Advancing Cybersecurity in the Age of Frontier AI: Qualys Steps into Project Glasswing
The cybersecurity industry has spent much of the last two years debating how attackers might use AI. That debate matters, but it misses a larger…
Category: ThreatIntelligence-IncidentResponse
Malware Deep Dive: Examining A PowerShell Payload
We’re seeing more and more malware that is “Living off the Land,” turning a system’s own native tools against itself. In other words, it uses…
Zero-Day Vulnerabilities in Platforms Could Leave MSPs Exposed
Let’s put our adversarial hats on, shall we? Say you were a malicious hacker, and you wanted to target the top managed service providers (MSPs).…
What Is Human-Powered Threat Hunting?
Hunting is a tale as old as time. Humans have been hunting for thousands of years—whether it be against prey or foe. While the hunt…
Peeling Back the Layers of .NET Malware
Cyberattackers constantly develop creative ways to obfuscate their code to conceal the presence (and purpose) of their malware. In this blog, we dive into an…
Abusing Ngrok: Hackers at the End of the Tunnel
Do you know that expression, “light at the end of the tunnel?” Usually, that has a positive connotation. After some hard work or persevering through…
How Hackers Exploit Windows Administrative Shares
The Huntress SOC team continues to see new Emotet, Trickbot, and Qakbot malware outbreaks within networks — regardless of antivirus, anti-spam, or firewall solutions. As a…
Top Takeaways from hack_it 2021
Just last week, we hosted our second hack_it training event to bring actionable security education to the infosec community. This two-day event (plus a Hacking…
What Is a Persistent Foothold?
Before Huntress, I always assumed that threat hunting was done like this: Gather as much visibility as you could afford Make sure it includes sophisticated…
Scale Your Security Operations with Confidence
If there’s one thing we know about hackers, it’s that they stay busy. In fact, hackers launch an attack every 39 seconds. That adds up…
From PowerShell to Payload: An Analysis of Weaponized Malware
Click, boom, and your network is compromised. All a hacker needs is one successful exploit and you could have a very bad day. Recently, we…
7 Takeaways from the Executive Order on Improving Cybersecurity
On May 12, 2021, President Biden signed an Executive Order (EO) to improve U.S. cybersecurity standards and further combat cyber threats against the nation. Though…