Ransomware has evolved significantly since Huntress first introduced Ransomware Canaries. Here's a 2022 update on how canaries work, what's changed in the ransomware landscape, and what Huntress built to keep up.

Threat hunting isn't about machine learning and behavioral analytics — it's about finding the evidence an attacker left behind. Here's how Huntress defined persistent footholds and built a detection philosophy around them.

The security stack that worked yesterday is getting outpaced. Huntress Managed Antivirus adds 24/7 SOC oversight to endpoint protection. Here's what the new service actually includes and does.

The 'free equals worse' assumption about Defender is outdated. Huntress makes the case for why Microsoft Defender Antivirus deserves a serious look, and why it holds up better than most expect.

What if technology never changed? Huntress explores what their new beta approach means for product development — and why shipping features earlier, with more partner input, makes everyone safer.

TrickBot survived a coordinated takedown effort and kept evolving. TrickBoot adds UEFI firmware targeting to TrickBot's capabilities — here's Huntress on what it does and why it's a bigger deal.

If the Empire had known about the exhaust port, Episode IV plays out differently. External Recon gives organizations visibility into their exposed attack surface, before attackers find it first.

Backup and recovery are only useful if you know when to activate them. Huntress Ransomware Canaries exist to answer that question. Here's how they work and why they matter in real attacks.

Persistence hunting was what originally attracted this engineer to Huntress. Here's the story of how the detection philosophy evolved from there, and what it takes to keep pace with attackers.

Huntress found themselves directly interacting with a criminal who tried to sell MSP access on the dark web. Read the full story — from the dark web forum post to the arrest in Atlanta.