Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Filters: #incident-response × Clear all

3 articles match

of 34 total

Password Resets Alone Won't Evict Attackers From Active Directory

Threat Intel

May 11, 2026 4 min read

Password Resets Alone Won't Evict Attackers From Active Directory

Cached credentials and live Kerberos tickets mean a compromised AD account stays exploitable long after a password reset. Here's what operators need to do instead.

Retrievy Team

Read Now

Ransomware Hits Backups First — Your Recovery Plan Is the Target

Threat Intel

May 08, 2026 4 min read

Ransomware Hits Backups First — Your Recovery Plan Is the Target

Attackers don't ignore your backups — they hunt them down before triggering encryption. Here's why most backup strategies fail at exactly the moment they're needed most.

Retrievy Team

Read Now

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Threat Intel

May 07, 2026 3 min read

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Iranian threat group MuddyWater is deploying Chaos ransomware as a distraction while conducting actual espionage via Microsoft Teams social engineering — a double-layer deception operators need to account for.

Retrievy Team

Read Now

Security research, tutorials, and product updates from the Retrievy team

Password Resets Alone Won't Evict Attackers From Active Directory

Ransomware Hits Backups First — Your Recovery Plan Is the Target

MuddyWater Hides Espionage Operations Behind Chaos Ransomware Smoke Screen

Cookie Preferences