Strand Intelligence Blog

Latest — 03 Jun 2025

Case Study: Helping a UK School Regain Control After a Cybersecurity Incident

Protecting our nations core services. This week, Strand supported a UK education provider housing 15,000 endpoints, facing a serious cybersecurity breach. The school detected unusual activity after parents and staff began receiving fraudulent emails and financial requests from what appeared to be trusted accounts. With sensitive data at risk

More issues

Know Your Adversary: Qilin

Qilin are the most active ransomware group in 2025. Following the disappearance of RansomHub, they are equipped with an army of affiliates targeting organisations globally. How to they gain initial access? What should incident responders look out for? Find out in this release of Know Your Adversary.

Know Your Adversary: SafePay

SafePay are a new, aggressive and prolific ransomware group. Whilst they are evolving quickly, all incidents observed by SafePay so far have followed a repeated playbook. Read our analysis of SafePay attacks, and how incident responders can investigate and remediate such incidents.

Know Your Adversary: Akira

Akira are one of the most well known ransomware groups. Whilst their tools, tactics and techniques have evolved over time, this article looks at their approach as of May 2025. What is their most common attack vector? How can incident responders detect and investigate the Akira threat?

How the NHS Could Respond Today: A Breakdown of the 2017 Cyber Crisis

In May 2017, the UK’s National Health Service became the highest-profile victim of the WannaCry ransomware epidemic. Appointments were cancelled. Ambulances were diverted. Hospital staff reverted to pen and paper. And the public saw firsthand just how deeply a cyberattack could disrupt a modern healthcare system. Seven years on,

Agentic AI: The Next Frontier in Reactive Incident Response

How Agentic AI Is Transforming Cybersecurity for MSPs and Security Teams Digital Forensic Incident Response (DFIR) has traditionally been a high pressure and high complexity discipline. When a breach or compromise occurs, the reactive phase: investigating, containing, remediating, and reporting, all demands speed, precision, and clarity. Yet most organisations still

Meet Strand. AI for Cyber Incident Response.

Strand redefines reactive security, using agentic AI to contain, investigate and report on critical cyber incidents. Fast, thorough and precise digital forensics & incident response for everyone.

More issues

Subscribe to Strand Intelligence Blog