Oracle October 2026 Critical Patch Update 1209 CVEs
Oracle addresses 1209 CVEs in its final quarterly update of 2026 with 1295 patches, including 112 critical updates. Key Takeaways The October 2026 Critical Patch…
Category: ThreatIntelligence-IncidentResponse
Introducing ITDR Lookback: Find Out Who Was in Your Microsoft 365 Tenant Before You Were
Today, Huntress Managed ITDR’s Lookback feature is generally available for newly onboarded Microsoft 365 tenants. Lookback automatically examines up to 180 days of login history…
Identity Posture Assessment for Microsoft 365 | Managed ISPM
Introducing ISPM’s Identity Posture Assessment, an on-demand report that shows exactly where your identity defenses stand and how fast you can fix them. Attackers love…
How to secure AI agent identities in the cloud with Tenable
Discover how to secure AI agents in your cloud environment with Tenable One Cloud Exposure. We explore Microsoft Entra Agent ID and provide essential best…
Runtime Reachability for Containers | Qualys
Key Takeaways Qualys Runtime Vulnerability Reachability for Containers brings runtime evidence directly into vulnerability prioritization. Package presence in a container image does not mean the…
TruConfidence: Why Your Patch Automation Can Finally Be Autonomous
TruConfidence: The AI-Powered Remediation Intelligence & Orchestration engine powering TruRisk Eliminate 2.0 delivers autonomous remediation at scale with proof at every step. Executive Summary Vulnerabilities…
Inside the Hunt: Sarah Reddish
Meet Sarah Reddish, a Security Operations Analyst on Huntress’ global Security Operations Center (SOC), working in Triage & Analysis. Her role goes far beyond monitoring…
Huntress + AlgaPSA Integration: Built in Days by Nine Minds
Over the past year, the Huntress API has grown from six read-only endpoints into a full integration and automation platform, along with Webhooks and an…
Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
Passkeys are a major step forward in authentication, but protecting a credential is only part of protecting an account. Attackers can still target enrollment, recovery,…
ClickFix to BEC in 24 Hours: Tragic Quadrant
Most cyber threats start out small and unassuming before they turn into the OH $#!T moments that put your whole business at risk. They can…
Fake WatchGuard VPN Site Steals Credentials
Acknowledgments: Thanks to Stephanie Fairless and Andrew Brandt for their help in analysing this attack. Background A simple search on Google or Bing for a…
Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer
Acknowledgements: Special thanks to Dipo Rodipe, John Hammond, Susannah Matt, Ben Nahorney, and Lindsey Welch for their contributions to this investigation and writeup. Update 10/8/26…