Case study · Cybersecurity · Technology

Three newsjacks, three pieces of coverage

Attackers hijacked a JavaScript library used 100 million times a week. Three hours later our comment was with 14 journalists. DevOps.com ran it word for word.

September 2026
Sector
Cybersecurity, Technology
Client
Software supply chain security vendor
Markets
UK and United States
Services
Media relations, Positioning, Content, Measurement
Challenge
The client had to be useful to security journalists within hours of a major incident, or not at all.
Outcome
Three pieces of coverage from three newsjacks, including DevOps.com, IT Brew and SecurityWeek running the quote word for word.
Case study: 99 seconds from a breaking story to a proposed comment
99 sec
from the story landing to it being flagged as relevant to the client
3h 19m
from the story landing to the comment reaching journalists
71%
of the journalists pitched opened it, 10 of 14

The brief

The client is a software supply chain security vendor. Its market moves on incidents: when a widely used package is compromised, security journalists write the story within hours and look for someone credible to explain what it means. Being useful on the day is worth more than any planned campaign, and being a day late is worth nothing at all.

The problem is speed. Spotting the story, deciding it is relevant, drafting something the spokesperson will actually say, getting client sign-off and reaching the right journalists usually takes longer than the news cycle allows.

What we did

Attackers hijacked Axios, a JavaScript library downloaded around 100 million times a week. Agentcy flagged it, we drafted the comment around the spokesperson's established view, and the approved pitch went to 14 matched journalists at Dark Reading, The Register, Reuters and elsewhere.

How it ran, March 2026

  1. 31 Mar
    07:03
    The Axios attack story lands in the news feed
  2. 31 Mar
    07:04
    Proposed as a newsjack: squarely in the client’s field
  3. 31 Mar
    09:35
    Comment drafted around the spokesperson’s view
  4. 31 Mar
    10:16
    Spokesperson, client and our team sign it off
  5. 31 Mar
    10:22
    Pitched to 14 matched journalists
  6. 1 Apr
    09:13
    DevOps.com runs the quote word for word

Then it happened twice more

Anthropic's Project Glasswing. Pitched to 34 journalists including the FT, WSJ, TechCrunch and Sky News. Twenty-two opened it. IT Brew quoted the spokesperson the next day.

G7 guidance on AI software bills of materials. The comment went out mid-morning. SecurityWeek, with 457,000 monthly readers, ran the quote word for word the same day.

Why it worked

Nothing here required a bigger budget. It required knowing within seconds that a story mattered, having a spokesperson position already agreed so drafting was editing rather than inventing, and a pitch list built from who actually covers the beat. The rest is the discipline of doing it three times.

← All our work

Your next case study

Want results like these for your next moment?

We run every programme with senior consultants and Agentcy, from the first news hook to the coverage report.

Talk to Resonance