Huntress

Volume 342, Issue 2 · 11 articles from 2 issues

In This Issue

• Huntress API Update: New Endpoints, Webhooks, and Automation
• Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity
• Credential Theft: How Attackers Steal & Use Stolen Credentials
• Best Practices for Good Endpoint Hardening
• AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
• AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
• AI SIEM Search
• Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence
• The 20 Most Common Passwords Hackers Target in 2026
• Critical N-able N-central Vulnerability and Active Exploitation
• Grand Theft Auto VI Hype Leads to Malware

Huntress API Update: New Endpoints, Webhooks, and Automation (Huntress, Monday, August 31st, 2026)

The Huntress API has grown from six read-only endpoints into a full integration platform with webhooks and MCP support. Read more

Rogue ScreenConnect Installations Across Unrelated Hosts Suggest Worm-Like Activity (Huntress, Wednesday, September 9th, 2026)

Rogue ScreenConnect clients repeatedly spawn Windows Script Host to run VBScript files across unrelated environments. Read more

Credential Theft: How Attackers Steal & Use Stolen Credentials (Huntress, Thursday, September 10th, 2026)

A primer on credential theft techniques and the identity-focused defenses that actually interrupt them. Read more

Best Practices for Good Endpoint Hardening (Huntress, Thursday, September 10th, 2026)

What endpoint hardening covers and which measures actually reduce attack surface and close intrusion paths. Read more

AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key (Huntress, Thursday, September 10th, 2026)

Exporting the Server Licensor Certificate private key enables offline decryption of protected documents. Read more

AD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance (Huntress, Tuesday, September 8th, 2026)

Mapping the AD RMS trust model and showing how an attacker discovers and fingerprints a deployment. Read more

AI SIEM Search (Huntress, Monday, September 7th, 2026)

Plain-English querying of SIEM data, removing the query language barrier during investigations. Read more

Phishing Attacks Serve Browser-in-the-Browser Pages, Rogue RMM Persistence (Huntress, Wednesday, September 9th, 2026)

Browser-in-the-browser phishing led to rogue ScreenConnect persistence in incidents Huntress analysts unpicked. Read more

The 20 Most Common Passwords Hackers Target in 2026 (Huntress, Thursday, September 10th, 2026)

This year's most common passwords, why they fall instantly, and what actually improves credential strength. Read more

Critical N-able N-central Vulnerability and Active Exploitation (Huntress, Sunday, September 6th, 2026)

A critical N-central flaw gives unauthenticated attackers console-level privileges on the RMM platform. Read more

Grand Theft Auto VI Hype Leads to Malware (Huntress, Wednesday, September 9th, 2026)

Fake leaked GTA VI downloads spread through SEO poisoning carry RATs, infostealers and ransomware. Read more

More from Huntress · All section posts · This week