Hunt & Hackett

The 2026 edition of our Trend Report is out now ⬇️ Underpinned by data from more than 54,000 investigations conducted by our SOC and Incident Response team in 2025, the report provides a bottom-up view of the threats facing Dutch organisations. Download: huntandhackett.com/2026-cyber-tre…

Together, these shifts show a maturing threat ecosystem that is making it harder to stay resilient. 📄Read the report here: enisa.europa.eu/publications/e… #ENISA #CyberSecurity #ThreatIntelligence #CyberResilience

Among the trends shaping this landscape: 🔸Faketivism, where state-aligned groups disguise operations as hacktivist campaigns. 🔸Phishing-as-a-Service, lowering the barrier to entry for attackers. 🔸And AI, which is now used to automate and refine social engineering.

Last week, ENISA released its Threat Landscape 2025 report. It offers a detailed look at how Europe’s cyber ecosystem is evolving. The picture that emerges is one of growing strain, where interconnected systems and persistent threats keep testing resilience. 🧵👇

What happens to leaked data? 🕵️‍♂️ Our security expert Krijn de Mik joined @BNNVARA’s Alledaagse Vragen to answer this question and explain the fallout of the Clinical Diagnostics breach. 🎧 Listen here (6 min Dutch episode): podcasts.apple.com/nl/podcast/wat…

Update on the Clinical Diagnostics incident: Dutch prosecutors have now launched a criminal investigation into the breach. ➡️ 485,000 personal records stolen ➡️ 68,000 victims already joined collective lawsuits Read more about it here (Dutch): om.nl/actueel/nieuws…

🔐 New #blogpost At H2, we recently moved from authenticator apps to #YubiKey (FIDO2) for company-wide MFA in Entra ID. Why? Phishing-resistant, passwordless sign-ins at scale, raising the bar for our security. Read about our journey here: huntandhackett.com/blog/raising-s…

Cyber espionage impacts more organisations than you think. Join our next CyberConnect on Sept 9 in The Hague to learn how these operations work, who gets targeted, and see a live demo of tracking campaigns. Sign up today: huntandhackett.com/understanding-…

Hope you enjoy these as much as we did! What’s the best thing you’ve read, watched, or tinkered with lately? Drop it in the comments! Our Hunters are always looking for their next rabbit hole. 🔍 🧵 7/7

𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐡𝐚𝐥𝐥𝐞𝐧𝐠𝐞𝐬 𝐢𝐧 𝐀𝐈 𝐀𝐠𝐞𝐧𝐭 𝐃𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭 The largest AI agent red team ever: 1.8 million prompt-injection attacks, 60k policy violations, and proof that most agents still have a long way to go. 👉 arxiv.org/abs/2507.20526 🧵 6/7

𝐖𝐡𝐚𝐭 𝐚𝐫𝐞 𝐨𝐮𝐫 𝐇𝐮𝐧𝐭𝐞𝐫𝐬 𝐢𝐧𝐭𝐨 𝐫𝐢𝐠𝐡𝐭 𝐧𝐨𝐰? 👀 We stumble across so many good things from the cybersecurity community and beyond, and we thought it'd be nice to share them. So, here are some of the things our Hunters have been diving into lately: 🧵1/7

𝐉𝐨𝐢𝐧 𝐮𝐬 𝐟𝐨𝐫 𝐛𝐫𝐞𝐚𝐤𝐟𝐚𝐬𝐭 𝐚𝐭 𝐆𝐨𝐨𝐠𝐥𝐞! 🍳 Kick off Cybersecurity Month with us at Google Amsterdam where we'll, together with Xebia, host an informal roundtable about everything cyber. More info and sign-up on our website: huntandhackett.com/cyber-for-brea…

Onze cybersecurity expert Krijn de Mik schoof aan bij De Nieuws BV op NPO Radio 1 (BNNVARA) om de hack bij het Openbaar Ministerie te duiden. 📻 Benieuwd wat er besproken werd? Het hele fragment is hier terug te luisteren: nporadio1.nl/fragmenten/de-…

We've updated our threat landscape on the Technology Sector! On it, you'll find detailed actor overviews, analyses of recent cyberattacks in the tech sector, and insights into emerging cybersecurity trends. Curious? Take a look: huntandhackett.com/members/sector…

Want to read more? The full article via The Hacker News is well worth the scroll. Read it here: thehackernews.com/2025/07/seo-po… 🧵5/5

Our recommendations: ✔️ Stick to official vendor websites ✔️ Avoid downloading from search results or ad links ✔️ Block known malicious domains where possible ✔️ Question anything that seems unusually smooth or effortless 🧵4/5

⚠️ SEO abuse is quietly becoming one of the most effective malware delivery tactics right now. A recent piece by @TheHackersNews covers how attackers are creating fake websites that imitate popular tools such as: PuTTY, WinSCP, Zoom, and ChatGPT. Let’s unpack what’s going on 🧵