Incident Response Archives

Cyber Security, Cyber Threat Intelligence, Cyber Threat Management, Incident Response

HawkEye AI Is Listed on SecOps Unpacked’s AI SOC Capability Map, Here’s What Backs It Up

The AI SOC market got crowded fast. Ask five vendors what makes their platform agentic or AI-powered and you’ll get […]

Alert Advisory, Breach Detection, Incident Response

Identity Based Cyberattacks in the GCC: What the 2026 Data Says to Fix First

Nearly 9 in 10 incidents investigated by Unit 42 in 2025 involved an identity weakness, and 65% of initial access […]

Alert Advisory, Cyber Threat Intelligence, Incident Response, Vulnerability Assessment

How Anthropic’s New AI Model Is Challenging Traditional Vulnerability Testing

There has been a vulnerability sitting in OpenBSD for 27 years. OpenBSD, the operating system specifically built with security as […]

Breach Detection, Cyber Security, Cyber Threat Intelligence, Incident Response

The Anthropic Code Leak: When a Packaging Error Becomes a Supply Chain Risk

In March 2026, portions of Anthropic’s internal “Claude Code” were exposed publicly through an npm package misconfiguration. The incident was […]

Breach Detection, Cyber Threat Intelligence, Incident Response

How Hackers Used Anthropic’s Claude to Breach the Mexican Government

Between December 2025 and early January 2026, an unidentified solo operator carried out one of the most technically significant cyberattacks […]

Alert Advisory, Cybersecurity, Incident Response

Microsoft 365’s Direct Send Exploited to Bypass Defenses with Internal Phishing

Microsoft’s Direct Send functionality has emerged as a critical attack vector in sophisticated phishing operations, with threat actors exploiting the […]

Cyber Security, Incident Response, Managed SOC Services, Ransomware Protection

Protecting VMWare ESXi Hypervisors from Ransomware

One of the top platforms in the virtualization sector is VMware. Organizations can more effectively use the computing power of […]

Cyber Security, Incident Response, Managed SOC Services, Ransomware Protection

Why Threat Actors are Now using Rust to Develop New Ransomware?

Rust, a relatively new programming language, was introduced in 2015 and has since gained popularity for its pleasant developer experience […]

Compromise Assessment, Cyber Security, Incident Response, Managed SOC Services

Why Compromise Assessment Should Be a Part of Your Threat Detection and Response Ecosystem

A typical compromise assessment plan uses specialized software and scripts combined with forensic data to find compromises or problems that […]

Cyber Security, Incident Response, Managed SOC Services, Ransomware Protection

Royal Ransomware

Royal has been in existence since at least the beginning of 2022, making it a relatively new business. The goal […]

Cyber Security, Incident Response, Managed SOC Services, Security Operations Center

Detecting Cyber-Attacks on Kubernetes Environment

Kubernetes is a container orchestration system that acts as a management abstraction layer. It is an open-source system that aids […]

Advanced Persistent Threat, Alert Advisory, Cyber Security, Incident Response, Managed Security Services, Managed SOC Services

Alert Advisory: Insight into APT42

APT42 is a state-sponsored cyber espionage group in Iran. The gang, which has been active at least since 2015, is […]

Alert Advisory, Incident Response, Managed Security Services, Managed SOC Services, Security Operations Center, Threat Hunting, XDR

Alert Advisory: New Microsoft Exchange Zero-Days

Late on September 29, 2022, Microsoft acknowledged both zero-day vulnerabilities and stated that they were aware of “limited, targeted attacks […]

Cyber Security, Incident Response, Security Operations Center

Kerberoasting – Active Directory Attack

Active Directory services are usually used by organizations for easily configuring policies and managing permissions. Due to its widespread usage, […]

Cyber Security, Incident Response, Vulnerability Assessment

CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability and Digital Forensics

Microsoft issued CVE-2022-30190 regarding a vulnerability regarding the Microsoft Support Diagnostic Tool (MSDT). This exists when MSDT is called using […]

Cyber Security, Incident Response

Ransomware Incident Response Plan – Part 2

Ransomware was and still is one of the most dangerous attacks that can cause catastrophic consequences to the endpoint system […]

Cyber Security, Incident Response

Ransomware Incident Response Plan – Part 1

Ransomware was and still is one of the most dangerous attacks that can cause catastrophic consequences to the endpoint system […]

Cyber Security, Incident Response, Threat Hunting, Threat Modeling

Threat Model and Security Considerations For Remote Workers

As the world faces uncertain times, due to the spread of the pandemic COVID19 (coronavirus) outbreak, organizations around the world […]

Cyber Security, Incident Response

12 Steps to Secure Your Organization’s Office 365 Accounts Effectively

Recently, our Incident response team at HAWKEYE received a frantic call from one of our clients saying that their o365 […]

HawkEye AI Is Listed on SecOps Unpacked’s AI SOC Capability Map, Here’s What Backs It Up

Identity Based Cyberattacks in the GCC: What the 2026 Data Says to Fix First

How Anthropic’s New AI Model Is Challenging Traditional Vulnerability Testing

The Anthropic Code Leak: When a Packaging Error Becomes a Supply Chain Risk

How Hackers Used Anthropic’s Claude to Breach the Mexican Government

Microsoft 365’s Direct Send Exploited to Bypass Defenses with Internal Phishing

Protecting VMWare ESXi Hypervisors from Ransomware

Why Threat Actors are Now using Rust to Develop New Ransomware?

Why Compromise Assessment Should Be a Part of Your Threat Detection and Response Ecosystem

Royal Ransomware

Detecting Cyber-Attacks on Kubernetes Environment

Alert Advisory: Insight into APT42

Alert Advisory: New Microsoft Exchange Zero-Days

Kerberoasting – Active Directory Attack

CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability and Digital Forensics

Ransomware Incident Response Plan – Part 2

Ransomware Incident Response Plan – Part 1

Threat Model and Security Considerations For Remote Workers

12 Steps to Secure Your Organization’s Office 365 Accounts Effectively

Ready to get started?

Ready to get started?

HawkEye

Packages

CSOC

Explore