HTB Blog

CVE-2025-54136: Remote code execution in Cursor editor

Threat Intelligence 4 min read

Sophie Sep 16, 2025

Inside FireAnt: How UNC3886 used 15+ exploits to breach VMware ESXi and avoid detection

Threat Intelligence 6 min read

Howard Poston Sep 10, 2025

Sandworm unleashed: Inside APT44’s Dune-inspired cyber destruction

Threat Intelligence 8 min read

diskordia, IamRoot Aug 6, 2025

Ghost in the PowerShell: APT33’s low-and-slow tactics explained

Threat Intelligence 4 min read

diskordia Jul 15, 2025

Inside Salt Typhoon: How Chinese APTs breached US telecoms (and stayed hidden for years)

Threat Intelligence 8 min read

Howard Poston Jun 30, 2025

£300m gone: How Scattered Spider hit the UK’s biggest retailers

Threat Intelligence 6 min read

Howard Poston Jun 19, 2025

How 1 bad actor compromised 90+ organizations (and what you can learn from it)

Threat Intelligence 5 min read

diskordia Apr 24, 2025

Ransomware readiness: here is what we learned from 1,400+ players

Threat Intelligence 11 min read

b3rt0ll0 Feb 10, 2025

Mustang Panda deploys evasive, multi-stage malware for intelligence gathering

Threat Intelligence 8 min read

Howard Poston Jan 27, 2025