Huntress Launches Free RMM Guard Amid Surge in Cybersecurity Attacks
In a significant move to bolster cybersecurity measures for businesses, the cybersecurity vendor Huntress has launched a new application control feature called RMM Guard, which is now available for free to its entire customer base. This initiative comes at a critical time as recent statistics reveal a staggering 277% increase in attacks utilizing remote monitoring and management (RMM) tools over the past year. The company aims to address this alarming trend as part of its broader product development, the Managed Endpoint Security Posture Management (ESPM), currently in early access.
RMM Guard serves as an essential tool, systematically inventorying all remote access tools present within a customer’s environment. In an effort to enhance security protocols, the feature automatically blocks any software that has not been explicitly authorized. This includes even legitimate tools that may have fallen into the wrong hands, such as ScreenConnect, which can be manipulated by attackers. Such measures aim to prevent unauthorized access and secure the integrity of sensitive systems.
The alarming rise in RMM-based attacks has underscored the necessity for heightened vigilance. Huntress reports that approximately a third of all incidents analyzed so far this year could have been averted if unauthorized RMM software had been blocked from launching in the first place. This statistic highlights a critical gap in the security measures many organizations currently implement, revealing that traditional methods are often insufficient to combat evolving threats in real-time.
Cybercriminals have increasingly been exploiting legitimate remote access software as a means to establish persistent control within victims’ environments. These tools are often trusted by IT departments, making them less likely to raise security alerts and thus easier for attackers to utilize without detection. A poignant example cited by Huntress involved a phishing email masquerading as a "pay increase" notification, which led an unsuspecting employee to install LogMeIn Resolve. This action inadvertently granted an attacker remote access, a breach that was only identified thanks to the constant vigilance of Huntress’s endpoint monitoring and its 24/7 Security Operations Centre.
The principle of application control, also referred to as allow-listing, is a well-established security protocol that permits only known and approved software to execute within an organization’s systems. However, Huntress argues that many of the existing products in the market are tailored for large enterprises with dedicated security teams. As a result, these solutions tend to be excessively complex and resource-intensive, making them impractical for smaller IT teams and managed service providers (MSPs) already stretched thin with various responsibilities.
Industry frameworks typically require extensive planning, policy development, and phased rollouts before a comprehensive application control program materializes. Huntress identifies this lengthy initiation process as unrealistic for smaller teams. In contrast, Huntress’s strategy focuses on rapidly addressing the software categories most frequently exploited by attackers. The initial emphasis on RMM tools will eventually expand to cover other vulnerable software types, including artificial intelligence and file-sharing applications.
Previously, access to RMM Guard was limited to a learning mode requiring a Huntress Managed SIEM subscription. However, these restrictions have recently been lifted. Now, Huntress has made this vital capability available at no additional cost to any customer or partner who has deployed an agent. While the Managed ESPM remains in early access, the removal of barriers to RMM Guard signifies Huntress’s commitment to enhancing security without imposing additional financial burdens on its users.
Existing customers of Huntress can easily request access to the ESPM early access program through their account manager, enabling them to take advantage of the new features and bolster their cybersecurity defenses effectively. As cyber threats continue to evolve, initiatives like RMM Guard demonstrate Huntress’s proactive approach to ensuring that even organizations with limited resources can implement robust security measures to protect themselves from potential breaches.
In summary, Huntress’s new RMM Guard feature, delivered for free, marks a pivotal step in addressing the rising tide of cybersecurity threats that exploit familiar tools. By making this vital service accessible to all customers, Huntress not only empowers organizations to secure their systems but also fosters a broader culture of cybersecurity awareness and preparedness.