2021-12-17 00:00 UTC
Security Journalism
Security Journalism
Log4Shell: A Tradecraft Tuesday Recap | Huntress
We recap our December 2021 episode of Tradecraft Tuesday where we dive into the Log4Shell vulnerability.
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 4,624 matching records.
AUTO-POLL // 2026-10-07 19:25 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P6 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 7
RANSOMWARE
P6
COOL // 71 ARTICLES
TUE
Oct 6
RANSOMWARE
P3
COOL // 61 ARTICLES
MON
Oct 5
RANSOMWARE
P5
COOL // 48 ARTICLES
SUN
Oct 4
RANSOMWARE
P10
WARM // 11 ARTICLES
SAT
Oct 3
RANSOMWARE
P4
COOL // 14 ARTICLES
FRI
Oct 2
RANSOMWARE
P7
COOL // 46 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
2021-12-14 00:00 UTC
Security Journalism
Security Journalism
Ditching FUD for FUN in Security Awareness Training | Huntress
Learn how to make security awareness training enjoyable and effective by ditching fear, uncertainty, and doubt (FUD) in the Huntress Blog.
P0
2021-12-10 00:00 UTC
Security Journalism
Security Journalism
Critical RCE Vulnerability: log4j - CVE-2021-44228 | Huntress
Our team is currently investigating CVE-2021-44228, a critical vulnerability that’s affecting a Java logging package.
P30
2021-12-10 00:00 UTC
Security Journalism
Security Journalism
Critical RCE Vulnerability Updates (log4j - CVE-2021-44228) | Huntress
Read about how our team investigated CVE-2021-44228, a critical vulnerability that was affecting a Java logging package.
P30
2021-12-09 12:57 UTC
Other
Other
Inside the Hive
Deep dive into Hive RaaS, analysis of latest samples
P0
2021-12-07 00:00 UTC
Other
Other
LPE vulnerability in Eltima (3rd-party cloud desktop driver)
Several cloud desktop solutions rely on a 3rd-party library called Eltima SDK to provide USB over Ethernet capabilities, to allow users to connect and share local devices such as webcams. SentinelLabs discovered vulnerabilities in Eltima drivers, including proprietary versions used by several cloud services (among them AWS Workspaces), that would allow unprivileged users to escalate privileges to kernel mode.
P0
2021-12-07 00:00 UTC
Security Journalism
Security Journalism
The True Value of the Huntress SOC Team | Huntress
Automation is great—but when it comes to threat detection and analysis, it doesn’t replace the need for human expertise.
P0
2021-12-02 00:00 UTC
Other
Other
AWS SageMaker Jupyter Notebook instance CSRF
AWS SageMaker Notebook server lacked a check of the Origin header that led to a CSRF vulnerability. An attacker could have read sensitive data and execute arbitrary actions in customer environments. The exact same issue existed in GCP previously.
P0
2021-11-30 00:00 UTC
Security Journalism
Security Journalism
Is There a Right Way to Set Up Two-Factor Authentication? | Huntress
In this blog, we aim to answer the question: how easy is it for hackers to circumvent two-factor authentication? We look at their tricks to learn the best way to set up 2FA.
P0
2021-11-23 12:00 UTC
Government
Government
Decrypting diversity: Diversity and inclusion in cyber security report 2021
The 2nd joint report between the NCSC and KPMG UK benchmarks against the 2020 findings to gauge what progress has been made.
P0
2021-11-17 00:00 UTC
Other
Other
CredManifest (Azure AD keyCredential property information disclosure)
Automation Account 'Run as' credentials (PFX certificates) were being stored in cleartext, in Azure Active Directory (AAD). These credentials were available to anyone with the ability to read information about App Registrations (typically most AAD users).
P0
2021-11-17 00:00 UTC
Security Journalism
Security Journalism
Investigating Unauthorized Access | Huntress
Learn about our investigation regarding unauthorized access to our QA and product testing environment.
P0
2021-11-15 00:00 UTC
Other
Other
AWS SOC 2 type 2 failure (Fall 2021)
Information about this issue is under NDA, but AWS customers can read about it on page 98 of the report, which is available for download through AWS Artifact. Note: This issue is outside the scope of this database's usual criteria for inclusion, but has been kept for historic reasons, as it was included in the original CSP Security Mistakes dataset.
P0
2021-11-10 00:00 UTC
Other
Other
AWS API Gateway HTTP header smuggling
A flaw in AWS API Gateway enabled hiding HTTP request headers. Tampering with HTTP requests visibility enabled bypassing IP restrictions, cache poisoning and request smuggling.
P0
2021-11-09 00:00 UTC
Security Journalism
Security Journalism
How Ransomware Works and Why It's a Hacker Favorite | Huntress
Ransomware marks a lucrative business in today’s cyber-driven world. Learn more about ransomware and why it’s a favorite among hackers.
P15
2021-11-03 14:16 UTC
Other
Other
The Darker Things
BlackMatter and their victims
P0
2021-11-02 00:00 UTC
Security Journalism
Security Journalism
Top Tips and Takeaways from hack_it 2021.2 | Huntress
It’s amazing what you can learn by thinking like a hacker! We share our top tips and takeaways from our third hack_it security training event.
P0
2021-10-28 14:19 UTC
Other
Other
Cannibal Carders
Group-IB uncovers largest networks of fake shops – phishing websites disguised as card shops
P0
2021-10-28 00:00 UTC
Security Journalism
Security Journalism
Vulnerabilities & Info Disclosure in MSP Survey Software | Huntress
We discovered an information disclosure vulnerability in survey software designed for MSPs. We detail how we worked with the Crewhu team to responsibly disclose and remedy the vulnerability.
P0
2021-10-26 00:00 UTC
Security Journalism
Security Journalism
Evolving the Hunt: Host Isolation for Smarter Defense
Learn about Host Isolation, a new feature that's just been added to The Huntress Security Platform.
P0
2021-10-22 00:00 UTC
Security Journalism
Security Journalism
Hackers Are Exploiting a Vulnerability in Billing Software | Huntress
Huntress discovered threat actors abusing a blind SQL injection vulnerability in BillQuick Web Suite. Follow our analysis and latest findings in this blog.
P0
2021-10-18 00:00 UTC
Other
Other
Cloud SQL vulnerabilities in Google's RDS offering
Multiple vulnerabilities were found in Google Cloud SQL, including config file injection leading to RCE, information disclosure in the Cloud SQL Auth Proxy, and a design issue in Postgres IAM authentication allowing access token theft. Other issues included GCR permission misconfigurations and potential for terminal escape sequence injection attacks via gcloud.
P0
2021-10-12 00:00 UTC
Security Journalism
Security Journalism
New Faces and Features to Help You Evolve the Hunt | Huntress
Learn about Huntress’ newest platform and service updates, including Managed Antivirus, Host Isolation and 24/7 ThreatOps coverage.
P0
2021-10-07 00:00 UTC
Other
Other
Azure NotLegit
Azure App Service had an insecure default behavior that exposed the source code of customer applications written in PHP, Python, Ruby, or Node, that were deployed using “Local Git”.
P0
2021-10-06 00:00 UTC
Security Journalism
Security Journalism
Managed Antivirus Is Here!
After months of rigorous beta testing, we’re excited to announce the addition of our Managed Antivirus service to the Huntress Security Platform.
P0
2021-10-05 00:00 UTC
Security Journalism
Security Journalism
Top 4 Tips for Cybersecurity Awareness Month | Huntress
In honor of National Cybersecurity Awareness Month, here are four critical tips to help you take both your cybersecurity hygiene and knowledge up a notch.
P0
2021-10-04 00:00 UTC
Security Journalism
Security Journalism
Free Training Tool for Unlocked Computers
Teach employees not to leave computers unlocked with this tool by Huntress, the fun cyber security awareness training provider.
P0
2021-09-29 00:00 UTC
Other
Other
Azure AD Seamless SSO logging bypass
Azure Active Directory Seamless Single Sign-On feature allowed single-factor brute-force attacks against Azure AD without generating sign-in events in the targeted organization’s tenant.
P0
2021-09-29 00:00 UTC
Other
Other
Dropped active Google Cloud Armor security policy
There is a known issue where updating a BackendConfig resource using the v1beta1 API removes an active Google Cloud Armor security policy from its service. If you do not configure Google Cloud Armor on your Ingress resources via the BackendConfig, then this issue does not affect your clusters.
P0
2021-09-29 00:00 UTC
Security Journalism
Security Journalism
Learn to Think Like a Hacker at hack_it 2021.2 | Huntress
Do you have what it takes to hack_it? Read on for a sneak peek into our upcoming hack_it event and how it can help you better understand how hackers use their skills against you.
P0