response transportation, low_slow_c2, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/collapsing-the-dwell-time-gap-network-visibility-against-medusa-operat-isik North Star Labs en 2026-08-19T11:03:56.551Z Collapsing the dwell time gap: network visibility against Medusa operations federal_defense, Ransomware staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-managing-the-reality-of-cve-2026-71362-bqnq North Star Labs en 2026-08-19T11:03:52.240Z the dwell time collapse: managing the reality of cve-2026-71362 retail_ecommerce, zero_day_post_exploit, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/bridging-the-gap-securing-the-convergence-of-it-and-ot-environments-o358 North Star Labs en 2026-08-19T11:03:51.722Z bridging the gap: securing the convergence of it and ot environments manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-infrastructure-blind-spot-why-lateral-movement-remains-the-primary-9cnx North Star Labs en 2026-08-19T11:03:51.217Z the infrastructure blind spot: why lateral movement remains the primary risk to water utilities federal_defense, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-gap-on-lateral-movement-in-telecommunications-infrastructu-w9vz North Star Labs en 2026-08-19T11:03:46.950Z Closing the gap on lateral movement in telecommunications infrastructure telecommunications, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-case-for-deterministic-visibility-shifting-the-municipal-defense-t-nms6 North Star Labs en 2026-08-19T11:03:45.860Z the case for deterministic visibility: shifting the municipal defense timeline state_local, living-off-the-land (lotl), 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-crisis-insurance-sector-resilience-in-the-era-of-latera-6x0w North Star Labs en 2026-08-19T11:03:45.545Z the dwell time crisis: insurance sector resilience in the era of lateral movement insurance, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-logistics-breach-at-ceva-logistics-exposing-the-reality-of-lateral-034q North Star Labs en 2026-08-19T11:03:45.248Z The logistics breach at Ceva Logistics: exposing the reality of lateral movement in retail supply chains retail_ecommerce, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/beyond-the-initial-breach-stopping-medusa-before-the-encryption-phase-9pm1 North Star Labs en 2026-08-19T11:03:44.833Z beyond the initial breach: stopping medusa before the encryption phase identity_secrets, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-vendor-visibility-gap-identifying-unauthorized-movement-in-financi-yo7j North Star Labs en 2026-08-19T11:03:44.432Z the vendor visibility gap: identifying unauthorized movement in financial infrastructure financial_services, supply_chain, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-crisis-securing-core-financial-infrastructure-against-l-dlet North Star Labs en 2026-08-19T11:03:44.226Z the dwell time crisis: securing core financial infrastructure against lateral movement financial_services, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-rethinking-institutional-security-against-sile-ityr North Star Labs en 2026-08-19T11:03:44.167Z the dwell time collapse: rethinking institutional security against silent actors higher_education, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-crisis-in-retail-lessons-from-the-sam-pack-auto-group-i-7vyr North Star Labs en 2026-08-19T11:03:43.845Z the dwell time crisis in retail: lessons from the sam pack auto group incident retail_ecommerce, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-identification-of-the-bpfdoor-backdoor-and-the-erosion-of-the-dete-m2qx North Star Labs en 2026-08-19T11:03:43.838Z the identification of the bpfdoor backdoor and the erosion of the detection timeline enterprise, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-gap-neutralizing-staged-exfiltration-at-the-network-layer-74ra North Star Labs en 2026-08-19T01:04:28.074Z the velocity gap: neutralizing staged exfiltration at the network layer financial_services, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dissolving-perimeter-reclaiming-control-in-the-face-of-inescapable-3vd4 North Star Labs en 2026-08-19T01:04:27.972Z The Dissolving Perimeter: Reclaiming Control in the Face of Inescapable Lateral Movement higher_education, Living-off-the-land, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-building-automation-gap-why-network-telemetry-is-the-missing-link--4krq North Star Labs en 2026-08-19T01:04:21.775Z the building automation gap: why network telemetry is the missing link in ot security manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-gap-why-lateral-movement-remains-visible-long-after-the-forz North Star Labs en 2026-08-19T01:04:14.277Z the dwell time gap: why lateral movement remains visible long after the breach cloud_msp, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-prolific-hacking-group-attacks-and-the-breakdown-of-the-enterprise-k6a8 North Star Labs en 2026-08-19T01:04:12.055Z the prolific hacking group attacks and the breakdown of the enterprise response timeline enterprise, zero_day_post_exploit, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-why-the-storm-group-breach-demands-a-new-netwo-woy8 North Star Labs en 2026-08-19T01:04:10.400Z the dwell time collapse: why the storm group breach demands a new network vantage point insurance, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-detection-gap-in-retail-ecommerce-lessons-from-the-lifestr-ji53 North Star Labs en 2026-08-19T01:04:10.198Z Closing the detection gap in retail ecommerce: Lessons from the LifeStraw incident retail_ecommerce, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-unseen-pivot-why-telecommunications-core-infrastructure-requires-n-5npa North Star Labs en 2026-08-19T01:04:02.655Z the unseen pivot: why telecommunications core infrastructure requires network-layer visibility telecommunications, low_slow_c2, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-trust-bridging-the-visibility-gap-in-financial-supply--lki7 North Star Labs en 2026-08-19T01:04:02.065Z the velocity of trust: bridging the visibility gap in financial supply chains financial_services, supply_chain, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/beyond-the-edge-securing-the-industrial-network-blind-spot-xwfb North Star Labs en 2026-08-19T01:04:01.848Z beyond the edge: securing the industrial network blind spot manufacturing_ot, lotl, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-crisis-moving-beyond-the-perimeter-in-the-wake-of-carha-o3il North Star Labs en 2026-08-19T01:04:01.636Z the dwell time crisis: moving beyond the perimeter in the wake of carhartt retail_ecommerce, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-operational-cost-of-dwell-time-infrastructure-resilience-after-the-66nj North Star Labs en 2026-08-19T01:04:01.553Z the operational cost of dwell time: infrastructure resilience after the trustage incident insurance, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-unseen-infrastructure-addressing-the-network-layer-blind-spots-in--ajwo North Star Labs en 2026-08-19T01:04:01.544Z the unseen infrastructure: addressing the network-layer blind spots in bulletproof hosting operations cloud_msp, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-hardening-healthcare-networks-against-active-e-pcec North Star Labs en 2026-08-19T01:04:01.532Z the dwell time collapse: hardening healthcare networks against active exploitation healthcare, zero_day_post_exploit, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-hidden-dwell-time-securing-water-treatment-and-critical-infrastruc-bjkc North Star Labs en 2026-08-19T01:04:01.305Z the hidden dwell time: securing water treatment and critical infrastructure from within manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-hidden-cost-of-drift-why-insurers-are-failing-at-dwell-time-o8ns North Star Labs en 2026-08-19T01:04:00.863Z the hidden cost of drift: why insurers are failing at dwell time insurance, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-velocity-of-visibility-addressing-the-university-of-texas-at-san-a-y3cs North Star Labs en 2026-08-18T19:04:29.458Z the velocity of visibility: addressing the university of texas at san antonio system outage higher_education, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-speed-gap-lateral-movement-visibility-in-the-healthcare-se-t3b9 North Star Labs en 2026-08-18T19:04:26.158Z Closing the speed gap: lateral movement visibility in the healthcare sector healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/bridging-the-visibility-gap-the-insurance-sector-s-silent-dwell-time-c-zxv0 North Star Labs en 2026-08-18T19:04:18.366Z bridging the visibility gap: the insurance sector's silent dwell time crisis insurance, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-neutralizing-industrial-scale-extortion-throug-wfsc North Star Labs en 2026-08-18T19:04:18.211Z the dwell time collapse: neutralizing industrial-scale extortion through network-layer visibility cloud_msp, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-architecture-of-silence-why-network-dwell-time-remains-the-ultimat-tzo6 North Star Labs en 2026-08-18T19:04:17.470Z the architecture of silence: why network dwell time remains the ultimate defense blind spot insurance, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-architecture-of-containment-neutralizing-zero-day-persistence-thro-njae North Star Labs en 2026-08-18T19:04:16.805Z the architecture of containment: neutralizing zero-day persistence through network observability cloud_msp, zero_day_post_exploit, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-dwell-time-gap-architectural-defense-for-public-safety-inf-pgj6 North Star Labs en 2026-08-18T19:04:16.655Z Closing the dwell time gap: architectural defense for public safety infrastructure state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-visibility-gap-why-insurance-sector-dwell-time-remains-an-open-inv-k7gq North Star Labs en 2026-08-18T19:04:16.319Z the visibility gap: why insurance sector dwell time remains an open invitation insurance, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-manufacturing-ultimatum-why-lateral-visibility-is-the-only-defense-ae4l North Star Labs en 2026-08-18T19:04:15.758Z the manufacturing ultimatum: why lateral visibility is the only defense against production collapse manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/beyond-the-credential-the-new-reality-of-session-token-bypass-9z6l North Star Labs en 2026-08-18T19:04:15.094Z beyond the credential: the new reality of session-token bypass identity_secrets, credential_stuffing_pivot, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-neutralizing-healthcare-data-exfiltration-thro-vlgr North Star Labs en 2026-08-18T19:04:15.070Z the dwell time collapse: neutralizing healthcare data exfiltration through network-layer behavioral analysis healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-operational-blind-spot-in-municipal-water-infrastructure-e1wi North Star Labs en 2026-08-18T19:04:14.922Z Closing the operational blind spot in municipal water infrastructure water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-paradox-shifting-from-patch-chasing-to-network-layer-de-9v1e North Star Labs en 2026-08-18T19:04:14.855Z the dwell time paradox: shifting from patch-chasing to network-layer detection in manufacturing ot manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-gateway-bridging-the-gap-between-internet-exposed-ot-and-in-ljvj North Star Labs en 2026-08-18T19:04:14.613Z the silent gateway: bridging the gap between internet-exposed ot and internal visibility manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/securing-critical-infrastructure-against-targeted-plc-exploitation-8m3t North Star Labs en 2026-08-18T19:04:12.921Z Securing critical infrastructure against targeted PLC exploitation water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing