Agentic AI security: Risks and solutions
As AI tools evolve from siloed chatbots to autonomous, hyperconnected systems, they create a vast new attack surface. Discover how to manage this risk by…
Category: ThreatIntelligence-IncidentResponse
How AI can streamline your security testing
Most security teams are staring across a massive adversary emulation gap. The bridge between “knowing the threat” and “executing realistic tests” has historically involved rigid…
Humans vs. AI: The Critical Role of Human Expertise
The cybersecurity industry has found itself caught in a paradox. On one hand, there’s a clear shortage of skilled security professionals—a talent and skills gap…
Critical Vulnerabilities: WS_FTP Exploitation | Huntress
On Thursday, September 28, 2023, software vendor Progress released a security advisory for numerous vulnerabilities affecting the WS_FTP Server Ad Hoc Transfer Module within their…
Pairing SOCs with Automation | Huntress
Recently, I represented Huntress at mWISE (Mandiant’s Worldwide Information Security Exchange) in Washington, DC. Over the three days (September 18 to September 20), there were…
3 Hot Takes and Tips for Cybersecurity Awareness Month 2023
Happy National Cybersecurity Awareness Month! In an era where it feels like threats are coming at us from all angles, it’s more crucial than ever…
Why Are You Still Paying for Antivirus?
Don’t worry, this isn’t one of those “AV is dead” articles. I read that headline almost ten years ago—I didn’t believe it then, and I…
Huntress Managed ITDR (formerly MDR for Microsoft 365)
Since our inception, Huntress has had a guiding principle to protect the 99%. This ethos has led us to create products, features, and functionality that…
Phishing Email Examples: 5 Scams You Should Know
Email is a cornerstone of communication today, but it’s also a favorite attack vector of threat actors. Phishing is a deceptively simple but highly effective…
Exposed Passwords on Endpoints Are More Common Than You Think
Passwords are part of life these days. The average person probably has hundreds of them—and they’re all unique, right? RIGHT?! So how are you expected…
The Hackers in the Arena: The Huntress CTF Retrospective
A hacker sits behind a screen and reads the text of a website. It’s the Microsoft 365 login page. The hacker has the username and…
Tradecraft Tuesday Recap: axios npm Supply Chain Compromise
The axios npm supply chain compromise in March came to light as many security incidents do: a post on X in the middle of a…