https://www.hackthebox.com/rss/blog/all All the latest news and insights about cybersecurity from Hack The Box. Hacking trends, insights, interviews, stories, and much more en https://www.hackthebox.com/images/landingv3/logo-htb-blog.svg https://www.hackthebox.com/rss/blog/all https://www.hackthebox.com/blog/measuring-soc-dfir-resilience-with-threat-range SOC burnout is real. See how HTB’s Threat Range rebuilds resilience and delivers measurable value through realistic, data-driven blue team simulations. ]]> All Content Thu, 06 Nov 2025 08:30:00 +0000 https://www.hackthebox.com/blog/measuring-soc-dfir-resilience-with-threat-range https://www.hackthebox.com/blog/linkedin-learning-cybersecurity-analyst-path Hack The Box partners with LinkedIn Learning to launch hands-on cybersecurity labs, closing the talent gap and preparing defenders for real-world, AI-driven threats. ]]> All Content Wed, 05 Nov 2025 14:13:29 +0000 https://www.hackthebox.com/blog/linkedin-learning-cybersecurity-analyst-path https://www.hackthebox.com/blog/htb-academy-2-0-beta-launch Discover the all-new HTB Academy 2.0 (Beta), a faster, smoother, and more accessible learning platform built from the ground up. Explore, test, and share your feedback! ]]> All Content Wed, 05 Nov 2025 10:34:00 +0000 https://www.hackthebox.com/blog/htb-academy-2-0-beta-launch https://www.hackthebox.com/blog/hack-the-box-linkedin-learning-cybersecurity-labs New partnership brings HTB’s hands-on, performance-based cybersecurity upskilling to LinkedIn Learning, empowering organizations to build cyber-ready teams at scale ]]> All Content Wed, 05 Nov 2025 10:00:00 +0000 https://www.hackthebox.com/blog/hack-the-box-linkedin-learning-cybersecurity-labs https://www.hackthebox.com/blog/dissecting-scattered-spider-webinar-ransomware-social-engineering Discover how Scattered Spider blends social engineering with technical precision to launch high-impact ransomware attacks. ]]> All Content Wed, 05 Nov 2025 09:57:00 +0000 https://www.hackthebox.com/blog/dissecting-scattered-spider-webinar-ransomware-social-engineering https://www.hackthebox.com/blog/f5-networks-breach-unc5221-brickstorm-supply-chain-attack F5 Networks was breached for over a year by China-linked APT UNC5221. Learn how Brickstorm malware enabled source code theft and supply chain attack risks—and how to defend. ]]> All Content Tue, 04 Nov 2025 08:27:00 +0000 https://www.hackthebox.com/blog/f5-networks-breach-unc5221-brickstorm-supply-chain-attack https://www.hackthebox.com/blog/soc-dfir-resilience-metrics-reporting Show measurable cyber readiness to boards and regulators. TRI gives CISOs clear insights into SOC and DFIR performance under real-world attacks. ]]> All Content Wed, 29 Oct 2025 08:31:00 +0000 https://www.hackthebox.com/blog/soc-dfir-resilience-metrics-reporting https://www.hackthebox.com/blog/scattered-spider-cyberattack-recovery-plan Learn how organizations can recover from Scattered Spider attacks. Follow our 90-day recovery plan to rebuild systems, strengthen defenses, and boost cyber resilience. ]]> All Content Tue, 28 Oct 2025 03:57:00 +0000 https://www.hackthebox.com/blog/scattered-spider-cyberattack-recovery-plan https://www.hackthebox.com/blog/bianlian-nippon-steel-supply-chain-attack A deep dive into the Nippon Steel breach and BianLian’s growing focus on supply chain data theft. Learn how to defend your network. ]]> All Content Tue, 28 Oct 2025 02:44:00 +0000 https://www.hackthebox.com/blog/bianlian-nippon-steel-supply-chain-attack https://www.hackthebox.com/blog/blue-team-defensive-ctf-holmes-2025-recap HTB’s first all-blue Holmes CTF brought 11,000+ defenders together to tackle DFIR, SOC, malware, and threat hunting challenges in a fully immersive investigation. ]]> All Content Fri, 24 Oct 2025 10:52:00 +0000 https://www.hackthebox.com/blog/blue-team-defensive-ctf-holmes-2025-recap https://www.hackthebox.com/blog/ai-red-teaming-ctf-competition A joint HackerOne & Hack The Box paper distills lessons from 217 active players across 11 challenges, showing where simple jailbreaks thrive and where layered defenses still win. ]]> All Content Fri, 24 Oct 2025 00:00:00 +0000 https://www.hackthebox.com/blog/ai-red-teaming-ctf-competition https://www.hackthebox.com/blog/hackthebox-supports-asean-cert-incident-drill-2025 Hack The Box partnered with Singapore’s Cyber Security Agency to support the 20th ASEAN CERT Incident Drill, boosting regional cyber readiness through hands-on training. ]]> All Content Thu, 23 Oct 2025 10:30:00 +0000 https://www.hackthebox.com/blog/hackthebox-supports-asean-cert-incident-drill-2025 https://www.hackthebox.com/blog/forrester-landscape-report-takeaways Continuous skills development over static certifications, preparing for AI-driven attacks, upskilling across IT/OT, and proving resilience. How Hack The Box aligns with and accelerates these ]]> All Content Fri, 17 Oct 2025 11:43:00 +0000 https://www.hackthebox.com/blog/forrester-landscape-report-takeaways https://www.hackthebox.com/blog/hack-the-box-releases-industry-reports-2025 Widespread gaps across healthcare, finance, and MSSP sectors underscore the urgent need for capability-based resilience. ]]> All Content Tue, 14 Oct 2025 02:00:00 +0000 https://www.hackthebox.com/blog/hack-the-box-releases-industry-reports-2025 https://www.hackthebox.com/blog/hack-the-box-recognized-forrester-report-2025 Hack The Box is recognized in Forrester’s Q4 2025 Cybersecurity Skills and Training Platforms Landscape Report for redefining how organizations upskill talent and build resilience. ]]> All Content Sun, 12 Oct 2025 16:00:00 +0000 https://www.hackthebox.com/blog/hack-the-box-recognized-forrester-report-2025 https://www.hackthebox.com/blog/ai-security-adoption How businesses and cyber teams can harness AI for competitive advantage, providing employees with the right tools and governance to build an augmented workforce. ]]> All Content Thu, 09 Oct 2025 12:57:00 +0000 https://www.hackthebox.com/blog/ai-security-adoption https://www.hackthebox.com/blog/cve-2024-9474-panos-command-injection Walk through CVE-2024-9474, a PAN-OS privilege escalation flaw enabling command injection from admin to root. Includes PwnOS demo, exploitation steps, and defense tips. ]]> All Content Wed, 08 Oct 2025 14:18:00 +0000 https://www.hackthebox.com/blog/cve-2024-9474-panos-command-injection https://www.hackthebox.com/blog/cybersecurity-upskilling-hands-on-labs-to-land-job Here’s how Hack The Box meetups helped Esha land her role as a Cybersecurity Analyst. Learn the power of hands-on labs, CTFs, and community connections in boosting your cybersecurity career. ]]> All Content Wed, 08 Oct 2025 12:39:39 +0000 https://www.hackthebox.com/blog/cybersecurity-upskilling-hands-on-labs-to-land-job https://www.hackthebox.com/blog/gibb-witham-appointed-CFO Paladin Capital board executive joins HTB to accelerate global enterprise growth and operational scale ]]> All Content Tue, 07 Oct 2025 13:11:17 +0000 https://www.hackthebox.com/blog/gibb-witham-appointed-CFO https://www.hackthebox.com/blog/hack-the-box-ingram-micro-singapore-cyber-skills-partnership Hack The Box partners with Ingram Micro Singapore to boost cyber skills and resilience with gamified training, supporting CSA’s Cyber Trust mark initiative. ]]> All Content Thu, 02 Oct 2025 08:45:00 +0000 https://www.hackthebox.com/blog/hack-the-box-ingram-micro-singapore-cyber-skills-partnership https://www.hackthebox.com/blog/hack-the-box-launches-ai-powered-threat-range New team-based simulation environment empowers enterprises and MSSPs to strengthen defenses, reduce breach risk, and prove resilience in the age of AI ]]> All Content Tue, 30 Sep 2025 11:00:00 +0000 https://www.hackthebox.com/blog/hack-the-box-launches-ai-powered-threat-range https://www.hackthebox.com/blog/what-is-threat-range HTB Threat Range is a hands-on cyber defense arena where SOC analysts, DFIR investigators, and managers master detection, response, and reporting — boosting KPIs and team readiness. ]]> All Content Tue, 30 Sep 2025 11:00:00 +0000 https://www.hackthebox.com/blog/what-is-threat-range https://www.hackthebox.com/blog/apt29-watering-hole-microsoft-device-auth Cozy Bear’s watering-hole attack on Microsoft device code auth used obfuscated JS and redirects to compromise 10% of visitors. Learn how to defend against it. ]]> All Content Tue, 23 Sep 2025 01:59:00 +0000 https://www.hackthebox.com/blog/apt29-watering-hole-microsoft-device-auth https://www.hackthebox.com/blog/hashcat-7-release-top-new-features Hashcat 7.0.0 is here with major speed boosts, new hash types, Docker support, and smarter rules. Learn how this release empowers pentesters, red teamers, and defenders. ]]> All Content Thu, 18 Sep 2025 12:19:00 +0000 https://www.hackthebox.com/blog/hashcat-7-release-top-new-features https://www.hackthebox.com/blog/welcome-letsdefend Hack The Box and LetsDefend join forces to create the world’s largest collaborative cybersecurity platform with hands-on labs, SOC simulations, and a unified upskilling experience. ]]> All Content Tue, 16 Sep 2025 12:58:00 +0000 https://www.hackthebox.com/blog/welcome-letsdefend https://www.hackthebox.com/blog/hack-the-box-acquires-letsdefend Move strengthens Hack The Box’s enterprise, AI, and blue team cybersecurity upskilling ecosystem ]]> All Content Tue, 16 Sep 2025 12:57:00 +0000 https://www.hackthebox.com/blog/hack-the-box-acquires-letsdefend https://www.hackthebox.com/blog/CVE-2025-54136-cursor-code-editor See how CVE-2025-54136 lets attackers exploit Cursor’s MCP configs for remote code execution and how to protect your environment. ]]> All Content Tue, 16 Sep 2025 02:57:00 +0000 https://www.hackthebox.com/blog/CVE-2025-54136-cursor-code-editor https://www.hackthebox.com/blog/prevent-healthcare-data-breaches-iomt-ai-cybersecurity Learn how healthcare can prevent data breaches. Why spotting threats isn’t enough—defense, IoMT security, and AI-driven risks demand action. ]]> All Content Wed, 10 Sep 2025 12:50:00 +0000 https://www.hackthebox.com/blog/prevent-healthcare-data-breaches-iomt-ai-cybersecurity https://www.hackthebox.com/blog/unc3886-fireant-chinese-apt-vmware-esxi-hypervisor-attack Discover how Chinese APT UNC3886 used 20+ MITRE techniques in the FireAnt campaign to exploit VMware ESXi hypervisors and evade detection. ]]> All Content Wed, 10 Sep 2025 10:34:00 +0000 https://www.hackthebox.com/blog/unc3886-fireant-chinese-apt-vmware-esxi-hypervisor-attack https://www.hackthebox.com/blog/htb-labs-pricing-update-2025 HTB Labs is updating its pricing for the first time in nearly 5 years. Starting Oct 1, 2025, VIP plans will adjust to support the continued growth of new content and training to come. ]]> All Content Fri, 29 Aug 2025 05:09:00 +0000 https://www.hackthebox.com/blog/htb-labs-pricing-update-2025 https://www.hackthebox.com/blog/HTB-Season-9-GACHA Hey, hey, everyone, I hope you’re ready to get back into another Season! There’s a bit I’d like to review from Season 8, but first, list talk about this Season’s theme, GACHA. ]]> All Content Thu, 28 Aug 2025 11:38:00 +0000 https://www.hackthebox.com/blog/HTB-Season-9-GACHA https://www.hackthebox.com/blog/ai-red-teaming-ctf Join the AI Red Teaming CTF organized by HackerOne. Compete against top security researchers, test AI defenses, earn prizes, and shape the future of AI security. Register now! ]]> All Content Wed, 20 Aug 2025 05:29:00 +0000 https://www.hackthebox.com/blog/ai-red-teaming-ctf https://www.hackthebox.com/blog/cost-of-data-breach IBM’s Cost of a Data Breach Report 2025 highlights a $4.44M average breach cost. Discover five crucial insights for cybersecurity leaders and how to act on them with training and strategy. ]]> All Content Thu, 14 Aug 2025 12:47:00 +0000 https://www.hackthebox.com/blog/cost-of-data-breach https://www.hackthebox.com/blog/HTB-CWES-announcement The HTB CBBH is undergoing an important overhaul, prepared to equip you with the skills desired by managers and teams in our industry today. ]]> All Content Thu, 14 Aug 2025 02:21:00 +0000 https://www.hackthebox.com/blog/HTB-CWES-announcement https://www.hackthebox.com/blog/30-60-90-day-onboarding-plan-SOC-analyst-checklist Your step-by-step guide to building defenders with confidence, clarity, and hands-on SOC Analyst training from day one. ]]> All Content Tue, 12 Aug 2025 09:34:00 +0000 https://www.hackthebox.com/blog/30-60-90-day-onboarding-plan-SOC-analyst-checklist https://www.hackthebox.com/blog/windows-sandbox-data-exfiltration-attack-forensics Learn how attackers can exploit Windows Sandbox to exfiltrate data, bypass defenses, and evade forensics—plus key detection tips and mitigations. ]]> All Content Tue, 12 Aug 2025 02:47:00 +0000 https://www.hackthebox.com/blog/windows-sandbox-data-exfiltration-attack-forensics https://www.hackthebox.com/blog/red-blue-purple-teaming-detection-and-opsec-cyber-range Train red, blue, and purple teams in a realistic lab with adversary emulation, detection tooling, and full SOC workflows. No setup required. ]]> All Content Mon, 11 Aug 2025 08:23:00 +0000 https://www.hackthebox.com/blog/red-blue-purple-teaming-detection-and-opsec-cyber-range https://www.hackthebox.com/blog/apt-44-sandworm-attack-anatomy-mitre-techniques Explore Sandworm (APT44), the Dune-inspired APT group behind NotPetya, Olympic Destroyer, and power grid attacks — and learn how to defend against their tactics. ]]> All Content Wed, 06 Aug 2025 09:39:00 +0000 https://www.hackthebox.com/blog/apt-44-sandworm-attack-anatomy-mitre-techniques https://www.hackthebox.com/blog/ai-cybersecurity-skills-gap-benchmark Backed by HTB’s 2025 Global Cyber Skills Benchmark Report, this blog takes a closer look at why AI skills are the next must-have in security, training gaps, and how smart teams are using AI. ]]> All Content Tue, 29 Jul 2025 12:58:00 +0000 https://www.hackthebox.com/blog/ai-cybersecurity-skills-gap-benchmark https://www.hackthebox.com/blog/ai-tools-cyber-team-ctf-use-cases Discover how to use Hack The Box MCP Server self-service tokens and admin controls to turn CTFs into guided, AI-augmented learning experiences for all. ]]> All Content Mon, 28 Jul 2025 03:45:00 +0000 https://www.hackthebox.com/blog/ai-tools-cyber-team-ctf-use-cases https://www.hackthebox.com/blog/cve-2025-32711-echoleak-copilot-vulnerability Let's get into the details of CVE-2025-32711 (AKA EchoLeak), a vulnerability targeting Microsoft 365's AI assistant, Copilot. ]]> All Content Thu, 24 Jul 2025 09:25:00 +0000 https://www.hackthebox.com/blog/cve-2025-32711-echoleak-copilot-vulnerability https://www.hackthebox.com/blog/Start-cybersecurity-with-HTB-CJCA HTB Certified Junior Cybersecurity Associate (HTB CJCA) is here to equip beginners with the 360 skillset they need to confidently kick off their cybersecurity careers. ]]> All Content Wed, 23 Jul 2025 02:19:00 +0000 https://www.hackthebox.com/blog/Start-cybersecurity-with-HTB-CJCA https://www.hackthebox.com/blog/global-cyber-skills-benchmark-cloud-security-breaches Cloud is the battleground attackers love most. New data from 796 teams shows most organizations aren’t quite ready. How do your defenses measure up? ]]> All Content Mon, 21 Jul 2025 08:23:00 +0000 https://www.hackthebox.com/blog/global-cyber-skills-benchmark-cloud-security-breaches https://www.hackthebox.com/blog/how-to-defend-against-apt33-powershell-attacks How the Elfin group made the move from quiet espionage to all-out disruption, and how to stay a few steps ahead of its tactics. ]]> All Content Tue, 15 Jul 2025 08:20:00 +0000 https://www.hackthebox.com/blog/how-to-defend-against-apt33-powershell-attacks https://www.hackthebox.com/blog/active-directory-attacks-history-tactics-defenses Explore 25 years of Active Directory attacks—from PtH to ransomware—and learn how defenders can harden networks, stop lateral movement, and prepare with hands-on training. ]]> All Content Sat, 12 Jul 2025 02:45:00 +0000 https://www.hackthebox.com/blog/active-directory-attacks-history-tactics-defenses https://www.hackthebox.com/blog/attack-of-the-agents-ctf We tested how AI agents and the new Model Context Protocol (MCP) can amplify cybersecurity readiness. Here’s how AI copilots, autonomous agents, and automated write-ups can redefine CTFs. ]]> All Content Thu, 10 Jul 2025 14:27:00 +0000 https://www.hackthebox.com/blog/attack-of-the-agents-ctf https://www.hackthebox.com/blog/hack-the-box-solutions3-2025-cybersecurity-internship-program Hack The Box supports the Solutions³ LLC 2025 Summer Cybersecurity Internship Program 2025 with innovative, hands-on learning and Capture The Flag (CTF) challenges. ]]> All Content Wed, 02 Jul 2025 09:45:07 +0000 https://www.hackthebox.com/blog/hack-the-box-solutions3-2025-cybersecurity-internship-program https://www.hackthebox.com/blog/salt-typhoon-apt-us-telecom-espionage-attack-analysis Call recordings from US presidential campaigns. Wiretaps hijacked. No less than nine telecoms infiltrated—completely undetected—for years. Salt Typhoon didn’t just spy, they embedded. ]]> All Content Mon, 30 Jun 2025 10:23:00 +0000 https://www.hackthebox.com/blog/salt-typhoon-apt-us-telecom-espionage-attack-analysis https://www.hackthebox.com/blog/emerson-electric Discover how HTB has helped the global leader in industrial automation solutions set a new standard for cybersecurity excellence. ]]> All Content Fri, 27 Jun 2025 05:05:00 +0000 https://www.hackthebox.com/blog/emerson-electric https://www.hackthebox.com/blog/New-purple-category-on-HTB-academy Learn purple teaming with HTB Academy’s newest category—build awareness of red and blue operations to boost your threat response times ]]> All Content Fri, 27 Jun 2025 02:26:00 +0000 https://www.hackthebox.com/blog/New-purple-category-on-HTB-academy