AI
AI is reshaping far more than the SOC. This is where we cover the wider AI conversation: industry trends, new tools, how attackers are putting AI to work, and what it all means for the businesses trying to keep up.
The Latest AI Blog Posts
Fighting AI Slop in Production Codebases: How Huntress Improved Fable 5.1’s API Recall
Fighting AI Slop in Production Codebases: How Huntress Improved Fable 5.1’s API Recall
Sep 22, 2026
AI SIEM Search: Stop Learning Query Languages, Start Finding Answers
AI SIEM Search: Stop Learning Query Languages, Start Finding Answers
Sep 7, 2026
Shadow AI Is Outpacing Governance in Financial Services
Shadow AI Is Outpacing Governance in Financial Services
Sep 3, 2026
The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms
The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms
Aug 27, 2026
The Real Reason You Won't Hand the Work to AI
The Real Reason You Won't Hand the Work to AI
Aug 19, 2026
How a Google Search for Claude Led to MacSync
How a Google Search for Claude Led to MacSync
Aug 17, 2026
Fake Claude Install Guide Leads to MacSync Stealer and RAT: What We Pulled From the Attacker’s Servers
Fake Claude Install Guide Leads to MacSync Stealer and RAT: What We Pulled From the Attacker’s Servers
Jul 29, 2026
Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT
Jul 22, 2026
The AI Arms Race in Recruiting: The New Reality of the Job Market
The AI Arms Race in Recruiting: The New Reality of the Job Market
Jul 6, 2026
How EvilTokens Turbocharges Old School Phishing with AI
How EvilTokens Turbocharges Old School Phishing with AI
Device code phishing doesn't need stolen passwords or malware—just a legitimate auth flow. Learn how EvilTokens weaponized AI to run this attack across 344 organizations.
May 11, 2026
Codex Red: Untangling a Linux Incident With an OpenAI Twist (Part 2)
Codex Red: Untangling a Linux Incident With an OpenAI Twist (Part 2)
A developer used OpenAI’s Codex to handle suspicious Linux activity, leading to unexpected outcomes found by Huntress SOC analysts during an investigation.
Apr 22, 2026
