Hardening Library

Security research, tutorials, and product updates from the Retrievy team

Multi-cloud security, FortiGate hardening, AD/identity risk, and configuration drift. Written by operators for operators.

Filters: #windows-security × Clear all

3 articles match

of 34 total

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

Threat Intel

May 28, 2026 3 min read

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

The Gentlemen ransomware, deployed by Storm-2697 affiliates, is a Go-based encryptor that combines ephemeral per-file key encryption with aggressive built-in lateral movement to self-propagate across networks without operator intervention.

Retrievy Team

Read Now

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

Threat Intel

May 21, 2026 3 min read

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

Microsoft has issued a mitigation for CVE-2026-45585, a publicly disclosed BitLocker bypass zero-day dubbed YellowKey, while a full patch is still pending. CVSS 6.8 understates the risk for encrypted-disk-dependent security models.

Retrievy Team

Read Now

Password Resets Alone Won't Evict Attackers From Active Directory

Threat Intel

May 11, 2026 4 min read

Password Resets Alone Won't Evict Attackers From Active Directory

Cached credentials and live Kerberos tickets mean a compromised AD account stays exploitable long after a password reset. Here's what operators need to do instead.

Retrievy Team

Read Now

Security research, tutorials, and product updates from the Retrievy team

Storm-2697's Go Ransomware Spreads Itself Across Your Entire Network

YellowKey CVE-2026-45585 Bypasses BitLocker Before a Patch Lands

Password Resets Alone Won't Evict Attackers From Active Directory

Cookie Preferences