Managed or Modified: Choose How Huntress Hardens Microsoft 365
Picture your Microsoft 365 environment being hardened around the clock, controls rolling out on a set schedule based on expert best practices, without you having…
Category: ThreatIntelligence-IncidentResponse
Elastic’s response to the Spring4Shell vulnerability (CVE-2022-22965)
On March 29, 2022 a vulnerability in the Spring framework was disclosed to the public by VMware. This vulnerability had several prerequisites affecting impact:
Sneak Peek: Elastic’s 2022 Global Threat Report
Reports Elastic Security Labs has compiled the 2022 Global Threat Report to share trends and tactics adversaries and attack groups use, as observed by our…
Analysis of Log4Shell vulnerability & CVE-2021-45046
To understand how Elastic is currently assessing internal risk of this vulnerability in our products please see the advisoryhere. This document was updated on December…
Forecast and Recommendations: 2022 Elastic Global Threat Report
Today, we released our first-ever Global Threat Report at Elastic. Now, customers, partners, and the security community at large will be able to identify many…
KNOTWEED Assessment Summary
Key Takeaways li]:list-disc”> 0-day exploit – vulnerability previously unknown to defenders and does not have a public patch Activity Group – individuals, groups, or organizations…
CISA BOD 26-04 Timelines for Three Linux Kernel CVEs
Executive Summary CISA added three actively exploited Linux kernel vulnerabilities: CVE-2025-39682, CVE-2026-53266, and CVE-2025-39964 to its KEV Catalog on September 18, 2026, triggering a 3-day…
Behind the scenes: The making of a Global Threat Report
The first Elastic Global Threat Report was published earlier this week. In it, you will learn about trends observed by our threat researchers, our predictions…
Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM
Acknowledgements: Special thanks to Adam Mooney and Jamie Dumas for their contributions to this investigation. Huntress analysts recently observed two incidents where a newer ransomware…
Fighting AI Slop in Production Codebases: How Huntress Improved Fable 5.1’s API Recall
TL;DR: When Huntress tested Anthropic’s Claude Fable 5.1 in evaluations, we started with a ~48% accuracy baseline for API recall: significantly more than previous models…
2022 Elastic Global Threat Report: Helping security leaders navigate today’s threat landscape
As the threat landscape continues to evolve, cybersecurity stakes are growing exponentially higher for today’s organizations. Between Log4j, geopolitical tension, and increasing ransomware threats, security…
2022 Elastic Global Threat Report Announcement
Reports Discover our latest findings & strategic recommendations to better stay informed of potential directions threat actors may focus on. Today Elastic Security Labs celebrates…