All Huntress Blog Posts
All Huntress Blog Posts
All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.
The Pattern Behind 2026's University Breaches
Four university breaches, one root cause: misconfiguration. See the pattern behind 2026's higher ed cyberattacks and how to fix the gap.
The Invisible Intruder: 5 Modern Threats You Need to Watch
Ransomware, BEC, and social engineering attacks increasingly start with a simple login, not malware. See the five threat patterns IT and security teams need to watch for, and how to catch them early.
From Cookies to Keys: The Threat of Session Hijacking
See how session hijacking reshaped cyber threats. Learn how stolen tokens enable rapid breaches, bypass security, and impact enterprise protection.
Attackers Didn’t Wait for AI. They Built Workflows Around It.
Attackers are building workflows around AI—fake tools, spoofed answers, and machine-speed phishing. See how Huntress is tracking this shift and what it means for defenders.
A Survivor’s Journey Through the Cybercrime Underground
Mohammad believed he was flying to Laos for a legitimate IT job. Instead, he was trapped, coerced into scamming vulnerable people out of their life savings — hear the story directly from him.
Hiding in Plain Sight with App Domain Manager Injection
A little-known .NET feature lets attackers execute malicious code inside trusted, Microsoft-signed applications without exploiting a single vulnerability - see exactly how it works.
#ShadyHacks with Kyle Hanslovan
Hackers don't need elite exploits when Microsoft 365 has built-in features they can chain together to bypass your entire security stack. Kyle Hanslovan shows exactly how it's done.
How to Offend Your IT Team: A Guide for the Security Unaware
Every year during Cybersecurity Awareness Month, someone in your office does something that makes IT want to throw a laptop. This is that list — and what to do about it.
The Lamest Cybersecurity Tips We’re Tired of Hearing (and What to Do Instead)
You know the advice: use strong passwords, don't click links, patch your systems. You've tuned it out, and that's understandable. Here's what actually works.
Let’s Be Offensive This Cybersecurity Awareness Month
Twenty-one years of Cybersecurity Awareness Month and we're still talking about password hygiene. It's time to get offensive — see what proactive security actually looks like.
A Look Back at the Most Influential Cyber Threats: A Decade, Defined
Ransomware, zero-days, supply chain attacks — the last decade pushed defenders harder than ever. Huntress looks back at the most influential cyber threats and what they taught the security community.
Tales of Too Many RMMs
Huntress analysts have tracked incidents with multiple RMM tools in the same environment — some legacy, some installed by the attackers themselves. Here's why too many RMMs is a real security problem.
Cyber Hygiene Fails That Invite Hackers—and How to Shut Them Down
Poor credential management, misconfigurations, and forgotten accounts are the welcome mat attackers are looking for. Huntress documents the cyber hygiene failures it sees most. And, how to actually fix them.
Top 10 Worst Places to Store a Password
47% of users reuse passwords across four or more accounts. That's just one uncomfortable stat. Here are the ten worst places people actually store passwords, and what better habits look like.
How to Detect and Eliminate Persistent Malware Before It Wreaks Havoc
Hackers don't drop malware and leave. They dig in and stay as long as possible. Here's how to find and eliminate persistent malware before it causes damage, and why most legacy tools miss it.