Huntress’ Commitment to the Cybersecurity Community
The broader cybersecurity community is a pretty incredible group. Look no further than major incidents and breaches to see examples of the community coming together…
Category: ThreatIntelligence-IncidentResponse
Don’t Get Schooled: How to Catch a Phish
Threat actors love a good phish. In this year’s Data Breach Investigations Report released by Verizon, phishing is named as one of the top four…
Gifting User Passwords to Adversaries With NPPSPY
While investigating an intrusion, Huntress stumbled on something rather fascinating to do with adversarial credential gathering. Threat actors are often retrospectively gathering credentials by dumping…
How Progressive Computing Combated a Large-Scale Cyberattack
Let’s set a scene that’s all too familiar to those of us who work in cybersecurity. It’s the Friday afternoon before the Fourth of July…
Threat Actor Defense Evasion: How Attackers Disable AV & EDR
Threat actors know that most organizations are going to have some type of endpoint defenses, whether it’s next-generation antivirus (NGAV), endpoint detection and response (EDR),…
Evolving Endpoint Protection and the Next Iteration of Huntress
We are excited to introduce the next iteration of The Huntress Managed Security Platform with the addition of Huntress Managed Endpoint Detection and Response (EDR). …
Unraveling a Reverse Shell with Managed EDR
We could take a note or two on what agility means from our adversaries, aka threat actors. Something doesn’t work? Plan B is ready. Password…
Bug Bounties for the 99%
Intro by Andrew Morgan, Founder of Right of Boom Cyber Summit. March 26, 2020, and July 2, 2021, are two dates that will be seen…
New 0-Day Vulnerabilities Found in Microsoft Exchange
Our team is currently investigating new 0-day vulnerabilities in Microsoft Exchange servers that could lead to Remote Code Execution (RCE) for an authenticated user. Our…
A Sneak Peek at hack_it 2022
We’re super excited to announce that hack_it is back! hack_it teaches hacker tradecraft and helps us defenders see cybersecurity from a different perspective. This year’s…
ConnectWise/R1Soft RCE & Supply Chain Risks
UPDATE 2/27/23: As recently spotted by Fox-IT and subsequently reported in SecurityWeek, a critical vulnerability discovered last year in ConnectWise’s R1Soft Server Backup Manager software…
macOS Support Is Here! | Huntress
As you may have noticed, macOS malware is still very much a thing these days. We covered some of the malware variants that were seen…