Investigating Unauthorized Access | Huntress
We’ve investigated an incident regarding unauthorized access to our quality assurance and product testing environment. In this blog, we’ll share all the gory details to…
Category: ThreatIntelligence-IncidentResponse
EOL/EOS Detection for Containers: Cloud-Native Lifecycle Visibility
Key Takeaways Unsupported software increasingly exists inside container images and Kubernetes workloads, not just traditional infrastructure. Lifecycle risk extends beyond CVEs because unsupported software eventually…
Is There a Right Way to Set Up Two-Factor Authentication?
There’s been a lot of chatter lately around two-factor authentication (2FA) and multi-factor authentication (MFA). We’re seeing more and more websites and applications enforcing 2FA—like…
Download pumping: How threat actors use new npm deception technique in supply chain attacks
Learn how attackers exploit automated bot traffic as part of software supply chain attacks to artificially inflate download counters and mask malicious payloads as legitimate.…
Critical RCE Vulnerability Updates (log4j – CVE-2021-44228)
Our team is investigating CVE-2021-44228, a critical vulnerability that’s affecting a Java logging package log4j which is used in a significant amount of software, including…
Critical RCE Vulnerability: log4j – CVE-2021-44228
Our team is investigating CVE-2021-44228, a critical vulnerability that’s affecting a Java logging package log4j which is used in a significant amount of software, including…
Ditching FUD for FUN in Security Awareness Training
It’s no secret that the cyber security industry loves acronyms. Today, I’ve got the pleasure of breaking down arguably one of the cyber industry’s most…
Log4Shell: A Tradecraft Tuesday Recap
If you’re been living under a rock or have sworn off watching the news—and who could blame you?—you may not know that there’s a new…
Texas HB 3834 Cyber Security Awareness Training Requirements
Did you know that Texas passed a new regulation for state employees to participate in a mandatory cyber security awareness training program? In June of…
Making the Switch to Huntress Managed Microsoft Defender| Huntress
A few months ago, we announced three exciting new features of The Huntress Security Platform, including Managed Microsoft Defender, 24/7 Global SOC coverage and Host…
2021 in Review (And Other Horror Stories)
There’s a funny story behind the creation of this blog. The content of this blog was originally going to be the focus of December’s Tradecraft…
Ransomware Canaries: A 2022 Update
Ransomware has been around for decades, but some variants have evolved to become more advanced—finding new ways to spread, evade detection, encrypt files and even…