Blog:

On 2026-07-30
by Kynan Jones, Incident Responder @ Airbus Protect
Cybersecurity

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you
Intrusion Context Last month, Airbus Protect’s CSIRT responded to an intrusion targeting a vulnerable, internet-facing Windows Server. What began as typical automated scanning quickly transitioned into a targeted attack utilising tools such as SQLMap and vulnerability scanners. By leveraging a flurry of SQL injection attacks, the threat actor successfully enabled xp_cmdshell which facilitated remote code [...]
  • Share

Discover all the latest releases

Pentest and incident reponse interview Cybersecurity

Cyber insights: Pentest and Incident Response

Today, we asked Felix, Penetration Tester and Philipp, Cyber Security Incident Responder, to talk about their job and how they interact in their day-to-day jobs.

Read more
cyber attack screen Cybersecurity

Planning for the Inevitable: How to Master Your Incident Response

To effectively cope with security breaches, organisations must stand prepared with a reliable plan of action to take back their power and outmanoeuvre ruthless threat actors. But how do you master the art of incident response to ensure your organisation is battle-ready in the face of imminent cyber threats?

Read more