Huntress hits an inflection point
In my last blog, I wrote about Huntress crossing $250M ARR. That post was about the people who got us here: the teammates, partners, customers,…
Latest Cybersecurity News — Page 72
View all →
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. MalwareHunterTeam observed this unusual…
Hackers Hide Agent Tesla JScript Behind Unicode Emojis to Evade Detection
Hackers are using Unicode emoji characters to hide an Agent Tesla JScript dropper in a business email compromise campaign aimed at finance teams. The tactic…
768 Leaked AWS Keys Still Active With Full Admin Access to Corporate Accounts
A large-scale investigation has uncovered 768 publicly exposed AWS access keys that remain active and grant full administrative privileges to corporate cloud environments, posing a…
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and…
Microsoft Patches Exploited Entra ID Vulnerability
Microsoft on Thursday announced the rollout of 22 new security updates that resolve severe vulnerabilities across multiple products, including a critical Entra ID zero-day exploited…
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 22, 2026 U.S. Cybersecurity and Infrastructure Security Agency…
Say it once: introducing Bot Preference Sync
We’re constantly building for the different goals of our customers. Some customers want to optimize for discovery, while others want to protect their content with…
Device Code Phishing Keeps Evolving. Here’s What to Watch For
Acknowledgments: Special thanks to Rich Mozeleski for his contributions to this investigation and writeup. Huntress has seen a notable influx in device code phishing attacks…
CISA orders feds to patch actively exploited TrueConf Server flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications…
Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks
A Chinese-speaking cybercrime group is using AI-assisted tools to turn vulnerable web servers into entry points. It shows how familiar flaws become more dangerous when…
Zero-Click Grok Attack Lets Hackers Steal Chat History Using Encrypted Prompt Injection
A newly disclosed prompt-injection technique could turn a routine request to summarize a webpage in xAI’s Grok web chat into a silent data-exfiltration attack, potentially…