threat hunting news
3 storiesHunting MacSync Stealer infrastructure through behavioral pivots
Microsoft Defender Experts have reportedly identified and are actively tracking the infrastructure supporting the MacSync Stealer, an information-stealing malware targeting macOS systems. The malware is characterized by its use of rapidly rotating command-and-control (C2) domains, a tactic designed to evade detection and make tracking difficult. However, researchers have found that despite…
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
CrowdStrike researchers have identified and cataloged 21 distinct methods for obfuscating shell commands on VMware ESX systems, a technique increasingly employed by threat actors to evade detection. The cybersecurity firm detailed its findings and released detection strategies to counter these advanced evasion tactics, which are often used in ransomware campaigns targeting hypervisors.
SharpHound Recon Attack – How AI enhanced the threat hunt
At Cisco Live AMER 2026, a novel approach to security operations was implemented by integrating an AI-driven security agent with always-on, full packet capture technology. This setup aimed to automate threat hunting and analysis, protecting conference attendees and infrastructure.