Huntress validated a SolarWinds N-central vulnerability that quietly allowed attackers to enumerate devices. Here's the technical breakdown, and what SolarWinds patched to fix it.

Antivirus got better at detecting malicious behavior. So attackers got better at hiding behind trusted processes. This post covers how indirection lets them evade even modern heuristic detection.

The first Ask Huntress: a fake .XPS invoice arrived in a partner's inbox and led somewhere unexpected. Here's how Huntress traced it to a credential phishing page.