2021-09-07 00:00 UTC
Security Journalism
Security Journalism
Malware Deep Dive | Huntress
In this blog, read along as we investigate a malicious foothold and decode the payload step by step.
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 5,122 matching records.
AUTO-POLL // 2026-10-17 09:40 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P0 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 17
CLEAR
P0
COOL // 5 ARTICLES
FRI
Oct 16
RANSOMWARE
P8
COOL // 56 ARTICLES
THU
Oct 15
ACTIVE EXPLOITATION
P7
COOL // 87 ARTICLES
WED
Oct 14
RANSOMWARE
P8
COOL // 74 ARTICLES
TUE
Oct 13
ACTIVE EXPLOITATION
P7
COOL // 73 ARTICLES
MON
Oct 12
RANSOMWARE
P5
COOL // 42 ARTICLES
SUN
Oct 11
ACTIVE EXPLOITATION
P5
COOL // 6 ARTICLES
2021-08-26 00:00 UTC
Other
Other
ChaosDB
Azure's Cosmos DB database service was vulnerable to remote account takeover. Any Azure user could gain full admin access to other customers' Cosmos DB instances without authorization. The vulnerability had a trivial exploit that doesn't require any previous access to the target environment.
P0
2021-08-26 00:00 UTC
Security Journalism
Security Journalism
ProxyShell vs. ProxyLogon: What's the Difference? | Huntress
We clarify the differences between the ProxyShell (August 2021) and the ProxyLogon (March 2021) exploits impacting Microsoft Exchange on-premises servers.
P0
2021-08-24 00:00 UTC
Security Journalism
Security Journalism
Bullseye: A Story of a Targeted Cyberattack | Huntress
Dive into a cyber threat analysis that details a sneaky enabler of a targeted cyberattack: persistence.
P0
2021-08-19 00:00 UTC
Security Journalism
Security Journalism
Microsoft Exchange Servers Still Vulnerable to ProxyShell | Huntress
Attackers are scanning for vulnerable Microsoft Exchange servers and abusing the latest line of Exchange vulnerabilities that were patched in early 2021.
P0
2021-08-17 00:00 UTC
Security Journalism
Security Journalism
Snakes on a Domain: An Analysis of a Python Malware Loader | Huntress
Join us on a threat analysis journey as we discover a very shady Python—and a very friendly RAT.
P0
2021-08-13 14:33 UTC
Other
Other
Under the hood. Group-IB Threat Intelligence. Part 2
How we make Tailored Threat Intelligence
P0
2021-08-11 00:00 UTC
Security Journalism
Security Journalism
A Brief Evolution of Hacker Tradecraft | Huntress
What can we learn from studying cybercriminals? Here’s a brief history of how hackers are evolving their tradecraft and attack tactics.
P0
2021-08-06 14:36 UTC
Other
Other
Bold ad campaign
AWC joins illicit carding business by offering 1 Mln compromised cards for free
P0
2021-08-06 07:28 UTC
Other
Other
P15
2021-08-05 12:39 UTC
Other
Other
Prometheus TDS
The key to success for Campo Loader, Hancitor, IcedID, and QBot
P0
2021-08-05 00:00 UTC
Other
Other
Lightsail object storage access keys logged
Lightsail object storage allows the creation of access keys which were logged to CloudTrail (both access key and secret key)
P0
2021-08-05 00:00 UTC
Security Journalism
Security Journalism
Breaking Down the Cost of Cybersecurity | Huntress
Learn about the costs of cybersecurity—and the risks of not having the right security stack—in this blog.
P0
2021-08-03 07:33 UTC
Other
Other
P0
2021-07-29 07:42 UTC
Other
Other
Under the hood. Group-IB Threat Intelligence. Part 1
Dive into Breached DB section
P0
2021-07-28 00:00 UTC
Security Journalism
Security Journalism
Lessons Learned During the Kaseya VSA Supply Chain Attack | Huntress
The Huntress team recaps what happened during the Kaseya VSA supply chain attack—and what we can learn from it.
P0
2021-07-26 00:00 UTC
Security Journalism
Security Journalism
The Age of Rapid-Response Managed Detection and Response | Huntress
We teamed up with our partners at Magna5 to talk about providing real-time prevention, detection and response.
P0
2021-07-22 07:45 UTC
Other
Other
P0
2021-07-21 00:00 UTC
Security Journalism
Security Journalism
Why Persistence Is a Staple for Today’s Hackers | Huntress
Learn how hackers use persistence to gain—and keep—access to your virtual environments.
P0
2021-07-20 00:00 UTC
Security Journalism
Security Journalism
The Hunt to Find Origins of Kaseya's VSA Mass Ransomware | Huntress
Our Security Researchers discuss how hackers executed the Kaseya VSA supply chain attack—and why the blast radius of the incident was relatively limited.
P15
2021-07-14 00:00 UTC
Security Journalism
Security Journalism
Experts Weigh in on the State of Email-Based Threats | Huntress
Cybersecurity experts John Hammond and Sébastien Goutal provide insider insight on the current state of phishing, ransomware and email-based attacks.
P15
2021-07-13 00:00 UTC
Security Journalism
Security Journalism
Huntress VSA Vaccine | Huntress
In this blog, we share details on the vaccine Huntress deployed to our partners to protect them from being infected by the Kaseya VSA ransomware attack.
P15
2021-07-03 00:00 UTC
Security Journalism
Security Journalism
Rapid Response: Mass MSP Ransomware Incident | Huntress
Huntress is tracking a critical ransomware incident affecting MSPs and their customers, caused by a sophisticated Kaseya VSA supply chain attack.
P15
2021-07-02 07:51 UTC
Other
Other
P0
2021-06-30 08:05 UTC
Other
Other
REvil Twins: Ransomware-as-a-Service program
Deep Dive into Prolific RaaS Affiliates' TTPs
P15
2021-06-30 00:00 UTC
Security Journalism
Security Journalism
Critical Vuln.: PrintNightmare Exposes Windows Servers to RCE | Huntress
Huntress is aware of PrintNightmare, a critical RCE and local privilege escalation vulnerability. This serious security flaw affects many Windows servers.
P25
2021-06-25 00:00 UTC
Other
Other
DHCP abuse for code exec
Under certain conditions, an attacker can flood DHCP packets to the victim VM, allowing it to impersonate the Metadata server, and grant themselves SSH access.
P0
2021-06-22 00:00 UTC
Security Journalism
Security Journalism
Reducing Cyber Risk and Liability with Managed Threat Detection | Huntress
Providing cybersecurity services involves some risk and liability. Learn why managed detection and response could be the key to lowering your cyber risk.
P0
2021-06-15 00:00 UTC
Security Journalism
Security Journalism
ThreatOps Analysis: Keyed Malware | Huntress
Dive into a threat analysis with us as we dissect a PowerShell command with an environmentally keyed malware payload.
P0
2021-06-13 00:00 UTC
Other
Other
Privilege escalation on Dialogflow cloud platform
A privilege escalation vulnerability was discovered in Google's Dialogflow cloud platform. When downgrading a user's role from Developer to Reviewer, the permissions were not properly updated, allowing the user to retain Developer-level access. This issue persisted in the Google Cloud Console, where role changes resulted in additive permissions instead of replacements.
P10