Case analyses
What well-documented public incidents teach other organisations. Nabayn did not work on any of them. These are our analyses of the public record, with sources you can check.
CrowdStrike 2024: how one update crashed 8.5 million computers
A routine security update crashed Windows machines worldwide within 78 minutes, with no attacker involved. What went wrong and what it teaches about updates.
CrowdStrike, 2024Colonial Pipeline 2021: a forgotten account and a fuel crisis
Attackers reached a major US fuel pipeline through one old remote access account with no second sign-in step. How it happened and what small firms can check.
Colonial Pipeline, 2021Log4Shell 2021: the hidden software component that alarmed the world
A flaw in a free logging tool used across the internet showed that most software is built from parts nobody tracks. What Log4Shell means for smaller firms.
Apache Log4j, 2021SolarWinds 2020: when a trusted software update carried an attack
Attackers inserted malicious code into SolarWinds Orion updates. What a supply chain attack is, and how smaller firms can reduce the risk from suppliers.
SolarWinds, 2020Equifax 2017: how one missed patch exposed 147 million people
A known vulnerability, an unfollowed instruction and passwords in plain text led to one of the largest data breaches on record. Lessons for smaller firms.
Equifax, 2017WannaCry and the NHS: what the UK's biggest health cyber attack taught us
The National Audit Office called WannaCry relatively unsophisticated and preventable, yet it disrupted a third of NHS trusts. What small firms can learn.
NHS England (WannaCry), 2017Target 2013: how a supplier's login led to 41 million payment cards
Hackers got into the US retailer Target using login details stolen from a third-party supplier. What it cost and how to control what your suppliers can reach.
Target, 2013Tell us what is slowing your business down.
We aim to reply within one working day.