Endpoint Security
Endpoints are still where most attacks land. Endpoint Security covers EDR education, macOS security, managed antivirus, endpoint protection comparisons, and Huntress product deep dives, including the Ask the Mac Guy series. If it lives on a device and attackers can reach it, this is where we cover it.
The Latest Endpoint Security Blog Posts
The Fix for ClickFix: How Huntress Detects and Responds to a ClickFix Attack
App Control for the 99%: Why We’re Building Managed ESPM
Defending EDR Against Adversaries
Threat actors are actively targeting your security tools. Learn how threat actors disable antivirus and EDR through vulnerable drivers, tampering attacks, and malicious firewall rules, and how Huntress detects.
How Unified EDR and ITDR Stop Attacks Before They Spread
Huntress EDR/ITDR Correlations automatically stop infostealer-driven attacks by immediately linking an endpoint compromise to the compromised cloud identity, allowing for a single, coordinated response before stolen credentials can be reused.
The Evolving Linux Threat Landscape
Linux powers most of the internet and most of the enterprise — which makes it a high-value target most security teams underestimate. Here's what the threat landscape looks like heading into 2026.
Endpoint Security Trends
Antivirus isn't enough, perimeter defenses aren't enough, and threat actors are living off your land. These are the 10 endpoint security trends defining 2026 and what they mean for your security posture.
EDR Telemetry: The Value of Managed Investigations
Scalable EDR Advanced Agent Analytics with ClickHouse
Availability doesn't get the same attention as confidentiality and integrity, but it matters just as much. Here's how Huntress built scalable EDR agent analytics using ClickHouse to keep pace with growth.
Why Every Business Needs Endpoint Protection in 2025
70% of breaches start at the endpoint. Hackers are using legitimate tools, exploiting unpatched systems, and deploying ransomware, and the perimeter is harder to defend than ever. Here's what to do.
Silencing the EDR Silencers
EDR tampering is one of the most desirable capabilities for attackers, and vendors have largely ignored it. A Huntress researcher covers the techniques used to blind EDR products, and what can be done about it.
9 Pro Tips for Better Endpoint Security
70% of breaches start at the endpoint. IT teams are protecting more device types than ever with fewer resources. Here are nine practical tips from Huntress for cutting the endpoint attack surface down to size.