Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
A Huntress employee surveyed 14 women in cybersecurity about career paths, workplace experiences and advice. In this small, nonrepresentative sample, 71.4% said they had been made uncomfortable because of their gender.
DarkOwl describes how its darknet data platform can support investigations, situational awareness, counterterrorism, counternarcotics, and monitoring of espionage, extremism, and critical infrastructure threats.
The article explains how exposed data on the darknet can raise cyber risk for organizations and individuals, outlining threats including credential stuffing, phishing, extortion, and vendor compromise, along with ways to assess exposure and reduce personal account risks
DarkOwl leaders Sarah Prime and Alison Halland discuss women’s representation, career paths and workplace experiences in cybersecurity, highlighting non-technical entry routes, persistent leadership gaps and the value of varied skills.
The article reviews common cyber insurance exclusions, darknet indicators of insider and prior-breach risks, and attacks targeting insurance-related businesses. It argues that insurance should supplement—not replace—strong security practices.
Progressive Computing says the 2021 Kaseya VSA attack deployed ransomware across 2,500 endpoints at 80 clients. Its COO shared lessons for MSPs, including preparing an incident response plan, contacting cyber liability insurance, and seeking peer support.
The war in Ukraine has exposed the fragility of global agriculture. Talos warns that disruption could motivate ransomware groups and state-backed actors to target the sector, and urges agricultural organizations to assess operational resilience.
A Huntress security-awareness walkthrough examines a fake Amazon account-suspension text and explains how to check its sender and link, spot suspicious wording, and resist pressure to act quickly.
The article argues that cybercrime is increasingly attractive to small-time criminals, who target individuals with fraud and identity theft, and that local law enforcement needs more cyber-investigation skills to respond.
In an August 2022 webinar, DarkOwl examined hacktivist participation, destructive malware, criminal-group divisions and attribution risks in the Russia–Ukraine conflict, reporting limited sustained disruption from cyberattacks.
The article explains cyber insurance coverage and industry roles, and describes how darknet exposure data can help insurers assess applicants, model risk and monitor policyholders. It cites ransomware-related incidents involving insurance organizations.
An explainer outlines four stealth tactics attackers use: abusing trusted applications and hosted services, concealing malicious activity through obfuscation, and establishing persistence to survive reboots.
A DarkOwl webinar explains how dark-web data, including exposed credentials and ransomware leaks, could supplement cybersecurity risk models. It discusses data limitations, supply-chain exposure, and ways organizations might assess risk.
Wiz warns that cloud-provider agents may be installed on customer VMs without clear awareness or consent, creating security risks and uncertainty over patching. It launched a community-driven dataset to help identify these agents and their attack surface.
A webinar recap outlines the NIST framework’s five functions—Identify, Protect, Detect, Respond and Recover—and describes CIS Controls as a more digestible way for organizations to prioritize cybersecurity measures.
The article advises MSPs to tailor cybersecurity discussions to stakeholders, use annual risk assessments and downtime-cost estimates to make risks tangible, and pair findings with remediation plans and regular reviews.
DarkOwl describes how cloud keys and API tokens are exposed in repositories or stolen by malware, then traded across darknet forums and Telegram. The article gives examples of offers and alleged uses, while noting some details are unclear.
DarkOwl reports that its dataset contains billions of email addresses and passwords, with common patterns including short passwords, years, “qwerty” and sequential numbers. The article recommends unique, long passwords and MFA.
A year after the Colonial Pipeline ransomware attack, Huntress reflects on lessons including the risk of unused VPN accounts with weak or reused passwords, the need for layered security, and the value of MFA and strong passwords.
An introductory explainer describes how attackers evade security tools and manipulate users or investigators, and why understanding these tactics helps defenders improve their defenses.
A DarkOwl–Blackpanda webinar explains how darknet searches can enrich incident response, investigate exposed data and credentials, and support proactive compromise assessments. Blackpanda describes a Southeast Asia case study involving 13.5 million records related to a.
A 2022 guide explains the NIST CSF’s five functions, implementation tiers and profiles, and ways organizations can use the framework to manage cyber risk and identify security gaps.
Three Huntress security researchers describe their daily work, tools and collaboration, including malware analysis, incident-response support, detector development and product testing.
An overview of EDR explains how it collects and analyzes endpoint activity, alerts security teams, and supports remediation, and how managed EDR adds human triage and guided response.
