The Crown Prince, Nezha: A New Tool Favored by China-Nexus Threat Actors
Update: 10/15/25 @ 1pm ET An anonymous individual from Mainland China who is said to be familiar with the activity, detailed here, reached out to…
Category: ThreatIntelligence-IncidentResponse
The Crown Prince, Nezha: A New Tool Favored by China-Nexus Threat Actors
Update: 10/15/25 @ 1pm ET An anonymous individual from Mainland China who is said to be familiar with the activity, detailed here, reached out to…
Microsoft’s March 2026 Patch Tuesday Addresses 83 CVEs (CVE-2026-21262, CVE-2026-26127)
8Critical 75Important 0Moderate 0Low Microsoft addresses 83 CVEs including two vulnerabilities that were publicly disclosed prior to a patch being released. Microsoft patched 83 CVEs…
Microsoft’s March 2026 Patch Tuesday Addresses 83 CVEs (CVE-2026-21262, CVE-2026-26127)
8Critical 75Important 0Moderate 0Low Microsoft addresses 83 CVEs including two vulnerabilities that were publicly disclosed prior to a patch being released. Microsoft patched 83 CVEs…
CMMC Final Rule: A Guide for DoD Subcontractors
“This isn’t just compliance…it’s a national security imperative.” Stacy Bostjanick Chief DIB Cybersecurity, DCIO(CS), OCIO The wait is over. On September 10, 2025, the Department…
Dispelling Ransomware Deployment Myths | Huntress
When a ransomware attack occurs, the focus is most often on the encryption of files. Initial access is often glossed over or simply assumed. In…
The RSAC 2026 Conference talks worth catching
Another year and yet another RSAC Conference looms. While there are a few invite-only events on Sunday, this year’s conference starts in earnest on Monday,…
Secure AI Models and Endpoints with Inventory-First AI Security | Qualys TotalAI
Key Takeaways AI security demands a paradigm shift, treating models, endpoints, and integrations as dynamic attack surfaces requiring continuous governance. Inventory-driven visibility is foundational to…
Dealing with Imperfect Telemetry: Techniques for Effective Incident Response
We’ve all seen threat reports and intrusion write-ups that look deeply polished, with a cohesive timeline that highlights incredible telemetry and analysis skills. Cool diagrams…
Looking Through a Pinhole at a Qilin Ransomware Attack
A big part of a security analyst’s everyday role is figuring out what actually happened during an incident. We can do that by piecing together…
Huntress and DEFCERT Are Streamlining CMMC Assessment Prep
What we built Our team at DEFCERT collaborated with the team at Huntress to build resources that partners and “Organizations Seeking Assessment” (OSAs) can use…
Deobfuscating Files for Flags: Huntress CTF 2025 Retro
Imagine this: you’re a hacker, and you’re working through an executable file made up of a compiled AutoIT script. You’ve decompiled the script (thanks to…