Huntress Labs Ranks Most Impactful Threats Abusing Legitimate IT Tools and Microsoft 365 Sessions

According to a recent report from Huntress Labs, threat actors are increasingly leveraging legitimate IT tools and Microsoft 365 sessions to compromise organizations, avoiding detection by traditional security defenses. The findings, reported by BleepingComputer, indicate that attackers are abusing everyday workflows and trusted sessions to gain initial access and maintain persistence within target environments. The ranking identifies which attack techniques currently pose the greatest risk to businesses and which remain emerging concerns. While the report focuses on the abuse of Microsoft 365 and common IT tools, specific ranked techniques and detailed exploitation methods were not included in the available summary. The findings underscore the growing need for organizations to monitor not just malicious binaries, but also the legitimate tools and sessions that are integral to daily operations. Huntress Labs emphasizes that defending against these techniques requires visibility into anomalous usage patterns of trusted rather than merely blocking unknown files or processes.