Home
Active
War room management
Malware Incident Response
Incident
110
05:31
View all calls
Suspicious Network Traffic Detected
Incident
Ransomware detected
Drill
Recents
Ransomware containment
DrillIn progress20 Feb 2026
Last updated 17 minutes ago
Children's Hospital of The King's DaughtersCYGNS
Suspicious Network Traffic Detected
IncidentIn progress
Last updated 17 minutes ago
Children's Hospital of The King's Daughters Children's Hospital of Th…CYGNS
Unauthorized Data Access - HR Portal
TabletopIn progressFeb 28, 2026 04:30 PM - 05:30 PM
Last updated Oct 31, 2026, 9:30 PM
Tenant NameCYGNS
Unauthorized Data Access - HR Portal
PlaybookIn Progress
Last updated Oct 31, 2026, 9:30 PM
Tenant NameCYGNS
Incidents
2 active
Drills
3 in progress
Tabletops
2 upcoming
Playbooks
12 published
Resilience score
Strong readiness
↑ Improving
SeverityHigh
StatusIn progress
PhaseContainment
Incident Briefing
Suspicious network traffic on the corporate VPN is under active investigation. Containment is in progress and the blast radius is being scoped; no confirmed data exposure yet.
Last generated: 1 minute ago
Progress
Containment
Oct 4 - Oct 124Completed
Analysis
Oct 4 - Oct 1212In Progress
CyberSleuths
No Date4
Details
Incident Type
Network security
Updated Just now • by Kevin Gaffney
How was it identified?
Responding to a cyber incident is crucial to mi…
Updated Just now • by Kevin Gaffney
Impacted Systems
14
Updated Just now • by Kevin Gaffney
Highlights
Outbound traffic to two suspicious IPs blocked at the firewall — exfiltration analysis in progress. 3h ago • Containment workstream