All Huntress Blog Posts
All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.
Orienting Intelligence Requirements to the Small Business Space
Priority intelligence requirements are a national security concept, but smaller businesses need threat intelligence too. Huntress bridges the gap between formal CTI frameworks and what small businesses can actually use.
Exploring the Value of Indicators In Small Business Defense
IOCs are everywhere in CTI feeds and threat reports. But for small businesses, their usefulness has real limits. Huntress explores what indicators are actually worth in the small business defense context.
Spidering Through Identity for Profit and Disruption
Scattered Spider disrupted MGM Resorts and targeted other Las Vegas casino operators. Here's how the group spiders through identity infrastructure for access, profit, and disruption.
Identity: The Third Phase of Security Operations
Security operations has long focused on hosts and networks. Identity is the third pillar, and it requires different tools, different thinking, and a different relationship with cloud infrastructure.
Move It on Over: Reflecting on the MOVEit Exploitation
cl0p took credit for the MOVEit zero-day exploitation that hit organizations worldwide. Huntress reflects on what the incident reveals about how supply chain attacks unfold and what defenders can learn.
Calm In The Storm: Reviewing Volt Typhoon
Reports on Volt Typhoon range from factual to hyperbolic. Huntress cuts through the noise to review what's actually known, what it means for defenders, and how to calibrate your response.
Contextualizing Events & Enabling Defense: What 3CX Means
The 3CX supply chain compromise was complex and multi-stage. Huntress contextualizes what happened — and what it means for defenders evaluating their own exposure to supply chain risk.
Investigating Intrusions From Intriguing Exploits
A generic-looking alert on February 2nd triggered a Huntress investigation that turned out to be anything but generic. Here's how the layers of the intrusion unfolded as analysts dug deeper.