News & Analysis

North Star Labs on the events that matter.

Name: CyPhER
Brand: North Star Labs

Short, technical position pieces responding to current security news — what it means, where it leaves you exposed, and what our network-layer detection can do about it.

Transportation6 Healthcare6 Enterprise Security5 Critical Infrastructure5 State & Local Government5 Water & Utilities4 Manufacturing / OT / ICS4 Banking & Financial Services3 Federal & Defense3 Retail & E-commerce3 Financial Services2 Higher Education2 Identity & Secrets Management1 Telecommunications1 Cloud / MSP / MSSP0 Insurance0

Threat trackers: US water cyberattacks · OT & ICS cyberattacks

lotl (living-off-the-land)

the hidden costs of dwell time: re-evaluating visibility in healthcare networks

The Department of Health and Human Services announced that hospitals and health systems can delegate the responsibility of notifying patients about stolen data to UnitedHealth Group following the February 2024 Change Healthcare cyberattack.

AHA News· Sep 21, 2026, 1:03 AM

low_slow_c2

beyond the perimeter: infrastructure defense at the scale of the port of los angeles

The Port of Los Angeles reported blocking over 120 million cyberattacks during August, including attempts at network exploitation, credential harvesting, and malware deployment. The port's cybersecurity team collaborated with private sector partners to mitigate these threats.

North Star Labs on the events that matter.

the hidden costs of dwell time: re-evaluating visibility in healthcare networks

beyond the perimeter: infrastructure defense at the scale of the port of los angeles

the silent signal: maritime resilience in the age of invisible infrastructure

beyond the perimeter: shifting the focus to network-layer dwell time in ai infrastructure

the architecture of silent privilege escalation: defending active directory via network telemetry

beyond the automated guess: securing the network against ai-driven credential pivot

the hidden dwell time: defending school districts against internal lateral movement

the springfield public schools incident and the shift toward network-layer behavioral analysis

the springfield public schools incident and the shift toward lateral movement detection

Closing the blind spots in maritime industrial control systems

the dwell time collapse: rethinking visibility in telecommunications security

the speed of visibility: why network-layer telemetry changes the bank outage narrative

Closing the operational blind spot: maritime resilience through network-layer visibility

the architecture of visibility: addressing staged exfiltration in financial networks

the logistics of lateral movement: detecting the staging phase in e-commerce infrastructure

the dwell time collapse: why healthcare infrastructure must move beyond perimeter defense

the dwell time collapse: why healthcare infrastructure must move beyond perimeter defense

Closing the gap between token theft and data extraction

the florida dmv breach and the failure of perimeter-based defense

the case for layer 2–4 visibility in manufacturing ot

the silent collapse of dwell time: network-layer visibility in the wake of fiserv

the dwell time collapse: reclaiming network visibility in the banking sector

the operational friction of modern breaches: rethinking visibility in school district security

the case for layer 2–4 visibility in water infrastructure defense

the operational reality of unmanaged industrial devices

the maritime blind spot: moving beyond peripheral defense in critical logistics

the dwell time crisis: network-layer visibility as a manufacturing imperative

Securing maritime critical infrastructure against invisible lateral movement

the meteor disruption: why dwell time has collapsed for critical infrastructure

the water sector's invisible threshold: shifting from perimeter defense to lateral movement visibility

the velocity of defense: securing financial infrastructure against low-slow command-and-control

Closing the gap: why network-layer visibility is the only answer to modern dwell-time collapse

Closing the dwell time window: retail security beyond the perimeter

the maritime blind spot: moving beyond the perimeter in critical navigation infrastructure

Reframing the motor vehicle database breach: visibility into staged exfiltration

beyond the perimeter: maritime connectivity and the reality of the unagentable network

the alabama board of nursing incident and the reality of licensing infrastructure exposure

Bridging the visibility gap: when IT-to-OT transit compromises critical infrastructure

Closing the visibility gap in critical infrastructure: passive telemetry for the modern defense perimeter

Closing the industrial perimeter: why remote access is only the first step for small utilities

Closing the blind spot: maritime resilience through network-layer visibility

Closing the operational blind spot: Lessons from the maritime sector

shifting the advantage: responding to the florida motor vehicle database breach

the operational cost of dwell time: why retail software dependencies demand network-layer visibility

the dwell time collapse: why healthcare infrastructure needs network-layer vigilance

the logistics of trust: visibility gaps in supply chain connectivity

Securing critical water infrastructure: navigating the operational blind spot

the operational cost of dwell time: network-layer vigilance after the boston scientific incident

the silent pivot: securing energy infrastructure against unmanaged lateral movement

the case for layer 2-4 visibility in transit: responding to the la metro incident