SonicWall warns customers to reset credentials after breach

SonicWall warned customers today to reset credentials after their firewall configuration backup files were exposed in a security breach that impacted MySonicWall accounts. After detecting the incident, SonicWall has cut off the attackers’ access to its systems and has been collaborating with cybersecurity and law enforcement agencies to investigate the attack’s impact. “As part of […]

From ClickFix to MetaStealer: Dissecting Evolving Threat Actor Techniques

By John Hammond, Alden Schmidt, Lindsey Welch During the past fifteen business days, Huntress analysts have observed increased threat activity involving several notable techniques. One case involved a malicious AnyDesk installer, which initially mimicked a standard ClickFix attack through a fake Cloudflare verification page but then utilized Windows File Explorer and an MSI package masked […]

Microsoft rolls out Copilot Chat to Microsoft 365 Office apps

​Microsoft is rolling out Copilot Chat to Word, Excel, PowerPoint, Outlook, and OneNote for paying Microsoft 365 business customers. Copilot Chat (short for Microsoft 365 Copilot Chat) is the company’s AI-powered, content-aware chat that enables users to access AI agents. However, unlike Microsoft 365 Copilot, which has access to organizational content, Copilot Chat only works with […]

Google nukes 224 Android malware apps behind massive ad fraud campaign

A massive Android ad fraud operation dubbed “SlopAds” was disrupted after 224 malicious applications on Google Play were used to generate 2.3 billion ad requests per day. The ad fraud campaign was discovered by HUMAN’s Satori Threat Intelligence team, which reported that the apps were downloaded over 38 million times and employed obfuscation and steganography to conceal […]

Self-propagating supply chain attack hits 187 npm packages

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack, with a malicious self-propagating payload to infect other packages. The coordinated worm-style campaign dubbed ‘Shai-Hulud’ started yesterday with the compromise of the @ctrl/tinycolor npm package, which receives over 2 million weekly downloads. Since then, the campaign has expanded significantly and now […]

Microsoft: WMIC will be removed after Windows 11 25H2 upgrade

Microsoft has announced that the Windows Management Instrumentation Command-line (WMIC) tool will be removed after upgrading to Windows 11 25H2 and later. WMIC is a legacy built-in Windows command-line tool that allows users to interact with the Windows Management Instrumentation (WMI) system using text commands. In a Microsoft 365 message center update, Microsoft now advises IT administrators […]

Team-Wide VMware Certification: Your Secret Weapon for Security

When one person on your IT team is VMware certified, that’s a win. But when your entire team is certified? That’s a force multiplier for innovation, retention, and your security posture. Organizations that invest in team-wide certification build high-performing environments that are more collaborative, secure, and future-ready. The result: smoother rollouts, fewer errors, faster incident […]