Modern attackers aren’t announcing themselves. They start with a login that checks out, an inbox nobody's watching closely, an account with more access than it needs…subtle things.
That’s why knowing how today’s threat actors operate is the first step to having a solid plan and real security posture. Setting yourself up for long-term defenses starts with knowing which gaps to close first, in what order, and how to keep them closed as the threat landscape shifts.
n this episode of _declassified, Huntress Senior Principal Security Researcher John Hammond and special guests take you inside the Silk Typhoon campaign against Microsoft Exchange. Together, they expose how operators spent five years tracking a state-backed hacking group and helped turn a massive cybercrime operation into a rare win for defenders.
NA/EMEA
October 8, 2026 | 12:00pm ET | 5pm BST | 9am PT
60 minutes
LATEST TRENDS
Attackers refined their playbooks in 2025, prioritizing stealth over speed. Even still, outcomes still often come down to fundamentals that didn’t get handled in time. The Huntress 2026 Cyber Threat Report breaks down what changed, what stayed familiar, and what we’re seeing most.
277%
Increase in RMM abuse
50%
Of malware loader activity involved ClickFix & fake CAPTCHAs
3HRS
Were added to the average time-to-ransom (TTR)
ACCOUNT TAKEOVER
Stolen tokens and forgotten admin access let attackers bypass MFA and log in as an “authorized” user. Know which accounts carry extra access, and keep watch for unusual activity after a login, not just at the door.
BUSINESS EMAIL COMPROMISE
One compromised account can quickly turn into impersonated decision makers, stolen information, or rerouted funds. Stop email takeovers before your “users” start acting sus.
PRIVILEGE ESCALATION & LATERAL MOVEMENT
Whether it’s stolen creds or misconfigurations, once attackers are in, they’re moving. And if they gain higher privileges, that’s when they go from just being “in” your system to “owning” it. That’s why shutting down the gaps that allow this is critical to strong posture.
POSTURE & READINESS
Posture, readiness, resiliency—whatever you want to call it, it’s the philosophy that attackers will try to get in, but you’ll be ready for ‘em. Future proofing means spotting gaps, closing them, and predicting where the next attack will strike.
YOUR 24/7 TEAM
When everyday security basics slip, attackers move fast. That’s where the Huntress Adversary Tactics and the 24/7 Security Operations Center come in. These experts track real-world tradecraft, stop threats around the clock, and shut down the kinds of mistakes attackers love to exploit.
HUNTRESS PRODUCTS
The Huntress security platform is built, owned, and operated entirely by our team from first signal through remediation. Predictable pricing with no noise, just meaningful alerts.
Huntress Managed EDR doesn't just watch your endpoints—it’s a complete solution. From the second a threat appears until it’s eliminated, we handle everything. You get 24/7 continuous protection, detection, and response that disrupts and remediates threats.
Identity Threat Detection and Response (ITDR)
Finds and stops identity-based threats in Microsoft 365 and Google Workspace—because identity is the new endpoint, and attackers know it. Huntress Managed ITDR is designed to detect, respond to, and resolve critical identity-based threats like account takeovers, business email compromise, unauthorized logins, and more.
Huntress Managed SIEM takes away the complexity and overhead usually associated with traditional SIEMs, giving you everything you need and nothing you don’t. 24/7 threat response and strengthened compliance, fully managed by SOC experts, at a predictable price.
Engaging, expert-backed, personalized training content built on real-world threat intelligence and created by Emmy® Award-winning animators to reduce human risk and build a strong security culture.
Most hackers don't break in — they just take advantage of messy settings, bad defaults, and accounts with too much access. Huntress Managed Identity Security Posture Management (ISPM) continuously finds and closes misconfigurations, risky access, and policy drift in Microsoft 365 so those attack paths stay closed.
Huntress Endpoint Security Posture Management is proactive security that hardens endpoints to defend against attacks like ransomware and infostealers, and prevent breaches. Get broad endpoint visibility and control over configurations, applications, vulnerabilities, and more in one location and a single solution.
Discover how Huntress can help you spot trouble early and respond fast, so small issues don’t turn into major incidents. Book a demo to see it for yourself.
