Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?
Acknowledgments: Special thanks to Ben Folland for his contributions to this investigation and writeup. In November, Huntress analysts detected an incident where threat actors likely…
Category: ThreatIntelligence-IncidentResponse
What Is Account Takeover Fraud? A Comprehensive Guide
Threat actors don’t need to hack your network to cause damage. Often, just one stolen password is enough. Account takeover fraud is a simple and…
What Is Cyber Threat Hunting? Types, Tricks, and Tips
In a world where cyber threats evolve at a blazing-fast pace, relying solely on reactive measures isn’t enough. Enter: threat hunting, a proactive approach that…
What Is Cyber Threat Hunting? Types, Tricks, and Tips
In a world where cyber threats evolve at a blazing-fast pace, relying solely on reactive measures isn’t enough. Enter: threat hunting, a proactive approach that…
What Does the Dark Web Look Like? Pulling Back the Curtain
In today’s always-connected world, the line between dark and light is blurring. Well, actually, you’re still protected from finding out what the dark web looks…
Hardening the Hypervisor: Practical Defenses Against Ransomware Targeting ESXi
Hypervisors are the backbone of modern virtualized environments, but when compromised, they can become a force multiplier for attackers. A single breach at this layer…
Announcing the Latest Report on Huntress Managed SAT: Key Findings and Insights
Security awareness training (SAT) is supposed to make companies safer, but too often, it feels like just another box to check. While every SAT vendor…
Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability
Acknowledgments: Special thanks to John Hammond for his contributions to this investigation and write-up. Update #2: 12/18/25 @ 6pm ET We’ve seen reports from other…
Proactive Threat Hunting with Elastic Security — Elastic Security Labs
When a new threat actor technique emerges — whether from a research blog, an intelligence feed, or breaking news — every threat hunter instinctively shifts…
How Elastic Infosec Optimizes Defend for Cost and Performance — Elastic Security Labs
In the world of Security Operations Centers (SOCs), data is valuable, but excessive data can be problematic. Collecting every single event from every endpoint is…
Accelerate Attack Surface Discovery with new AI-Powered Connectors
Discovery: The foundation of exposure management To understand your attack surface, and all related exposures, Rapid7’s Command Platform provides Attack Surface Management, (included in Surface…
How Workflows and Agent Builder Close the Loop — Elastic Security Labs
SOC leaders face a daily battle against basic math that doesn’t add up. Data volumes are growing exponentially, attack surfaces are expanding globally, yet your…