Curated cybersecurity insights, opinions, emerging technologies, AI security topics, and notable industry discussions.
1296 articles
Huntress argues that fear of embarrassment or punishment can discourage people from reporting cyber incidents, and recommends open communication, shared experiences, and engaging security awareness training.
The article explains how cyber insurers use security attestations to assess SMBs, why requirements such as EDR and RMM use can be unclear, and how CIS Controls and the NIST Cybersecurity Framework can guide security improvements.
The article outlines coverage gaps, deployment burdens, vulnerabilities, supply-chain risks and attacker evasion associated with endpoint agents, and argues that agentless tools can complement them in cloud environments.
MDR combines security technology with a managed team that hunts for threats that bypass preventive tools, investigates suspicious activity, and helps organizations respond.
Huntress founders’ tongue-in-cheek 2022 predictions call for clearer security offerings, endpoint-focused protection for remote work, risk-based auto-updates and more mature SMB security operations.
Wiz argues that cloud providers and customers need clearer shared responsibilities, with security benchmarks, threat-model change logs and a cloud vulnerability database to improve transparency and remediation.
Huntress reviews 2021 trends including ransomware, exposed servers, supply-chain attacks, LOLBins, incomplete remediation and alert fatigue, and shares defensive lessons such as isolating backups, enabling MFA and planning incident response.
The article argues that fear-based security training can discourage employee engagement and recommends positive, interactive learning and incentives to build security awareness and a stronger security culture.
The article explains how SIM swapping can let attackers intercept SMS authentication codes, and recommends enabling 2FA, avoiding SMS-only authentication when possible, and educating users about MFA.
Wiz argues that cloud vulnerabilities lack consistent identifiers, notifications and remediation tracking, using AWS, OMIGOD and ChaosDB as examples. The company later says it launched the community-driven Open CVDB in June 2022.
Huntress recaps its hack_it 2021.2 training event, covering a cybercrime investigation exercise, dark-web markets, and macro-enabled phishing. Key lessons include tabletop exercises, the value of data to criminals, and how phishing campaigns pressure recipients.
Huntress shares four cybersecurity awareness tips: prepare to detect and respond to threats, verify suspicious emails and links, maintain basic security practices such as patching and MFA, and look for weaknesses from an attacker’s perspective.
Huntress previews its free hack_it 2021.2 event, featuring interactive sessions on threat actor tradecraft, compromised organizations, phishing, and macro-enabled malware, plus a paid Windows attack-response workshop.
A Huntress explainer traces changes in hacker tradecraft, from early malware and reactive defenses to organized, financially motivated groups using phishing and persistence to maintain covert access.
The article explains factors that drive breach costs and argues that businesses—especially SMBs—should invest in layered security tools and human expertise rather than rely on a single product or respond only after an incident.
Huntress reviews the 2021 REvil attack through Kaseya VSA, describing its impact on MSPs and customers, key attack steps, the decryption key’s arrival, and lessons on vendor security and incident preparedness.
The article explains how managed detection and response analysts investigate endpoint persistence, including reviewing autoruns and suspicious file paths, and describes a manufacturing customer's malware incident and remediation process.
Security experts discuss how email enables phishing and ransomware delivery, including attachment and link evasion tactics, social engineering, and defenses such as automated scanning, employee training, and reporting suspicious messages.
The article advises MSPs to maintain current asset inventories, define security responsibilities in customer contracts, and prepare incident response plans to reduce cyber risk and limit damage.
Huntress analysts found Raccine, an open-source utility that uses Windows IFEO debuggers and YARA rules to block ransomware-related commands. It can be deployed through Group Policy, but may also block legitimate activity.
The article compares AV, NGAV and EDR, arguing each has limitations and that organizations should assess risk, layer controls and ensure experts can act on EDR telemetry. It also promotes Huntress threat hunting for persistence.
A Huntress interview discusses ransomware’s business and insurance costs, changing ransom severity, and how basic security practices—such as training, closing RDP, and reviewing access—may help reduce risk.
DarkOwl says it identified more than two dozen active darknet imageboards beyond 4chan and 8kun, spanning several languages. The article explains their communities, anonymity model, and relevance to investigations.
The article explains how darknet exposure can raise cyber risk for individuals and organizations, covering ransomware extortion, phishing, credential stuffing and third-party exposure, along with risk factors and basic mitigations.
