The Unwanted Guest | Huntress
Most everyone who’s been involved in incident response or read publicly available incident write-ups is aware that threat actors will often compromise user accounts through…
Category: ThreatIntelligence-IncidentResponse
Cyber Hygiene Threats Lurking at Your Perimeter: RDP, VPNs, and Remote Tools
Cyber hygiene: Hackers love a mess Good cyber hygiene isn’t a suggestion—it’s a must. Just like you wouldn’t skip brushing your teeth for weeks (we…
Credential Theft Guide: Initial Access, Mimikatz & Post-Exploitation
What is credential theft? At its core, credential theft is the unauthorized acquisition of login credentials such as usernames, passwords, or session tokens by a…
How EDR and ITDR Elevate Your Security
In cybersecurity, we talk about attack vectors like they operate in silos—endpoint threats over here, identity-based attacks over there. But the truth is attackers don’t…
Ransomware Initial Access Brokers Exposed
Every intrusion that we comb over here at Huntress is different in its own way. Although there are definitely discernible patterns when it comes to…
CVE-2025-30406 – Critical Gladinet CentreStack & Triofox Vulnerability Exploited In The Wild
Special thanks to Craig Sweeney, Hayden Drummond, Michael Tigges, Tanner Filip, Jevon Ang, Jamie Dumas, Stephanie Fairless, and Lindsey Welch for their contributions and support…
Why App Allowlisting and Zero Trust Solutions Alone Won’t Save You
A layered security approach isn’t just a nice-to-have—it’s a necessity. Many organizations are adopting “allowlisting” or “zero trust for endpoint” strategies, which, in theory, sound…
Credential Theft: Expanding Your Reach, Pt. II
As a follow-on to our previous blog post of the same title, sans the “Pt. II,” we wanted to illustrate the myriad of techniques behind…
Identity Threats Got a Whole Lot Nastier, But So Did We
If identity is the new perimeter, most businesses defend it with a cardboard shield and a prayer. Maybe a mouse is there, too. Over the…
Minutes Matter: Huntress Managed SIEM Makes Them Count (Here’s How)
Interest in security information and event management (SIEM) has increased over the years because it can do three things that IT and security teams desperately…
What Is Business Email Compromise? BEC Defined
Business email compromise (BEC) is a phishing scam where threat actors impersonate a trusted source to convince others to give them sensitive information or take…
What Is Business Email Compromise? BEC Defined
Business email compromise (BEC) is a phishing scam where threat actors impersonate a trusted source to convince others to give them sensitive information or take…