Blog Post
CMMC: The Opportunity ($$) and Challenge for MSPs
CMMC isn't just another compliance checkbox — it's a market shift that will sort MSPs into winners and losers. If the EMR mandate taught you anything, it's that early movers win.
Hacking The Tragic Quadrant (Session 2)
You've seen the analyst grids that rank vendors into four boxes to show who's leading and disrupting a market. We made one of our own, this time ranking the threats those tools are built to stop. Welcome to the Huntress Tragic Quadrant, our decidedly less magical look at the attack techniques causing the most trouble right now.
Pulling from data across the 300,000 businesses we protect, we worked with our own security experts to map the specific tactics attackers are running right now: ClickFix, device code phishing, AI prompt injection, and more. Plotted by how often we see them and how much damage they cause, it's a clear read on exactly where to focus your defenses first.
On 3 November, Head of Security Operations APAC, Justin 'Juzzy' Allen—along with special guests—put the quadrant to the test live, spinning up the real techniques that landed on it and showing just how fast modern tradecraft goes from idea to execution.
Reading about the latest attacker tactics is one thing. Watching someone build them in front of you is another.
Watch Now
Justin 'Juzzy' Allen
Head of Security Operations APAC
James Northey
Senior Security Operations Analyst
Related Resources
- Read more about CMMC: The Opportunity ($$) and Challenge for MSPs
- Read more about Operational Resilience: Turning Your Incident Response Plan Into Muscle MemoryBlog Post
Operational Resilience: Turning Your Incident Response Plan Into Muscle Memory
An incident response plan only works if it's tested. Learn the 5 pillars of operational resilience and how to turn your plan into muscle memory before an attack hits.
- Read more about What is Software as a Service (SaaS)?Cybersecurity 101
What is Software as a Service (SaaS)?
Learn what Software as a Service (SaaS) is, how it works, and key cybersecurity considerations for secure SaaS implementation in your organization.
- Read more about Breaking Down Ransomware Attacks and How to Stay AheadBlog Post
Breaking Down Ransomware Attacks and How to Stay Ahead
No endpoint is immune. Ransomware is hitting businesses of every size, and double extortion has become the default. Here's how to break down what these attacks actually look like to stay ahead.
- Read more about OpenClaw, Rogue Agents, and Application HygieneBlog Post
OpenClaw, Rogue Agents, and Application Hygiene
OpenClaw AI agents pose a security risk in Microsoft tenants because they're often granted broad, high-impact cloud permissions that an attacker could immediately inherit if the agent is compromised. Learn why proactive application hygiene, which includes continuous monitoring and trimming unnecessary permissions, is essential for managing this identity-based threat.
- Read more about Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM PersistenceBlog Post
Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
See how a browser-in-the-browser phishing attack led to rogue ScreenConnect persistence and evasion tactics Huntress caught in the act.
- Read more about EDR Evasion: How Threat Actors Bypass Endpoint SecurityCybersecurity 101
EDR Evasion: How Threat Actors Bypass Endpoint Security
Learn how threat actors evade endpoint visibility, hide execution, and abuse legitimate tools, and how Huntress Managed EDR helps you investigate and respond.
- Read more about Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography VulnerabilityBlog Post
Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability
Gladinet CentreStack is being actively exploited, with the cl0p ransomware group now reportedly targeting internet-facing servers. Huntress has been tracking this from the start and has the latest updates.
- Read more about What is the Advanced Encryption Standard (AES)?Cybersecurity 101
What is the Advanced Encryption Standard (AES)?
Learn about the Advanced Encryption Standard (AES), a top-tier encryption protocol trusted for safeguarding sensitive data. Explore its history, functionality, features, and practical applications.
[Summary text goes here]
