Case Study

Disabling the Shield: AV Evasion Techniques

When an attacker tried to weaken Microsoft Defender across a customer's production Azure environment, Critical Start's SOC caught it, reversed it, and shut the door — all in 28 minutes.
Critical Start
May 15, 2026
•
3 min read
No Asterisk, Ep4: Improving Your Microsoft Security Posture: From Risk to Resilience
Webinar

No Asterisk, Ep4: Improving Your Microsoft Security Posture: From Risk to Resilience

83% of security professionals experience breaches despite having tools in place — often due to simple misconfigurations. In this webinar, Critical Start's Field CISO Tim Bandos demonstrates PAT, a free tool that analyzes your entire Microsoft security stack, identifies gaps across identity, endpoint, email and cloud, and shows you exactly what to fix and why.
Tim Bandos
April 17, 2026
•
[CS-TR-26-0401] The Hidden Threat of Unmanaged Machine Identities in Enterprises
Threat Intel

[CS-TR-26-0401] The Hidden Threat of Unmanaged Machine Identities in Enterprises

68% of breaches now involve machine identities. Discover why unmanaged NHIs are your biggest blind spot—and how to secure them.
April 1, 2026
•
Threat Intel

[CS-SA-26-0305] Security Advisory on Axios NPM Compromise

A maintainer account hijack pushed two malicious Axios versions carrying a cross-platform RAT to 83M weekly downloads — attributed with high confidence to DPRK's BlueNoroff/Lazarus Group.
Critical Start Cyber Research Unit
March 31, 2026
•
12 min read
No Asterisk, Ep3: Separating Signal from Hype
Webinar

No Asterisk, Ep3: Separating Signal from Hype

AI vendors promise to eliminate alert fatigue. Critical Start's research shows false positive rates haven't budged in a decade. Discover what actually works.
March 30, 2026
•
[CS-SA-26-0304] HTML Smuggling Campaign
Threat Intel

[CS-SA-26-0304] HTML Smuggling Campaign

HTML smuggling bypasses email gateways and endpoint detection to deliver ransomware and credential stealers. Critical Start's SOC detected a coordinated campaign targeting manufacturing, banking, and construction—here's how to defend against it.
March 28, 2026
•