Blog:

On 2026-07-30
by Kynan Jones, Incident Responder @ Airbus Protect
Cybersecurity

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you
Intrusion Context Last month, Airbus Protect’s CSIRT responded to an intrusion targeting a vulnerable, internet-facing Windows Server. What began as typical automated scanning quickly transitioned into a targeted attack utilising tools such as SQLMap and vulnerability scanners. By leveraging a flurry of SQL injection attacks, the threat actor successfully enabled xp_cmdshell which facilitated remote code [...]
  • Share

Discover all the latest releases

Knowledge exchange with the State Criminal Police Office of North Rhine-Westphalia in Düsseldorf Cybersecurity

Knowledge exchange with the State Criminal Police Office of North Rhine-Westphalia in Düsseldorf

Back in March this year, an initial knowledge exchange took place between the teams from Airbus Protect and the State Criminal Police Office of North Rhine-Westphalia (LKA NRW), with both being members of the German Federal Association for Information Technology and Telecommunications, Bitkom. At that time, the LKA NRW visited Airbus Protect at the Taufkirchen […]

Read more
A year on from the NHS Ransomware attack Cybersecurity

A year on from the NHS Ransomware Attack

What happened to the NHS a year ago? Let’s find out with Gareth, CTI & Vulnerability Lead at Airbus Protect Introduction to NHS Ransomware Attack A year has passed since the NHS fell victim to a further major ransomware attack which saw their critical NHS 111 service being taken offline alongside management systems for GP […]

Read more
Airbus Protect - Locked Shields exercice Cybersecurity

Airbus Protect at the world’s largest live-fire cyber defence exercise “Locked Shields”

A premiere for Airbus. This year, at the invitation of the Bundeswehr Cyber Security Centre, a team from Airbus Protect took part in the NATO exercise “Locked Shields” for the first time.  What is Locked Shields? The exercise has been conducted annually since 2010 by the “NATO Cooperative Cyber Defence Center of Excellence” (CCDCOE) and […]

Read more