Sign Up for Huntress Updates
Get insider access to Huntress tradecraft, killer events, and more.
The Huntress Cybersecurity Blog
The Huntress Cybersecurity Blog
Welcome to the Huntress Cybersecurity Blog, where we cut through the noise with real-world tradecraft to help you stay ahead of today’s threat actors. Our authors bring diverse backgrounds and hands-on experience to make cybersecurity education engaging, accessible, and grounded in the threats you actually face.
Featured Categories
Threat Research
Threat Research is where the Huntress SOC shows its work. We cover real intrusion investigations, malware and ransomware analysis, threat actor profiles, and the tradecraft attackers lean on: persistence, defense evasion, and living-off-the-land techniques. Whether it broke this week or has been around for years, this is where you see how attacks unfold and how we stop them.
No posts found.
Rapid Response & Vulnerabilities
When a vulnerability starts getting exploited, the clock starts. Rapid Response & Vulnerabilities covers CVE disclosures, vulnerability advisories, the exploitation activity we see in the wild, patch guidance, and disclosure timelines. Timely, focused, and built around what to do next.
No posts found.
The Latest
Defense Drill Interventions
Defense Drill Interventions
Defense Drill Interventions pair Managed EDR with just-in-time SAT training, so users learn the moment they fall for ClickFix.
November 5, 2026
Herd Immunity for Identity: Introducing Adversary Infrastructure
Herd Immunity for Identity: Introducing Adversary Infrastructure
Adversary Infrastructure is a new Managed ITDR feature that blocks attackers at Microsoft 365 sign-in, turning one tenant’s attack into fleet-wide protection.
November 5, 2026
Huntress + Hudu Integration: Security Context in Your IT Docs
Huntress + Hudu Integration: Security Context in Your IT Docs
Hudu's new Huntress integration brings your Huntress organizations, agents, memberships, and identities into Hudu. See what it does, how to set it up, and how Hudu built it on the Huntress API.
November 3, 2026
Wuffy, Go Fetch the Money Trail…Even if it Leads to the Kremlin
Wuffy, Go Fetch the Money Trail…Even if it Leads to the Kremlin
A $30 AI toy dog led Mastercard to 250+ scam sites. See how small charges and ransomware payouts follow the same money trail, and how to cut it off.
November 3, 2026
Reports of SIEM's Death Have Been Greatly Exaggerated
Reports of SIEM's Death Have Been Greatly Exaggerated
SIEM isn't dead... its bloated pricing model is. Discover why legacy models need to go, how AI fits in, and how to build a smarter, cost-effective security logging strategy.
October 29, 2026
Managed for Malice: How Attackers Turn MDM into Remote Access
Managed for Malice: How Attackers Turn MDM into Remote Access
Attackers abuse legitimate MDM platforms to deploy rogue RMM tools, turning device management into a pathway for remote access and persistence.
October 28, 2026
