We Need to Talk About Device Code Phishing
In February 2025, Russian threat actor Storm-2372 used Microsoft Teams meeting invite lures to deliver device code phishing messages, stealing victims’ authenticated sessions. In March 2026,…
Category: ThreatIntelligence-IncidentResponse
Windows 11 24H2 EOL: Resolve Version Drift with TruRisk Eliminate
Key Takeaways Windows 11 24H2 reaches the end of servicing on October 13, 2026, making timely enterprise upgrades critical. Enterprises often face version drift, with…
CNAPP’s New Normal: Hyper-Prioritization and Autonomous Remediation at Cloud Scale
AI-powered detection has crossed a threshold. Security teams can now surface vulnerabilities, misconfigurations, and active attack paths at a speed and scale that was unimaginable…
Intelligence Insights: June 2026 | Red Canary
= trending up from previous month= trending down from previous month = no change in rank from previous month *Denotes a tie Conned and caught:…
OXLOADER: new loader evading detection to drop infostealer — Elastic Security Labs
A previously undocumented Windows loader tracked as OXLOADER is delivering the CASTLESTEALER infostealer via malicious Google Ads, with low detection rates across static engines and…
Oracle Critical Security Patch Update June 2026
Oracle addresses 243 CVEs in its June 2026 Critical Security Patch Update with 245 patches, including 122 critical updates. Key Takeaways The June 2026 Critical…
How My StubHub Account Got Hacked
It was a Tuesday night around 9pm. I check my email on my phone and find a notification from StubHub for a transaction just made…
How do you protect computers from attackers if you’re not
The historical answer to this question has been antivirus and firewalls. However, the last several years have demonstrated hackers can slip past these preventative technologies…
Huntress Wins ConnectWise IT Nation Partner’s Choice Award!
Huntress wins prestigious award at this year’s largest MSP industry conference, ConnectWise IT Nation, for industry-leading Managed Detection & Response service. Today, Huntress Labs announced…
Troubleshooting Procmon & Sysmon v3.32
When it comes to troubleshooting software errors, analyzing malware samples, or discovering security misconfigurations, the Sysinternals Suite can likely solve your problem. For many IT and Security…
MSP Moment: Squashing an MSSQL Attack
It all started when NTConnections was called into an organization who reported a SQL Server failure. Like all jobs, their technicians performed some initial discovery…
Security Awareness Training Will Prevent Ransomware
Unless you have been living under a rock for the past month, it is hard not to notice all of the news about the WannaCry…