Ransomware
LockBit successor group hits three European logistics firms in one week
A crew using rebuilt LockBit 4.0 tooling encrypted warehouse systems in Rotterdam, Hamburg and Gdansk after entering through unpatched VPN appliances.
Your Digital Sentinel. Free, no account needed.
Stay Ahead of Threats.
SentriXa continuously monitors, detects, and protects your digital infrastructure in real time. Free daily news and threat intelligence for the people who defend it.
- Mean time to contain
- 19 s
- Signals per day
- 4.1B
- False positives
- 0.3%
Live response
- Cobalt Strike beacon isolatedFrankfurt / just now
- MFA fatigue attack containedDublin / just now
- Webshell upload blockedSingapore / just now
- Patch rolled out to 318 hostsNew York / just now
- DNS tunnel sinkholedFrankfurt / just now
Security score
92+3 this week
10 routes under watch
Incident Response
What 19 seconds of containment looks like inside a ransomware precursor
A step-by-step reconstruction of how one security team stopped shadow copy deletion before any file was encrypted.
Threat Intelligence
Silent Ledger: how a supply-chain lure reached crypto exchanges
A poisoned developer package and a fake recruiter persona gave the operators access to build systems at two exchanges.
Vulnerabilities
OpenGate VPN flaw CVE-2026-001 exploited within 48 hours of disclosure
Mass scanning began a day after the advisory. Over 11,000 appliances were still exposed a week later.
Cyber AI
Attackers test LLM agents for automated reconnaissance
Researchers observed agents chaining search, scanning and exploit lookups with little human input.
12M+
Threats analyzed
across reader-reported environments in 2026
99.9%
Detection accuracy
measured against MITRE ATT&CK evaluations
2.5K+
Protected assets
per average enterprise in our research
24/7
Monitoring
newsroom coverage of critical threats
See where attacks start, and where they land
Every arc is a live campaign targeting a protected site. Hover or tab to an origin to see who is behind it.
Interactive map of active attack campaigns. It needs JavaScript; the list of campaigns is next to it.
Protected siteCriticalHighMediumLow
One sentinel for every surface you defend
Our coverage follows the same six areas security teams run every day, so a story about a laptop already connects to the identity, the vulnerability and the compliance control behind it.
Threat Detection
Behavioural signals across endpoint, network, identity and cloud, correlated into one incident.
19 s median time to contain
Vulnerability Management
Every CVE ranked by exploitability, exposure and asset value, so you patch what attackers will use first.
71% of risk in the top 3 fixes
Asset Discovery
Servers, endpoints, containers and cloud resources, found the moment they appear.
Inventory refreshed every 60 s
Identity Security
Impossible travel, MFA fatigue and privilege creep across Entra, Okta, Google and Auth0.
4 identity providers, one view
Compliance Tracking
Controls mapped to ISO 27001, SOC 2, GDPR, NIS2 and PCI DSS, with evidence attached.
320+ controls mapped
Threat Intelligence
Curated feeds that attribute activity to live campaigns and show where attacks come from.
2.1M indicators refreshed daily
Ask SentriXa AI what just happened
The copilot reads alerts, logs and asset records. Ask in plain English and get an answer with evidence, not a guess.
- Explain alerts in plain language
- Summarize incidents into timelines
- Recommend remediation steps
- Generate board-ready reports
- Investigate threats across every source
SentriXa AINorthwind Global / 2,584 assets in context
Why did fs-eu-02 get quarantined?
A stolen service account, svc-backup02, moved laterally to 6 hosts with PsExec, then tried to delete shadow copies on fs-eu-02: a ransomware precursor. It was quarantined 19 seconds later.
- 21 Oct 19:30: PsExec on 6 hosts
- 22 Oct 07:55: LSASS dumped on ws-it-0098
- 22 Oct 13:41: Shadow copy deletion blocked
What should I do next?
Rotate svc-backup02, block admin shares between workstations, and restore the finance share from last night's immutable snapshot.
Audit-ready, every day of the year
Where security teams stand on the frameworks auditors ask about, from our 2026 readiness research.
- 91%
ISO 27001
85 of 93 controls passing
- 94%
SOC 2
60 of 64 controls passing
- 86%
GDPR
41 of 48 controls passing
- 79%
NIS2
33 of 42 controls passing
- 88%
PCI-DSS
56 of 64 controls passing
Security Starts With Visibility.
Get the SentriXa briefing: the five stories every security team should read, every weekday morning. Free, and one click to unsubscribe.