Your Patch Window Just Shrank to Three Days
Patch Tuesday comes once a month. According to Rapid7, the attackers now show up in three days. In its Q3 2026 Quarterly Threat Landscape Report, Rapid7 found an average of three days between a high-severity vulnerability going public and its exploitation. And 71% of the exploitation it tracked happened within the first seven days. Rapid7 […]
MFA Was Never the Finish Line: What a 79-Organization Token Replay Campaign Teaches MSPs
They Passed MFA. So Did the Attacker. The user did everything right. They typed their password. They approved the MFA prompt. Twelve minutes later, someone else was in their mailbox. That’s one of the incidents in a 10-week Microsoft 365 campaign tracked by Huntress. Between July 14 and September 22, 2026, Huntress responded to related […]