Where do identity attacks actually come from? Not where you think. The answer isn't a country, a VPN, or a data center — and getting that wrong leaves you exposed.
If you administer a Microsoft 365 tenant, audit your OAuth applications right now. Huntress spent six months researching how malicious apps persist inside M365. Statistically, yours may already be infected.
OAuth 2.0 is everywhere, and its different implementations in Google Cloud and Azure have radically different attack surfaces. Huntress walks through a device code phishing case study across both platforms.
Santa's workshop has a strict policy against the Naughty List. Some VPNs and proxies are on it. Here's how businesses can tell the difference between secure network tools and ones that create risk.
MFA feels like a Mostly Fruitless Annoyance until you understand how cleanly it divides the identity attack surface. Here's what happens to account takeover attempts when MFA is — and isn't — in place.
Six thousand people opened Calculator at the same time — and none of them were doing math. Here's the behind-the-scenes story of how Huntress turned real attacker TTPs into CTF 2024 challenges.
This session explores how attackers are evolving their tactics, where organizations remain most vulnerable, and what practical steps businesses can take to strengthen email security as part of a broader cybersecurity strategy.
In this session, we’re unveiling the new Managed ITDR powered by our latest capability, Rogue Apps, built from the ground up to protect Microsoft 365 environments without the noise or guesswork.
Come join us for a livestream where we’re introducing Huntress MDR for Microsoft 365’s new Unwanted Access capability.
Register below to join the thousands of others following our monthly deep dive on hacker tradecraft and other security news.
