Huntress

Volume 343, Issue 1 · 8 articles from 2 issues

In This Issue

• Companies Push AI Use, But Many Skip Training (43%) and Official Policies (26%)
• Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
• The Huntress Tragic Quadrant: Beat the Hype on Cyber Tactics Wrecking Businesses
• The First 24 Hours: What Actually Happens When Ransomware Lands
• What Good Privilege Hygiene Looks Like
• Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs
• How Huntress Detects and Responds to a ClickFix Attack
• Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack

Companies Push AI Use, But Many Skip Training (43%) and Official Policies (26%) (Huntress, Friday, October 2nd, 2026)

A Huntress survey finds 43% of knowledge workers got no AI training and 74% could not spot a prompt injection risk. Read more

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix (Huntress, Monday, September 28th, 2026)

Huntress found attackers using ChatGPT Custom GPTs to impersonate products and push a ClickFix lure that installs a RAT. Read more

The Huntress Tragic Quadrant: Beat the Hype on Cyber Tactics Wrecking Businesses (Huntress, Thursday, October 1st, 2026)

Huntress ranks attacker tactics by prevalence and proximity to business disruption, topped by RMM abuse, BEC and AiTM takeover. Read more

The First 24 Hours: What Actually Happens When Ransomware Lands (Huntress, Friday, October 2nd, 2026)

Huntress walks through the first day of a ransomware incident hour by hour, from discovery to recovery decisions. Read more

What Good Privilege Hygiene Looks Like (Huntress, Monday, September 28th, 2026)

Huntress outlines least-privilege practices to curb local admin sprawl, sticky admin sessions and accidental SaaS admins. Read more

Phishing Campaign Abuses Microsoft Power BI to Deploy Rogue RMMs (Huntress, Wednesday, October 7th, 2026)

Huntress details a phishing campaign that uses legitimate Microsoft Power BI links to deliver rogue ScreenConnect RMM clients. Read more

How Huntress Detects and Responds to a ClickFix Attack (Huntress, Monday, October 5th, 2026)

Huntress explains why ClickFix fake-CAPTCHA attacks evade artifact-based endpoint tools and how it detects and responds to them. Read more

Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack (Huntress, Tuesday, October 6th, 2026)

Huntress reconstructs an Akira ransomware attack from registry data and Akira logs after its agent was installed post-compromise. Read more

More from Huntress · All section posts · This week