All Huntress Blog Posts

All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Team Huntress
Cybersecurity Education
The Pattern Behind 2026's University Breaches
The Pattern Behind 2026's University Breaches

Four university breaches, one root cause: misconfiguration. See the pattern behind 2026's higher ed cyberattacks and how to fix the gap.

August 13, 2026
The Invisible Intruder: 5 Modern Threats You Need to Watch
The Invisible Intruder: 5 Modern Threats You Need to Watch

Ransomware, BEC, and social engineering attacks increasingly start with a simple login, not malware. See the five threat patterns IT and security teams need to watch for, and how to catch them early.

July 14, 2026
From Cookies to Keys: The Threat of Session Hijacking
From Cookies to Keys: The Threat of Session Hijacking

See how session hijacking reshaped cyber threats. Learn how stolen tokens enable rapid breaches, bypass security, and impact enterprise protection.

May 26, 2026
Attackers Didn’t Wait for AI. They Built Workflows Around It.
Attackers Didn’t Wait for AI. They Built Workflows Around It.

Attackers are building workflows around AI—fake tools, spoofed answers, and machine-speed phishing. See how Huntress is tracking this shift and what it means for defenders.

April 22, 2026
A Survivor’s Journey Through the Cybercrime Underground
A Survivor’s Journey Through the Cybercrime Underground

Mohammad believed he was flying to Laos for a legitimate IT job. Instead, he was trapped, coerced into scamming vulnerable people out of their life savings — hear the story directly from him.

February 26, 2026
Hiding in Plain Sight with App Domain Manager Injection
Hiding in Plain Sight with App Domain Manager Injection

A little-known .NET feature lets attackers execute malicious code inside trusted, Microsoft-signed applications without exploiting a single vulnerability - see exactly how it works.

February 19, 2026
#ShadyHacks with Kyle Hanslovan
#ShadyHacks with Kyle Hanslovan

Hackers don't need elite exploits when Microsoft 365 has built-in features they can chain together to bypass your entire security stack. Kyle Hanslovan shows exactly how it's done.

November 26, 2025
How to Offend Your IT Team: A Guide for the Security Unaware
How to Offend Your IT Team: A Guide for the Security Unaware

Every year during Cybersecurity Awareness Month, someone in your office does something that makes IT want to throw a laptop. This is that list — and what to do about it.

October 14, 2025
The Lamest Cybersecurity Tips We’re Tired of Hearing (and What to Do Instead)
The Lamest Cybersecurity Tips We’re Tired of Hearing (and What to Do Instead)

You know the advice: use strong passwords, don't click links, patch your systems. You've tuned it out, and that's understandable. Here's what actually works.

October 7, 2025
Let’s Be Offensive This Cybersecurity Awareness Month
Let’s Be Offensive This Cybersecurity Awareness Month

Twenty-one years of Cybersecurity Awareness Month and we're still talking about password hygiene. It's time to get offensive — see what proactive security actually looks like.

October 1, 2025
A Look Back at the Most Influential Cyber Threats: A Decade, Defined
A Look Back at the Most Influential Cyber Threats: A Decade, Defined

Ransomware, zero-days, supply chain attacks — the last decade pushed defenders harder than ever. Huntress looks back at the most influential cyber threats and what they taught the security community.

August 25, 2025
Tales of Too Many RMMs
Tales of Too Many RMMs

Huntress analysts have tracked incidents with multiple RMM tools in the same environment — some legacy, some installed by the attackers themselves. Here's why too many RMMs is a real security problem.

April 17, 2025
Cyber Hygiene Fails That Invite Hackers—and How to Shut Them Down
Cyber Hygiene Fails That Invite Hackers—and How to Shut Them Down

Poor credential management, misconfigurations, and forgotten accounts are the welcome mat attackers are looking for. Huntress documents the cyber hygiene failures it sees most. And, how to actually fix them.

April 4, 2025
Top 10 Worst Places to Store a Password
Top 10 Worst Places to Store a Password

47% of users reuse passwords across four or more accounts. That's just one uncomfortable stat. Here are the ten worst places people actually store passwords, and what better habits look like.

March 9, 2026
How to Detect and Eliminate Persistent Malware Before It Wreaks Havoc
How to Detect and Eliminate Persistent Malware Before It Wreaks Havoc

Hackers don't drop malware and leave. They dig in and stay as long as possible. Here's how to find and eliminate persistent malware before it causes damage, and why most legacy tools miss it.

March 7, 2025