Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer 2026-10-08 75 True Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs 2026-10-07 72 True 2026-10-06 72 True How Huntress Detects and Responds to a ClickFix Attack 2026-10-05 70 True The First 24 Hours: What Happens When Ransomware Lands 2026-10-02 75 True Huntress Tragic Quadrant: Top Cyber Threats Wrecking Businesses 2026-10-01 75 True Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix 2026-09-28 78 True The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint 2026-09-24 70 True OAuth Token Theft Through Microsoft's Front Door | Huntress 2026-09-23 75 True Rogue RMM Abuse: How Attackers Exploit Remote Access Tools 2026-09-23 75 True DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer 2026-09-22 78 True AI Attacks Move Faster. Huntress’ Agentic SOC Keeps Up 2026-09-22 60 True The Tale of Two INC Ransom Notes: A Ransomware Timeline | Huntress 2026-09-21 78 True Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM 2026-09-17 75 True Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware 2026-09-15 80 True How Attackers Abuse VSS, and How Huntress Detects It 2026-09-14 70 True AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key 2026-09-10 90 True Grand Theft Auto VI hype leads to malware 2026-09-09 72 True AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance 2026-09-08 78 True Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity 2026-09-03 80 True Inside Knight Office, a New M365 AiTM Phishing Kit 2026-09-02 75 True Hackers Frequently Target Healthcare and Finance Orgs 2026-09-01 50 True The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT 2026-09-01 78 True PaperCut Zero-Day: Active Exploitation and Pre-Auth RCE 2026-08-28 85 True Boardroom Battles 2026: ASD’s Cyber Priorities & AI Risk 2026-08-27 50 True Retail Cybersecurity in ANZ: Five Decisions That Keep Trading 2026-08-27 70 True The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms 2026-08-27 75 True Insights into Suspected DPRK Workers 2026-08-26 75 True What Good Identity Hardening Looks Like 2026-08-25 65 True RMM Abuse: How Attackers Exploit Remote Access Tools | Huntress 2026-08-21 75 True Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware 2026-08-19 75 True MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer 2026-08-17 78 True 10 Hacker Summer Camp Standouts at Black Hat and DEF CON 2026-08-14 50 True Education Under Attack: The Pattern Behind Recent University Breaches 2026-08-13 72 True Fake Refund Scam Hits Shopify Shop App Users 2026-08-13 50 True Akira Hits Safe Mode: Ransomware Rebooting Around EDR 2026-08-12 78 True Five Years, 88,000 Backdoors, and a Pair of Handcuffs: Inside the Global Manhunt That Ended in an Arrest 2026-08-10 90 True From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS 2026-08-07 80 True Mac Malware Drains Crypto Wallets Via Fake CAPTCHA Scam 2026-08-06 70 True Inside an Oracle Database SQL Injection Attack | Huntress 2026-08-05 75 True Bank of America Phishing Email Delivers ScreenConnect Malware 2026-08-04 70 True Why App Control Fails Most Teams and How Managed ESPM Fixes It 2026-08-03 70 True Critical N-able N-central Vulnerability and Active Exploitation 2026-08-03 90 True Device Code Phishing Keeps Evolving. Here’s What to Watch For 2026-07-31 70 True Reverse Engineering the Six Stages of MacSync Stealer and RAT 2026-07-29 80 True Credential Stuffing Campaign Hits SonicWall | Huntress SOC Tracking 2026-07-28 65 True Inside FakeAgent: How a Claude Desktop Malvertising Campaign Hit 29 Organizations with SectopRAT 2026-07-22 75 True How the LSHIY Password-Spraying Attack Abuses OAuth’s ROPC Grant 2026-07-22 70 True What Are Initial Access Brokers? 2026-07-21 65 True Every Ransomware Attack Has a Backstory 2026-07-15 75 True