Blog:

On 2026-07-30
by Kynan Jones, Incident Responder @ Airbus Protect
Cybersecurity

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you
Intrusion Context Last month, Airbus Protect’s CSIRT responded to an intrusion targeting a vulnerable, internet-facing Windows Server. What began as typical automated scanning quickly transitioned into a targeted attack utilising tools such as SQLMap and vulnerability scanners. By leveraging a flurry of SQL injection attacks, the threat actor successfully enabled xp_cmdshell which facilitated remote code [...]
  • Share

Discover all the latest releases

Securing EUIBAs

Make European defence strong again

If you want peace, prepare for war The Romans had a saying: if you want peace, prepare for war (Si vis pacem, para bellum). That is precisely why, in the face of current threats, the EU must demonstrate that it is capable of defending itself—and this necessity has recently been confirmed at the political level. [...]

Read more

Sovereign-by-Design: Pillar of Modern Digital Sovereignty

“Data Transfer” or the Risk of Digital Exile In a world where data has become the central strategic asset for societal prosperity and economic competitiveness, a fundamental question arises: who truly holds the keys to our digital future? For a long time, data utility was prioritised at the cost of data control. Today, hosting sensitive [...]

Read more
The Perimeter Paradox: Airport Supply Chains and the Cyber Security and Resilience Bill Cybersecurity

The Perimeter Paradox: Airport Supply Chains and the Cyber Security and Resilience Bill

Regulations for Airports The legislative progression of the UK’s Cyber Security and Resilience Bill represents an aggressive modernisation of the ageing Network and Information Systems (NIS) Regulations 2018. For airport operators, this legislation fundamentally alters the boundaries of legal accountability. While the enforcement mechanisms, with fines capped at the greater of £17 million or 4% [...]

Read more
Replacement of Black Chromium - Qualification of a REACh compliant alternative

Replacement of Black Chromium – Qualification of a REACh compliant alternative

Context: Protecting Tungsten Weights Black chromium is a specific plating applied to tungsten substrates (heavy metal cores) used as balancing weights. These weights are critical for stabilising helicopter rotors and reducing vibrations.  While the coating is non-decorative (matte black) and set up for anti-reflective applications, its primary function here is anti-corrosion. It is widely used [...]

Read more
Beyond the alert: Engineering true resilience through a unified, AI-enhanced SOC Cybersecurity

Beyond the alert: Engineering true resilience through a unified, AI-enhanced SOC

Navigating the modern threat landscape is an ongoing challenge for UK Critical National Infrastructure (CNI) and Government organisations. As cyber threats grow more sophisticated and regulations tighten, the limitations of traditional, isolated "black box" monitoring become more apparent. When a complex incident occurs, a flood of automated notifications is rarely enough to ensure continuity; teams [...]

Read more
The human factor in security architecture Cybersecurity

The human factor in security architecture: Designing for usability without compromising security

In cybersecurity, conversations often focus on advanced threats and complex algorithms. Yet, a crucial element is frequently overlooked: the human factor. No matter how robust a security system, its effectiveness depends on how well it works with the people who use it. This highlights a fundamental challenge: designing for usability without compromising security. The inherent […]

Read more