Skip to content

New report: 9 in 10 organizations have faced an AI incident.

Unraveling the Web of Scattered Spider

Unraveling the Web of Scattered Spider

Watch the Recording

Scattered Spider is one of the most aggressive threat groups targeting large enterprises. It combines social engineering, SIM swapping and MFA fatigue attacks to get past identity controls, then moves quickly from initial access to extortion.

In this webinar, Alexander Waintraub of CYGNVS draws on more than a decade in incident response, with past roles at BNY Mellon, Barclays, BlueVoyant and Booz Allen Hamilton, to share threat intelligence on how the group operates:

  • Industry trends behind Scattered Spider’s attacks over the last two years
  • How SIM swapping and MFA fatigue attacks defeat common second-factor controls
  • Persistence techniques seen in real incidents, including on VMware ESXi hosts
  • Why a secure, out-of-band incident command center matters when attackers are inside your environment

Watch now to understand the tactics behind Scattered Spider’s attacks and how to prepare your response.

Published At
Share this
Latest from CYGNVS

Resources, research,
and upcoming events.

The CYGNVS Resilience Benchmark Report, built with Marsh on more than 9,500 surveys, finds that AI has become a source of security incidents inside the organization. AI incidents now hit 16% of organizations every week, yet only 1 in 3 have a dedicated out-of-band environment to manage the response. This summer, OpenAI confirmed a rogue […]

Read more

More than 6 in 10 organizations say incident volume is rising, yet 84% review their incident response plans once a year or less, according to an analysis of more than 9,500 survey responses. San Mateo, Calif. – October 13, 2026 – CYGNVS, the out-of-band command center for cyber and AI incidents, today released the CYGNVS […]

Read more
White Paper · October 13

CYGNVS Resilience Benchmark Report

Insights on Cyber & AI Incident Readiness from 9,500+ Surveys Critical incidents used to be rare events. Today the average CISO handles 20 a year, and more than 6 in 10 organizations say incident volume has risen over the past 12 months. AI is accelerating that pace from both directions, giving attackers speed and scale […]

Read more

Today’s AI security discussions typically revolve around attack prevention. Security teams have been inundated with messaging on the importance of securing models, preventing prompt injection, blocking malicious use and governing employee access. While these conversations are important, they’re only half the battle. Even the most sophisticated defenses can be compromised. The world saw this play […]

Read more