The Huntress Agent for macOS now automatically ejects malicious DMGs before their payload can execute, stopping infostealer malware in its tracks. Affected users receive an on-screen notification explaining the action, and every disruption triggers a Huntress SOC investigation to confirm the macOS endpoint is clean.

No action required. Huntress gets in the way before damage is done!

Huntress Managed EDR now catches the moment an end user is tricked into overriding Apple's Gatekeeper to launch an infostealer, a critical step in the attack pattern. Infostealers are now one of the most prevalent macOS threat families.

Available now on macOS 14 and later.

Now that we've had partners and customers successfully use Custom HTML Scenarios in Huntress Managed SAT, we are ready to call it general availability. Early adopters are using it to spearphish employees with scenarios ranging from impersonating trusted vendors to using actual employee names and communication style to better prepare their team.

Huntress Managed Identity Security Posture Management (ISPM) is now fully available for everyone.

Managed ISPM continuously hardens your Microsoft 365 environment so attackers have fewer chances to abuse misconfigurations and over-permissioned users.

Thanks to every one of our amazing Early Access participants. The feedback from over 12,000 Microsoft 365 tenants shaped the future of what we build here at Huntress. Here’s what GA brings for you in Managed ISPM:

We continue to focus on the misconfigurations attackers exploit most, using SOC insights from the millions of identities we manage. This means you strengthen Microsoft 365 posture without building and maintaining your own baselines.

Learn more:

With this release, Huntress Managed SIEM now supports Okta as an identity and authentication log source, giving teams deeper visibility into the identity layer attackers love to target.

Even better: the Huntress SOC has detections built for Okta, helping identify identity-based attacks across key areas like credential attacks, privilege escalation, MFA bypass and fatigue, account takeover, and federated identity manipulation for organizations using Okta as their IdP or SSO provider.

The support configuration guide can be found here:

This is another big step forward in helping teams protect the full attack surface — from endpoint activity to identity-driven threats.

Searching through SIEM logs just got a whole lot easier. With AI Search, users can now search for logs using plain English instead of relying only on ESQL or the Query Builder.

Even better, AI Search helps users learn as they go. After running a plain-English search, simply click the ESQL button to see how Huntress translated your query into an ESQL query.

That means faster searches, easier investigations, and less time wrestling with query syntax.

Plain English in. Searchable logs out.

AI Search is now generally available in Huntress Managed SIEM.

Managed ISPM features continue to grow as we move towards General Availability on July 1. In this set of updates, new Security Controls and enhancements have been added to the following platforms:

The following policies now support Continuous Enforcement with drift detection and auto-remediation:

The redesigned Managed Antivirus dashboard brings recent Microsoft Defender activity, your noisiest organizations, and busiest endpoints together in one place, so you can see exactly how Defender is protecting your endpoints faster.

What's new:

Partners can now automate more of their workflows using our expanded Agents API. You can now programmatically uninstall agents, update tags, toggle tamper protection, and isolate or release hosts directly from your automation tools, without needing to log into the Huntress portal.

Managed ISPM now support additional security controls to better protect Microsoft 365 organizations.

Exchange controls have been expanded to include

The foundation for Microsoft Teams controls has been added to Managed ISPM, and today marks the first control in place. With this foundation set, you'll see us add more controls as we move toward GA on July 1.

The foundation for SharePoint Online and OneDrive for Business has also been added to Managed ISPM. Today marks the first two controls in this space, adding protection to business information stored in Microsoft 365.