Goldoak
Blog
Knowledge and insights from our security team.
How Goldoak Spectacles Protected Our Customers Against the Backdoor in the Claude Code Extension (Version 2.1.313)
A tampered version of the Claude Code extension installed an SSH backdoor on developer machines. How Goldoak Spectacles detected the trojan within hours and protected our customers.
· 28 October 2026Cyberattack Emergency Plan: What to Do in the First 60 Minutes
The first hour after a cyberattack decides how much damage it does. Seven steps in the right order that an SME can carry out immediately, and what comes next.
· 28 October 2026Spotting Phishing Emails: 6 Warning Signs Every Employee Should Know
Phishing is the most common way into Swiss SMEs. Six warning signs that help employees recognise a phishing email, what to do when in doubt, and what matters after a wrong click.
· 26 October 2026SIEM and SOAR Software for SMEs: How It Takes the Load Off Your Team During Incidents
How SIEM and SOAR give SMEs central visibility, automate the first response and when they pay off even with a small IT team.
· 21 October 2026How Goldoak Spectacles Protected Our Customers Against PHP2Shell (CVE-2026-109618, CVE-2026-109619)
PHP2Shell enables remote code execution on PHP servers. How Goldoak Spectacles stops attacks automatically and tells every customer whether the bug was exploited.
· 9 October 202610 Rules for 2026 to Improve Cybersecurity in Your Company
Ten concrete rules that noticeably improve an SME's cybersecurity in 2026. No theory, just what would have made the difference in the incidents we respond to.
· 8 October 2026The Best SIEM and SOAR Systems for SMEs in 2026
What a SIEM and a SOAR actually do, what SMEs in the DACH region should look for, and how Goldoak Spectacles, Sentinel, Splunk, Elastic, Wazuh, QRadar and Huntress stack up.
· 2 October 2026Ransomware Explained Simply: How an Attack Unfolds and How to Stop It
Ransomware does not encrypt on day one. Weeks often pass between the break-in and the ransom note. What the phases of an attack look like and where an SME can stop it.
· 29 September 2026Zero Trust: What the Concept Really Means and Why It Matters for SMEs Today
Zero Trust is not a product but a principle: trust no device and no account just because it is on the company network. What is behind it, why it matters right now and where an SME should sensibly start.
· 12 September 2026EDR vs. XDR: What's the Difference and What Do SMEs Actually Need?
EDR, XDR, SIEM: what the terms really mean, where they differ and which solution your SME actually needs. Without the marketing fog.