Intelligence Insights: June 2026 | Red Canary
= trending up from previous month= trending down from previous month = no change in rank from previous month *Denotes a tie Conned and caught:…
Category: ThreatIntelligence-IncidentResponse
OXLOADER: new loader evading detection to drop infostealer — Elastic Security Labs
A previously undocumented Windows loader tracked as OXLOADER is delivering the CASTLESTEALER infostealer via malicious Google Ads, with low detection rates across static engines and…
Oracle Critical Security Patch Update June 2026
Oracle addresses 243 CVEs in its June 2026 Critical Security Patch Update with 245 patches, including 122 critical updates. Key Takeaways The June 2026 Critical…
How My StubHub Account Got Hacked
It was a Tuesday night around 9pm. I check my email on my phone and find a notification from StubHub for a transaction just made…
How do you protect computers from attackers if you’re not
The historical answer to this question has been antivirus and firewalls. However, the last several years have demonstrated hackers can slip past these preventative technologies…
Huntress Wins ConnectWise IT Nation Partner’s Choice Award!
Huntress wins prestigious award at this year’s largest MSP industry conference, ConnectWise IT Nation, for industry-leading Managed Detection & Response service. Today, Huntress Labs announced…
Troubleshooting Procmon & Sysmon v3.32
When it comes to troubleshooting software errors, analyzing malware samples, or discovering security misconfigurations, the Sysinternals Suite can likely solve your problem. For many IT and Security…
MSP Moment: Squashing an MSSQL Attack
It all started when NTConnections was called into an organization who reported a SQL Server failure. Like all jobs, their technicians performed some initial discovery…
Security Awareness Training Will Prevent Ransomware
Unless you have been living under a rock for the past month, it is hard not to notice all of the news about the WannaCry…
Redosdru — Encrypting DLL Payloads to Avoid On-Disk Signatures
Lurking within the C:WindowsSystem32 directory was a binary called “wshom.exe”. By manually inspecting the file’s header within a hex editor, we noticed it had been…
Deep Dive: Squashing an MSSQL Attack
When it comes to a breach, one of the first questions typically asked is “how did the attackers get in?”. Unfortunately, this isn’t always an…
MSP Moment | Huntress
Over the past month, the Emotet family of malware has re-emerged as a formidable piece of crimeware, thanks to its new self-propagation techniques (undoubtedly inspired by the…