Humans vs. AI: The Critical Role of Human Expertise
The cybersecurity industry has found itself caught in a paradox. On one hand, there’s a clear shortage of skilled security professionals—a talent and skills gap…
Category: ThreatIntelligence-IncidentResponse
Critical Vulnerabilities: WS_FTP Exploitation | Huntress
On Thursday, September 28, 2023, software vendor Progress released a security advisory for numerous vulnerabilities affecting the WS_FTP Server Ad Hoc Transfer Module within their…
Pairing SOCs with Automation | Huntress
Recently, I represented Huntress at mWISE (Mandiant’s Worldwide Information Security Exchange) in Washington, DC. Over the three days (September 18 to September 20), there were…
3 Hot Takes and Tips for Cybersecurity Awareness Month 2023
Happy National Cybersecurity Awareness Month! In an era where it feels like threats are coming at us from all angles, it’s more crucial than ever…
Why Are You Still Paying for Antivirus?
Don’t worry, this isn’t one of those “AV is dead” articles. I read that headline almost ten years ago—I didn’t believe it then, and I…
Huntress Managed ITDR (formerly MDR for Microsoft 365)
Since our inception, Huntress has had a guiding principle to protect the 99%. This ethos has led us to create products, features, and functionality that…
Phishing Email Examples: 5 Scams You Should Know
Email is a cornerstone of communication today, but it’s also a favorite attack vector of threat actors. Phishing is a deceptively simple but highly effective…
Exposed Passwords on Endpoints Are More Common Than You Think
Passwords are part of life these days. The average person probably has hundreds of them—and they’re all unique, right? RIGHT?! So how are you expected…
The Hackers in the Arena: The Huntress CTF Retrospective
A hacker sits behind a screen and reads the text of a website. It’s the Microsoft 365 login page. The hacker has the username and…
Tradecraft Tuesday Recap: axios npm Supply Chain Compromise
The axios npm supply chain compromise in March came to light as many security incidents do: a post on X in the middle of a…
Attackers Didn’t Wait for AI. They Built Workflows Around It.
The earliest adopter of AI wasn’t your security team. It wasn’t even your vendor. It was the adversary. “Adversarial poetry” is an intriguing phrase making…
Unified EDR + ITDR: Closing the Identity Gap Before Attacks Spread
One incident. No gap. Last week, something happened in a customer environment that neatly captures where identity security is headed. And where it’s been falling…