News

Huntress researchers have uncovered two phishing attacks that combined convincing fake browser windows with legitimate remote management software to establish persistent access to victims' devices. Both incidents, observed in August, began with phishing messages directing victims to attacker-controlled websites. The attackers then used a browser-in-the-browser (BiTB) technique to create what appeared to be a legitimate Adobe webpage, before convincing victims to download malicious software disguised as an Adobe Reader update. Rather than deploying conventional malware,...

Forescout has expanded its investment in its global partner ecosystem to strengthen technical expertise and help partners support customers managing increasingly complex IT, OT, IoT, and IoMT environments. Nearly 100% of Forescout's customer business is transacted through partners, making the channel a central part of the cybersecurity company's growth strategy. Its latest investment includes the ongoing Mission: Possible enablement roadshow and the continued support of several partners in its Envision Partner Program. Mission:Possible reaches partners...

Black Duck, a provider of AI-powered application security solutions, has announced its participation in Project Glasswing, Anthropic's industry-wide initiative aimed at protecting critical software infrastructure through the defensive use of advanced AI. Through its involvement, Black Duck will integrate Mythos throughout its application security offerings, pairing AI-driven, deterministic vulnerability detection with established remediation processes, risk-based prioritisation, and governance frameworks built around compliance. The combination is designed to deliver a blended approach to security that cuts...

The North East’s biggest cyber security festival returns this October. Now in its ninth year, CyberFest has grown into a major national platform for showcasing the region’s cyber and secure AI excellence. Taking place across the North East throughout October, the festival will connect businesses, innovators, government and specialist clusters from across the UK, putting the region’s talent, ambition and capability firmly in the spotlight. CyberFest is organised by CyberNorth, a membership community which brings...

Check Point Software Technologies has announced it is integrating OpenAI's Daybreak frontier AI models across its security platform, extending a partnership aimed at helping defenders detect, validate, and remediate cyber risk faster. The move builds on Check Point's existing collaboration with OpenAI through the Daybreak Defense Network, first expanded three months ago, and follows the company's recent decision to join more than 100 technology and security firms in backing OpenAI's call for a collective, global...

The most compelling evidence in a cybersecurity career is usually the evidence that cannot be taken out of the building. A zero-day discovery held under wraps. An intrusion discovered without it getting into the news. Detection code running inside the security operations center of a bank, unattributed to anyone. Such work does exist and is often unpublished, which is why EB-1A petitions of cybersecurity experts fail just like academic EB-1A petitions fail. The officer is...

A newly identified phishing-as-a-service kit is being used to hijack Microsoft 365 accounts by stealing victims' active login sessions rather than their passwords, according to new research from cybersecurity firm Huntress, a technique that allows attackers to walk straight past multi-factor authentication (MFA) without ever needing to guess, crack, or bypass it. The kit, dubbed “Knight Office” by researchers, came to light after Huntress’s Security Operations Centre investigated suspicious sign-in activity on a customer’s Microsoft 365...

Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers using Anthropic's Claude Desktop a way to check code for security flaws without switching tools. The integration is built on the Model Context Protocol (MCP), the open standard that lets AI assistants like Claude call out to external services and pull structured data back into a conversation. Through it, Black Duck's Signal Code...

Security researchers at Huntress have discovered a malware campaign that tricks victims into installing a real, fully functional copy of Exodus, a popular cryptocurrency wallet application, only to disable it so it can never actually be opened, using it instead as cover for a hidden spying tool. The firm said it identified four separate organisations compromised between late July and mid-August 2026, three of them within an 85-minute window on a single day, using a...

Cybersecurity researchers at Huntress have uncovered a phishing campaign that abuses Faronics Deploy, a legitimate endpoint management platform used by businesses, schools, and government offices to remotely install software and run scripts across their networks. According to the security firm, threat actors sent victims phishing emails disguised as invoices, tax documents, financial records, and event invitations. Clicking through led to convincing fake pages, including bogus "document downloading" screens and spoofed Adobe plugin update prompts, that...