You've seen the analyst grids that rank vendors into four boxes to show who's leading and disrupting a market. We made one of our own, this time ranking the threats those tools are built to stop. Welcome to the Huntress Tragic Quadrant, our decidedly less magical look at the attack techniques causing the most trouble right now.
Pulling from data across the 300,000 businesses we protect, we worked with our own security experts to map the specific tactics attackers are running right now: ClickFix, device code phishing, AI prompt injection, and more. Plotted by how often we see them and how much damage they cause, it's a clear read on exactly where to focus your defenses first.
On 3 November, Head of Security Operations APAC, Justin 'Juzzy' Allen—along with special guests—put the quadrant to the test live, spinning up the real techniques that landed on it and showing just how fast modern tradecraft goes from idea to execution.
Reading about the latest attacker tactics is one thing. Watching someone build them in front of you is another.
Related Resources
Endpoint security isn't failing because teams lack knowledge. It's failing because manual reviews, periodic audits, and post-incident fixes can't keep pace with the speed and scale of modern threat actors. By the time a misconfiguration surfaces, it's often already been open for too long.
Watch how hackers steal credentials, bypass Microsoft 365 MFA, and completely wreck enterprise systems in under 10 minutes.
Hackers have a new favorite flavor of tradecraft: identity. Hear about what identity attacks are, how they work, and how ITDR protects businesses.
[Summary text goes here]
