Blog Post
CMMC: The Opportunity ($$) and Challenge for MSPs
CMMC isn't just another compliance checkbox — it's a market shift that will sort MSPs into winners and losers. If the EMR mandate taught you anything, it's that early movers win.
ClickFix Explained in 5 Minutes
ClickFix scams get you to run an attacker’s code yourself, and they work because copying and pasting feels like a normal part of getting things done online. A fake human verification page or a fake Windows update asks you to open the Run dialog or a terminal and paste in a command. The moment you hit Enter, your computer runs the malicious code. Our Security Operations Center walks through what ClickFix looks like in the wild and the simple moves that keep your team safer.
Watch the clip to see how one paste can kick off an entire attack.
Related Resources
- Read more about CMMC: The Opportunity ($$) and Challenge for MSPs
- Read more about Operational Resilience: Turning Your Incident Response Plan Into Muscle MemoryBlog Post
Operational Resilience: Turning Your Incident Response Plan Into Muscle Memory
An incident response plan only works if it's tested. Learn the 5 pillars of operational resilience and how to turn your plan into muscle memory before an attack hits.
- Read more about What is Software as a Service (SaaS)?Cybersecurity 101
What is Software as a Service (SaaS)?
Learn what Software as a Service (SaaS) is, how it works, and key cybersecurity considerations for secure SaaS implementation in your organization.
- Read more about Breaking Down Ransomware Attacks and How to Stay AheadBlog Post
Breaking Down Ransomware Attacks and How to Stay Ahead
No endpoint is immune. Ransomware is hitting businesses of every size, and double extortion has become the default. Here's how to break down what these attacks actually look like to stay ahead.
- Read more about OpenClaw, Rogue Agents, and Application HygieneBlog Post
OpenClaw, Rogue Agents, and Application Hygiene
OpenClaw AI agents pose a security risk in Microsoft tenants because they're often granted broad, high-impact cloud permissions that an attacker could immediately inherit if the agent is compromised. Learn why proactive application hygiene, which includes continuous monitoring and trimming unnecessary permissions, is essential for managing this identity-based threat.
- Read more about Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM PersistenceBlog Post
Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
See how a browser-in-the-browser phishing attack led to rogue ScreenConnect persistence and evasion tactics Huntress caught in the act.
- Read more about EDR Evasion: How Threat Actors Bypass Endpoint SecurityCybersecurity 101
EDR Evasion: How Threat Actors Bypass Endpoint Security
Learn how threat actors evade endpoint visibility, hide execution, and abuse legitimate tools, and how Huntress Managed EDR helps you investigate and respond.
- Read more about Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography VulnerabilityBlog Post
Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability
Gladinet CentreStack is being actively exploited, with the cl0p ransomware group now reportedly targeting internet-facing servers. Huntress has been tracking this from the start and has the latest updates.
- Read more about What is the Advanced Encryption Standard (AES)?Cybersecurity 101
What is the Advanced Encryption Standard (AES)?
Learn about the Advanced Encryption Standard (AES), a top-tier encryption protocol trusted for safeguarding sensitive data. Explore its history, functionality, features, and practical applications.
