Dirty Frag (CVE-2026-43284,CVE-2026-43500): Linux Kernel Privilege Escalation FAQ
Weeks after the Copy Fail vulnerability was revealed, a new Linux kernel escalation vulnerability has been uncovered. Dubbed “Dirty Frag,” this flaw could allow a…
Category: ThreatIntelligence-IncidentResponse
Threat Advisory: XMRig Cryptomining By Way Of TeamViewer
At the end of May 2023, Huntress Security Operations Center (SOC) analysts responded to an alert on an endpoint, indicating the presence of a cryptocurrency…
MOVEit Transfer Critical Vulnerability CVE-2023-34362
UPDATED: 1 June 2023 @ 1733 ET – Added shareable Huntress YARA rule for assistance in detection effort UPDATED: 1 June 2023 @ 2023 ET…
Beware of Traitorware: Using Splunk for Persistence
In a previous blog post, I covered how Splunk, and by extension, other security tools, can be used for malicious purposes. In that specific example,…
Understanding GDAP and Its Operational Impact
You’ve likely heard that Microsoft has changed its Delegated Admin Privileges (DAP) authentication control to Granular Delegated Admin Privileges (GDAP). The transition is well underway,…
One MSP, Three Microsoft 365 Compromises, 72 Hours
Huntress has been hunting malicious actors across 50,000+ user accounts for 1,500+ small businesses enrolled in our Managed Identity Threat Detection and Response (ITDR) product.…
Detecting Web Server Probing & Fuzzing in Traefik with Automated Cloudflare Response — Elastic Security Labs
Introduction Self-hosted services exposed through a reverse proxy inevitably attract automated scanners probing for misconfigurations, admin panels, and vulnerable endpoints. In this article, I show…
Spring cleaning your browser | Red Canary
There’s something so satisfying about a good spring cleaning: the kind where you open the windows, clear the clutter, and finally deal with the things…
dmXProtect: Stop, Drop, Shut Malware Down
Note from the author: I’d be remiss not to mention the strangeness of the blog title, a simple but albeit ludicrous spin-off of a DMX…
Before the Breach: Why Test Environments Are a Major Cloud Risk
Key Takeaways Most security failures do not begin where they are discovered. By the time risk becomes visible in production, the decisions that created it…
BEC Threat Hunting: How to Detect Microsoft 365 Compromises
We all have thoughts that keep us up at night. Will the ticking noise the car made end up being an expensive repair? When will…
Thwarting Financial Fraud | Huntress
Huntress has been hunting malicious actors across 60,000+ user accounts for almost 2,000 small businesses enrolled in our Managed Detection and Response (MDR) for Microsoft…