dwell-time
Safeguard articles tagged "dwell-time" — guides, analysis, and best practices for software supply chain and application security.
5 articles
Marriott and Starwood (2018): A Breach Inherited Through an Acquisition
A factual retrospective on the Marriott breach disclosed in 2018, where attackers had been present in the Starwood reservation system since 2014, two years before Marriott acquired the company.
A Year Inside the Installer: QuickFox, FDMTP, and Targeted Supply Chain Patience
The trojanized QuickFox installer ran for roughly a year, fingerprinting each victim before deploying a backdoor. Selective targeting bought the dwell time and broke conventional detection.
Kettering Health Interlock Ransomware: A 14-Hospital System Goes Dark
On May 20, 2025, Interlock ransomware encrypted Kettering Health across 14 Ohio hospitals. The actor sat in the network for 41 days before encryption. We unpack the dwell time and the recovery.
NYC Health + Hospitals Vendor Breach: 1.8 Million Records, Including Biometrics, Exposed (May 2026)
A months-long intrusion through a third-party vendor exposed medical records, government IDs, geolocation, and fingerprint and palm-print biometrics for at least 1.8 million people at the largest U.S. public health system. We unpack the dwell time and the third-party blast radius.
Panasonic Data Breach: Four Months of Undetected Network Access
Panasonic disclosed a data breach in November 2021, revealing that attackers had maintained access to its network for over four months before detection — highlighting the persistent challenge of dwell time.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.