https://northstarlabs.ai/news/the-velocity-of-compromise-addressing-the-washburn-county-telecommunic-3bn8 North Star Labs en 2026-08-12T19:04:06.652Z the velocity of compromise: addressing the washburn county telecommunications outage telecommunications, lotl, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-compromise-re-evaluating-dwell-time-in-the-retail-sect-6zss North Star Labs en 2026-08-12T19:04:06.469Z the velocity of compromise: re-evaluating dwell time in the retail sector retail_ecommerce, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/defending-the-water-sector-visibility-as-a-requirement-for-resilience-5yq6 North Star Labs en 2026-08-12T19:03:54.371Z defending the water sector: visibility as a requirement for resilience water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-gap-on-critical-infrastructure-addressing-the-ransomware-d-31so North Star Labs en 2026-08-12T19:03:52.615Z Closing the gap on critical infrastructure: addressing the ransomware dwell-time collapse critical_infrastructure, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-unseen-bridge-closing-the-supply-chain-gap-in-manufacturing-ot-5i6e North Star Labs en 2026-08-12T19:03:51.596Z the unseen bridge: closing the supply chain gap in manufacturing ot manufacturing_ot, supply_chain, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-trust-why-visibility-into-logistics-partnerships-matte-cafs North Star Labs en 2026-08-12T19:03:48.836Z the velocity of trust: why visibility into logistics partnerships matters more than perimeters retail_ecommerce, supply_chain, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-crisis-anmed-and-the-hidden-math-of-lateral-movement-b1k2 North Star Labs en 2026-08-12T19:03:47.966Z the dwell time crisis: anmed and the hidden math of lateral movement healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-responding-to-the-unlimited-technology-systems-eg5s North Star Labs en 2026-08-12T19:03:47.458Z the dwell time collapse: responding to the unlimited technology systems breach healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-hidden-dwell-time-securing-public-safety-communication-against-net-ltg6 North Star Labs en 2026-08-12T19:03:47.038Z the hidden dwell time: securing public safety communication against network-layer compromise telecommunications, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-production-gap-securing-industrial-environments-against-un-47jh North Star Labs en 2026-08-12T19:03:46.308Z Closing the production gap: securing industrial environments against unauthorized command execution manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-architecture-of-visibility-in-financial-infrastructure-addressing--wvhg North Star Labs en 2026-08-12T19:03:45.825Z the architecture of visibility in financial infrastructure: addressing the river bank & trust incident banking, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-operational-imperative-stopping-enterprise-to-ot-movement-in-the-m-h25q North Star Labs en 2026-08-12T19:03:45.450Z the operational imperative: stopping enterprise-to-ot movement in the manufacturing sector manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-unseen-pivot-defending-municipal-infrastructure-against-lateral-mo-mi38 North Star Labs en 2026-08-12T19:03:45.100Z the unseen pivot: defending municipal infrastructure against lateral movement federal_defense, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-exposure-why-current-transportation-networks-miss-the--ujrp North Star Labs en 2026-08-12T11:03:48.770Z the velocity of exposure: why current transportation networks miss the internal pivot transportation, staged_exfiltration, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-logistics-of-dwell-time-why-warehouse-fulfillment-resilience-depen-3j5i North Star Labs en 2026-08-12T11:03:43.655Z the logistics of dwell time: why warehouse fulfillment resilience depends on network-layer clarity retail_ecommerce, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-silent-pivot-securing-cloud-infrastructure-after-a-supply-chain-br-1cgn North Star Labs en 2026-08-12T11:03:40.472Z the silent pivot: securing cloud infrastructure after a supply chain breach identity_secrets, supply_chain, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-analyzing-the-lateral-movement-at-family-medic-nm9c North Star Labs en 2026-08-12T11:03:39.424Z the dwell time collapse: analyzing the lateral movement at family medical associates healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-speed-of-collapse-defending-manufacturing-networks-against-the-anu-vkz6 North Star Labs en 2026-08-12T11:03:38.505Z the speed of collapse: defending manufacturing networks against the anubis timeline manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-architecture-of-collapse-responding-to-systemic-government-shutdow-35p9 North Star Labs en 2026-08-12T11:03:37.047Z the architecture of collapse: responding to systemic government shutdowns state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-logistics-of-resilience-defending-critical-port-infrastructure-aga-qoil North Star Labs en 2026-08-12T11:03:35.882Z the logistics of resilience: defending critical port infrastructure against accelerated lateral movement manufacturing_ot, living-off-the-land (lotl), SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/beyond-the-perimeter-shifting-the-focus-from-entry-to-movement-in-the--c5tu North Star Labs en 2026-08-12T11:03:35.449Z beyond the perimeter: shifting the focus from entry to movement in the dentaquest breach healthcare, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/visibility-beyond-the-edge-defending-programmable-logic-controllers-ag-ocur North Star Labs en 2026-08-12T11:03:35.429Z Visibility beyond the edge: defending programmable logic controllers against unauthorized access identity_secrets, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-collapse-responding-to-the-unlimited-technology-systems-juum North Star Labs en 2026-08-12T11:03:35.083Z the dwell time collapse: responding to the unlimited technology systems breach healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/closing-the-dwell-time-gap-at-sawyer-savings-bank-myr2 North Star Labs en 2026-08-12T11:03:34.937Z Closing the dwell time gap at sawyer savings bank financial_services, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-silent-pivot-securing-manufacturing-s-invisible-ot-pathways-ockd North Star Labs en 2026-08-12T11:03:34.589Z the silent pivot: securing manufacturing's invisible OT pathways manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-paradox-why-the-speed-of-network-lateral-movement-has-o-xygi North Star Labs en 2026-08-12T11:03:33.699Z the dwell time paradox: why the speed of network lateral movement has outpaced enterprise visibility enterprise, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, US Air Force deployment https://northstarlabs.ai/news/the-dwell-time-collapse-analyzing-the-hospital-facebook-hijack-and-exf-op2b North Star Labs en 2026-08-12T01:04:08.626Z the dwell time collapse: analyzing the hospital Facebook hijack and exfiltration healthcare, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-velocity-of-collapse-why-network-visibility-is-the-final-defensive-2wkg North Star Labs en 2026-08-12T01:04:07.975Z the velocity of collapse: why network visibility is the final defensive frontier for oklahoma manufacturing alliance manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-dwell-how-supportive-insurance-services-highlights-the-coll-qym7 North Star Labs en 2026-08-12T01:04:07.749Z the silent dwell: how supportive insurance services highlights the collapse of the defender's timeline insurance, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/breaking-the-timeline-stopping-gunra-ransomware-through-network-layer--8qyr North Star Labs en 2026-08-12T01:04:07.140Z breaking the timeline: stopping gunra ransomware through network-layer behavioral analysis financial_services, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-velocity-of-incident-response-a-critical-failure-in-municipal-defe-zpg4 North Star Labs en 2026-08-12T01:04:06.709Z the velocity of incident response: a critical failure in municipal defense state_local, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-gap-on-lateral-movement-analyzing-the-gentlekiller-tool-in-t70x North Star Labs en 2026-08-12T01:04:06.706Z Closing the gap on lateral movement: analyzing the GentleKiller tool in MSP environments cloud_msp, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-case-for-lateral-visibility-in-the-wake-of-the-kean-university-inc-xbsf North Star Labs en 2026-08-12T01:04:06.698Z the case for lateral visibility in the wake of the kean university incident higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-visibility-gap-in-critical-infrastructure-the-reality-of-u-2zbe North Star Labs en 2026-08-12T01:04:06.443Z Closing the visibility gap in critical infrastructure: the reality of unmanaged assets federal_defense, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-navigation-of-critical-infrastructure-responding-to-the-mul-7pcm North Star Labs en 2026-08-12T01:04:02.726Z the silent navigation of critical infrastructure: responding to the multi-state water system attacks state_local, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-legacy-system-blind-spot-why-the-unlimited-systems-breach-was-an-a-hxeu North Star Labs en 2026-08-12T01:04:01.021Z the legacy system blind spot: why the unlimited systems breach was an architectural inevitability insurance, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-anatomy-of-silence-dissecting-the-naic-exfiltration-timeline-ggmy North Star Labs en 2026-08-12T01:04:00.298Z the anatomy of silence: dissecting the NAIC exfiltration timeline insurance, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/securing-the-silent-network-shifting-defense-from-the-perimeter-to-int-qgma North Star Labs en 2026-08-12T01:03:59.577Z securing the silent network: shifting defense from the perimeter to internal behavioral telemetry in water utilities water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-defense-addressing-the-gunra-ransomware-campaign-juhi North Star Labs en 2026-08-12T01:03:59.315Z the velocity of defense: addressing the gunra ransomware campaign financial_services, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-detection-gap-on-gunra-ransomware-internal-movement-20be North Star Labs en 2026-08-12T01:03:58.579Z Closing the detection gap on Gunra ransomware internal movement federal_defense, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-network-layer-reality-of-municipal-infrastructure-compromise-4q8z North Star Labs en 2026-08-12T01:03:58.408Z the network-layer reality of municipal infrastructure compromise state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-silent-pivot-addressing-the-rise-of-higher-education-ransomware-p501 North Star Labs en 2026-08-11T19:04:04.761Z the silent pivot: addressing the rise of higher education ransomware higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/beyond-the-credentials-how-lateral-movement-exposes-the-limits-of-peri-ataj North Star Labs en 2026-08-11T19:04:04.429Z beyond the credentials: how lateral movement exposes the limits of perimeter security retail_ecommerce, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-architecture-of-persistence-addressing-the-network-layer-blind-spo-f843 North Star Labs en 2026-08-11T19:04:03.102Z the architecture of persistence: addressing the network-layer blind spots revealed by salt typhoon telecommunications, lotl, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-dwell-time-collapse-why-the-dentaquest-breach-exposes-a-fundamenta-44py North Star Labs en 2026-08-11T19:04:02.783Z the dwell time collapse: why the dentaquest breach exposes a fundamental flaw in healthcare security healthcare, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-logistics-of-lateral-movement-rethinking-visibility-in-the-warehou-p9q5 North Star Labs en 2026-08-11T19:03:58.356Z the logistics of lateral movement: rethinking visibility in the warehouse network retail_ecommerce, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/beyond-the-credential-securing-the-network-path-when-authentication-is-fxuo North Star Labs en 2026-08-11T19:03:55.814Z beyond the credential: securing the network path when authentication is compromised identity_secrets, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-architecture-of-collapse-responding-to-the-suisun-city-service-dis-i0g2 North Star Labs en 2026-08-11T19:03:55.769Z the architecture of collapse: responding to the suisun city service disruption state_local, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-ghostsplice-reality-securing-the-network-against-compromised-ai-as-lpjv North Star Labs en 2026-08-11T19:03:55.424Z the ghostsplice reality: securing the network against compromised ai assistants identity_secrets, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-logistics-of-silence-addressing-the-visibility-gap-in-transportati-qttc North Star Labs en 2026-08-11T19:03:55.360Z the logistics of silence: addressing the visibility gap in transportation networks transportation, staged_exfiltration, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-speed-gap-responding-to-the-august-2026-financial-sector-breaches-x889 North Star Labs en 2026-08-11T19:03:55.173Z the speed gap: responding to the august 2026 financial sector breaches financial_services, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-dwell-time-collapse-rethinking-the-breach-of-the-change-healthcare-0n63 North Star Labs en 2026-08-11T19:03:55.001Z the dwell time collapse: rethinking the breach of the Change Healthcare perimeter healthcare, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-edge-exploitation-gap-why-load-balancer-compromise-demands-network-q9eq North Star Labs en 2026-08-11T19:03:54.855Z the edge exploitation gap: why load balancer compromise demands network-layer visibility retail_ecommerce, zero_day_post_exploit, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-case-for-lateral-visibility-in-an-era-of-rapid-institutional-compr-v2hs North Star Labs en 2026-08-11T19:03:54.778Z the case for lateral visibility in an era of rapid institutional compromise higher_education, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-silent-fracture-why-network-visibility-is-the-missing-link-in-crit-3pim North Star Labs en 2026-08-11T19:03:54.488Z the silent fracture: why network visibility is the missing link in critical infrastructure resilience telecommunications, lotl, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-hidden-architecture-of-hospital-risk-why-legacy-medical-devices-de-oja5 North Star Labs en 2026-08-11T19:03:54.339Z the hidden architecture of hospital risk: why legacy medical devices demand a new visibility layer healthcare, unmanaged_ot_iot, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-unseen-pivot-defending-telecommunications-edge-infrastructure-agai-den0 North Star Labs en 2026-08-11T19:03:54.232Z the unseen pivot: defending telecommunications edge infrastructure against os command injection telecommunications, zero_day_post_exploit, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-collapsed-timeline-defending-water-infrastructure-against-the-new--fpr5 North Star Labs en 2026-08-11T19:03:54.196Z the collapsed timeline: defending water infrastructure against the new pace of operational disruption manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/bridging-the-visibility-gap-securing-the-manufacturing-supply-chain-ag-j4hv North Star Labs en 2026-08-11T19:03:53.745Z bridging the visibility gap: securing the manufacturing supply chain against IT-to-OT escalation manufacturing_ot, ransomware_staging, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-visibility-tax-why-saas-environments-become-blind-spots-for-the-en-or21 North Star Labs en 2026-08-11T15:26:01.190Z the visibility tax: why saas environments become blind spots for the enterprise enterprise, cloud_east_west, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-visibility-tax-why-the-amgen-breach-signals-a-collapse-in-defensiv-j71u North Star Labs en 2026-08-11T11:03:59.703Z the visibility tax: why the amgen breach signals a collapse in defensive speed healthcare, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-architecture-of-authorized-access-how-network-telemetry-reveals-th-asfw North Star Labs en 2026-08-11T11:03:51.835Z the architecture of authorized access: how network telemetry reveals the invisible breach identity_secrets, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-dwell-time-crisis-closing-the-visibility-gap-in-financial-infrastr-4bql North Star Labs en 2026-08-11T11:03:51.555Z the dwell time crisis: closing the visibility gap in financial infrastructure financial_services, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-gap-between-breach-event-and-detection-x0gw North Star Labs en 2026-08-11T11:03:51.056Z Closing the gap between breach event and detection federal_defense, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-gap-on-internal-reconnaissance-an-architectural-response-t-otq3 North Star Labs en 2026-08-11T11:03:50.371Z Closing the gap on internal reconnaissance: an architectural response to the financial guys breach financial_services, cloud_east_west, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-architecture-of-visibility-why-credentials-are-the-start-but-not-t-jzbu North Star Labs en 2026-08-11T11:03:50.286Z the architecture of visibility: why credentials are the start, but not the end, of the kill chain telecommunications, staged_exfiltration, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-unseen-transition-identifying-adversary-movement-in-critical-water-3cfu North Star Labs en 2026-08-11T11:03:48.917Z the unseen transition: identifying adversary movement in critical water infrastructure federal_defense, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-window-of-exposure-why-ransomware-staging-demands-layer-2-4-visibi-4z2i North Star Labs en 2026-08-11T11:03:48.510Z the window of exposure: why ransomware staging demands layer 2-4 visibility in financial services financial_services, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/beyond-the-credential-the-new-reality-of-post-authentication-network-v-y80q North Star Labs en 2026-08-11T11:03:47.455Z beyond the credential: the new reality of post-authentication network visibility enterprise, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/beyond-the-negotiation-securing-the-internal-network-after-the-instruc-2iyu North Star Labs en 2026-08-11T11:03:44.273Z beyond the negotiation: securing the internal network after the instructure incident higher_education, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-silent-collapse-of-public-safety-networks-a-failure-of-dwell-time-kpt7 North Star Labs en 2026-08-11T11:03:44.048Z the silent collapse of public safety networks: a failure of dwell time telecommunications, lotl, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-architecture-of-persistence-addressing-the-network-layer-blind-spo-ztrt North Star Labs en 2026-08-11T11:03:43.978Z the architecture of persistence: addressing the network-layer blind spots in modern telecommunications telecommunications, low_slow_c2, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-hidden-path-of-lateral-movement-responding-to-the-national-water-u-1syo North Star Labs en 2026-08-11T11:03:43.975Z the hidden path of lateral movement: responding to the national water utility incidents state_local, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-kill-chain-beyond-the-vpn-why-lateral-movement-remains-the-primary-tuk0 North Star Labs en 2026-08-11T11:03:43.972Z the kill chain beyond the vpn: why lateral movement remains the primary battleground retail_ecommerce, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-silent-collapse-of-municipal-dwell-time-lessons-from-the-wincheste-sh8n North Star Labs en 2026-08-11T11:03:43.903Z the silent collapse of municipal dwell time: lessons from the winchester breach state_local, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-architecture-of-collapse-addressing-the-suisun-city-service-disrup-1j7d North Star Labs en 2026-08-11T11:03:43.890Z the architecture of collapse: addressing the suisun city service disruption state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-pivot-point-why-credential-based-breaches-demand-network-layer-scr-9o51 North Star Labs en 2026-08-11T11:03:43.654Z the pivot point: why credential-based breaches demand network-layer scrutiny identity_secrets, credential_stuffing_pivot, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-operational-silence-why-fairlife-and-the-anubis-event-show-that-dw-m1vc North Star Labs en 2026-08-11T11:03:43.230Z the operational silence: why fairlife and the anubis event show that dwell time is a network failure retail_ecommerce, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-dwell-time-crisis-rethinking-response-to-unauthorized-workstation--5w4j North Star Labs en 2026-08-11T11:03:42.849Z the dwell time crisis: rethinking response to unauthorized workstation access enterprise, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-operational-silence-of-controlled-downtime-visibility-as-a-require-z8t3 North Star Labs en 2026-08-11T11:03:42.700Z the operational silence of controlled downtime: visibility as a requirement for recovery healthcare, low_slow_c2, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-silent-collapse-of-security-timelines-in-port-operations-jcnq North Star Labs en 2026-08-11T11:03:42.633Z the silent collapse of security timelines in port operations transportation, lotl, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/detecting-the-move-why-staged-exfiltration-demands-network-layer-visib-h1eb North Star Labs en 2026-08-11T11:03:42.525Z detecting the move: why staged exfiltration demands network-layer visibility retail_ecommerce, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-architecture-of-oversight-reclaiming-visibility-in-the-industrial--a2p4 North Star Labs en 2026-08-11T11:03:42.127Z the architecture of oversight: reclaiming visibility in the industrial sector manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-compromise-addressing-the-ransomware-dwell-time-in-hea-lunc North Star Labs en 2026-08-11T11:03:41.903Z the velocity of compromise: addressing the ransomware dwell time in healthcare infrastructure healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-credentials-you-can-t-control-preventing-lateral-movement-after-a--80dw North Star Labs en 2026-08-11T11:03:41.871Z the credentials you can't control: preventing lateral movement after a mass exposure identity_secrets, credential_stuffing_pivot, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-operational-gap-in-water-infrastructure-detecting-lateral--pkhv North Star Labs en 2026-08-11T11:03:41.338Z Closing the operational gap in water infrastructure: detecting lateral movement where agents cannot reach water, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/closing-the-operational-blind-spot-in-water-infrastructure-defending-a-jkwu North Star Labs en 2026-08-11T11:03:40.952Z Closing the operational blind spot in water infrastructure: defending against prolonged dwell time water, low_slow_c2, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-velocity-of-exfiltration-why-the-assuranceamerica-breach-signals-a-cxzn North Star Labs en 2026-08-11T01:03:41.235Z the velocity of exfiltration: why the assuranceamerica breach signals a structural shift in lateral movement risk insurance, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-anatomy-of-silence-how-lateral-movement-went-undetected-at-unlimit-5kwi North Star Labs en 2026-08-11T01:03:41.176Z the anatomy of silence: how lateral movement went undetected at unlimited technology systems healthcare, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/closing-the-gap-on-internal-reconnaissance-in-healthcare-infrastructur-7jma North Star Labs en 2026-08-11T01:03:39.652Z Closing the gap on internal reconnaissance in healthcare infrastructure healthcare, staged_exfiltration, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-silent-escalation-in-municipal-water-infrastructure-n55l North Star Labs en 2026-08-11T01:03:33.582Z the silent escalation in municipal water infrastructure state_local, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-collapse-of-municipal-response-timelines-lessons-from-suisu-bld7 North Star Labs en 2026-08-11T01:03:32.558Z the silent collapse of municipal response timelines: lessons from suisun city state_local, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/operational-resilience-in-an-era-of-compressed-response-windows-r6qz North Star Labs en 2026-08-11T01:03:30.786Z operational resilience in an era of compressed response windows manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silence-in-the-control-room-visibility-as-a-baseline-for-critical--0oxg North Star Labs en 2026-08-11T01:03:30.753Z the silence in the control room: visibility as a baseline for critical infrastructure critical_infrastructure, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-pivot-securing-critical-water-infrastructure-beyond-the-end-ogzf North Star Labs en 2026-08-11T01:03:30.652Z the silent pivot: securing critical water infrastructure beyond the endpoint state_local, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-operational-cost-of-visibility-gaps-lessons-from-the-jps-health-ne-c8vk North Star Labs en 2026-08-11T01:03:30.565Z the operational cost of visibility gaps: lessons from the jps health network outage healthcare, ransomware_staging, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment https://northstarlabs.ai/news/the-hidden-path-to-the-plant-floor-why-network-layer-visibility-is-the-swi5 North Star Labs en 2026-08-11T01:03:30.372Z the hidden path to the plant floor: why network-layer visibility is the new perimeter for ot security manufacturing_ot, unmanaged_ot_iot, SolarWinds-pattern lateral movement detected in 3 days versus 14 months in blind retrospective testing https://northstarlabs.ai/news/the-silent-path-identifying-autonomous-agent-lateral-movement-through--43u7 North Star Labs en 2026-08-11T01:03:30.003Z the silent path: identifying autonomous agent lateral movement through network telemetry identity_secrets, lotl, 2.5 million SIEM alerts reduced to 5 actionable findings in under 20 minutes, 33rd COS deployment