We clarify the differences between the ProxyShell (August 2021) and the ProxyLogon (March 2021) exploits impacting Microsoft Exchange on-premises servers.
Dive into a cyber threat analysis that details a sneaky enabler of a targeted cyberattack: persistence.
Attackers are scanning for vulnerable Microsoft Exchange servers and abusing the latest line of Exchange vulnerabilities that were patched in early 2021.
Join us on a threat analysis journey as we discover a very shady Python—and a very friendly RAT.
How we make Tailored Threat Intelligence
What can we learn from studying cybercriminals? Here’s a brief history of how hackers are evolving their tradecraft and attack tactics.
AWC joins illicit carding business by offering 1 Mln compromised cards for free
The key to success for Campo Loader, Hancitor, IcedID, and QBot
Lightsail object storage allows the creation of access keys which were logged to CloudTrail (both access key and secret key)
Learn about the costs of cybersecurity—and the risks of not having the right security stack—in this blog.
Dive into Breached DB section
The Huntress team recaps what happened during the Kaseya VSA supply chain attack—and what we can learn from it.
We teamed up with our partners at Magna5 to talk about providing real-time prevention, detection and response.
Learn how hackers use persistence to gain—and keep—access to your virtual environments.
Our Security Researchers discuss how hackers executed the Kaseya VSA supply chain attack—and why the blast radius of the incident was relatively limited.
Cybersecurity experts John Hammond and Sébastien Goutal provide insider insight on the current state of phishing, ransomware and email-based attacks.
In this blog, we share details on the vaccine Huntress deployed to our partners to protect them from being infected by the Kaseya VSA ransomware attack.
Huntress is tracking a critical ransomware incident affecting MSPs and their customers, caused by a sophisticated Kaseya VSA supply chain attack.
Deep Dive into Prolific RaaS Affiliates' TTPs
Huntress is aware of PrintNightmare, a critical RCE and local privilege escalation vulnerability. This serious security flaw affects many Windows servers.
Under certain conditions, an attacker can flood DHCP packets to the victim VM, allowing it to impersonate the Metadata server, and grant themselves SSH access.
Providing cybersecurity services involves some risk and liability. Learn why managed detection and response could be the key to lowering your cyber risk.
Dive into a threat analysis with us as we dissect a PowerShell command with an environmentally keyed malware payload.
A privilege escalation vulnerability was discovered in Google's Dialogflow cloud platform. When downgrading a user's role from Developer to Reviewer, the permissions were not properly updated, allowing the user to retain Developer-level access. This issue persisted in the Google Cloud Console, where role changes resulted in additive permissions instead of replacements.
Today’s hackers know how to outsmart automation and evade detection. Learn how managed threat detection and response can help you fight back.
