News

Researchers at Huntress have identified an active phishing campaign impersonating Bank of America that culminates in the covert installation of a remote monitoring and management (RMM) tool, giving attackers persistent, hard-to-detect access to victims' Windows machines. The campaign was flagged after a message landed in one of Huntress's spamtrap accounts on 28 July, sent from a spoofed address designed to resemble a legitimate Bank of America domain. The email uses a familiar social-engineering hook: a...

Check Point has been named a Visionary Leader in Frost & Sullivan's Frost Radar: Enterprise Risk Mitigation and Management Platforms, 2026 report, and earned the highest Growth Index score among the 15 vendors that made the final cut. Frost & Sullivan's evaluation set a demanding bar for entry. To qualify, vendors had to natively combine attack surface management, cyber threat intelligence and digital risk protection in a single platform, rather than stitching them together through...

Cybersecurity vendor Huntress has opened up a new application control capability to its entire customer base for free, as new data shows attacks abusing remote monitoring and management (RMM) tools rose sharply over the past year. The feature, called RMM Guard, is part of a broader product Huntress is building called Managed Endpoint Security Posture Management (ESPM), currently in early access. RMM Guard inventories every remote access tool running across a customer's environment and automatically...

New research from Pentest-Tools.com suggests that AI-assisted penetration testing tools are generating vulnerability findings faster than most security teams can verify them, creating a validation backlog that is offsetting the time AI was meant to save. The company surveyed 158 security practitioners in June 2026, including penetration testers, security engineers, AppSec and DevSecOps professionals, consultants, and MSSP practitioners, all of whom use AI-assisted tools in their vulnerability assessment and validation work. Among the 147 respondents...

N-able has confirmed that a critical vulnerability in N-central, its flagship remote monitoring and management (RMM) platform, is being actively exploited in the wild, prompting an emergency hotfix and urgent calls for managed service providers (MSPs) to patch immediately. The flaw, disclosed by N-able on 1–2 August, affects all currently supported versions of N-central, including the 2026.3 release line, across both cloud-hosted and on-premises deployments. According to security vendor Huntress, which published a rapid-response analysis...

---By Matthew Kayser--- The cybersecurity market has never moved slowly, but AI has changed the pace of change itself. Attack methods are evolving faster than product roadmaps. Some defensive capabilities that were emerging only a few years ago are now becoming baseline expectations. Many buyers are better informed and harder to reach through traditional channels. As security priorities shift, a competitor analysis tool can help organisations evaluate digital demand, audience behavior, and market positioning alongside...

Zero trust arrived as an enterprise product category and stayed one for a decade. It was priced for organisations with a security budget, staffed by teams running a security operations centre, and pitched to buyers already fluent in identity providers and policy engines. Smaller firms read the same headlines, nodded along at the same conferences, and went back to a flat network and a legacy VPN, because nobody was forcing the issue. Something specific changed...

WorkNest Secure has expanded its GuardNest platform with continuous vulnerability scanning, giving organisations ongoing visibility into security weaknesses rather than relying solely on periodic penetration tests. The new capability is designed to help businesses monitor vulnerabilities across internet-facing systems, web applications, and internal environments, providing continuous oversight of their attack surface as threats and infrastructure evolve. The launch comes as organisations face increasing pressure from customers, insurers, and regulators to demonstrate continuous vulnerability management and...

Check Point Software has launched what it calls the industry's first AI Network Firewall, extending AI-specific inspection and control into the firewall infrastructure that organisations already operate, rather than requiring a separate virtual appliance. The capability, delivered through Check Point's firewall software release R82.20, is designed to close what the vendor describes as a blind spot in enterprise networks: traffic generated by AI systems, including user prompts, model calls, and the actions of autonomous agents,...

Managed detection and response provider Huntress has issued a threat advisory warning of an active and rapidly growing credential stuffing campaign targeting SonicWall VPN and firewall appliances, with the company reporting that logins to 30 organisations' accounts had already been compromised at the time of publication. According to Huntress's Security Operations Centre (SOC), the unusual activity was first detected on 25 July 2026 at around 18:02 UTC, when analysts noticed an anomalous spike in successful...