All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Joe Slowik
Orienting Intelligence Requirements to the Small Business Space
Orienting Intelligence Requirements to the Small Business Space

Priority intelligence requirements are a national security concept, but smaller businesses need threat intelligence too. Huntress bridges the gap between formal CTI frameworks and what small businesses can actually use.

December 12, 2023
Exploring the Value of Indicators In Small Business Defense
Exploring the Value of Indicators In Small Business Defense

IOCs are everywhere in CTI feeds and threat reports. But for small businesses, their usefulness has real limits. Huntress explores what indicators are actually worth in the small business defense context.

December 7, 2023
Spidering Through Identity for Profit and Disruption
Spidering Through Identity for Profit and Disruption

Scattered Spider disrupted MGM Resorts and targeted other Las Vegas casino operators. Here's how the group spiders through identity infrastructure for access, profit, and disruption.

September 14, 2023
Identity: The Third Phase of Security Operations
Identity: The Third Phase of Security Operations

Security operations has long focused on hosts and networks. Identity is the third pillar, and it requires different tools, different thinking, and a different relationship with cloud infrastructure.

August 10, 2023
Move It on Over: Reflecting on the MOVEit Exploitation
Move It on Over: Reflecting on the MOVEit Exploitation

cl0p took credit for the MOVEit zero-day exploitation that hit organizations worldwide. Huntress reflects on what the incident reveals about how supply chain attacks unfold and what defenders can learn.

July 7, 2023
Calm In The Storm: Reviewing Volt Typhoon
Calm In The Storm: Reviewing Volt Typhoon

Reports on Volt Typhoon range from factual to hyperbolic. Huntress cuts through the noise to review what's actually known, what it means for defenders, and how to calibrate your response.

June 8, 2023
Contextualizing Events & Enabling Defense: What 3CX Means
Contextualizing Events & Enabling Defense: What 3CX Means

The 3CX supply chain compromise was complex and multi-stage. Huntress contextualizes what happened — and what it means for defenders evaluating their own exposure to supply chain risk.

March 31, 2023
Investigating Intrusions From Intriguing Exploits
Investigating Intrusions From Intriguing Exploits

A generic-looking alert on February 2nd triggered a Huntress investigation that turned out to be anything but generic. Here's how the layers of the intrusion unfolded as analysts dug deeper.

February 8, 2023