Threat Research

Threat Research covers the alerts that actually matter: CVE disclosures, vulnerability advisories, malware analysis, rapid response write-ups, and threat actor profiling — published as fast as the threat moves. When something breaks in the wild, this is where you find out what it means and what to do about it.

When "Moderate" Means "Sometimes"

The same NTLM leakage primitive that got patched in the Snipping Tool exists in Windows Explorer's search: handler. No CVE. No fix. If your patching relies on CVE coverage, you have a blind spot.

Andrew Schwartz

Jun 2, 2026

The Latest Threat Research Blog Posts

View All Blog Posts

Threat Actors
Browse the Huntress Threat Library to explore threat actor profiles, learn the origins of ransomware attacks, and gain actionable insights into tactics, techniques, and procedures (TTPs), prevention strategies, and best practices to protect your organization.
Learn more
Ransomware
Explore the details of notable ransomware incidents from the past. Understand their encryption methods, operational impact, and the strategies used to mitigate these threats. Learn from historical attacks to better prepare for future ransomware campaigns.
Learn more
Malware
Examine the full spectrum of malicious software, from stealers and droppers to banking Trojans. Gain a technical understanding of infection vectors and discover actionable remediation steps to neutralize threats effectively.
Learn more
Vulnerabilities
Stay informed with up-to-date details on the latest zero-day exploits and patched vulnerabilities (CVEs). Assess risk levels and implement immediate mitigation strategies to reduce exposure and safeguard your systems.
Learn more
Data Breaches
Investigate the root causes and consequences of major security incidents. Leverage insights from past data breaches to identify common vulnerabilities and fortify your defenses against future attacks.
Learn more
Threat Reports
Access current and archived cyber threat reports for a deep dive into the TTPs defining the modern threat landscape. By analyzing telemetry from millions of endpoints and identities, Huntress delivers the actionable insights necessary to shift from reactive defense to proactive hunting.
Learn more

Explore the Huntress Threat Library

The Huntress Threat Library is a dynamic and continuously updated resource for navigating the complex cyber threat landscape. Access in-depth insights into vulnerabilities, malware, threat actors, ransomware, and data breaches. This library is designed to equip you with actionable intelligence and clear analysis, empowering you to understand the who, what, and how of the threats targeting organizations today.