Curated security research, vulnerabilities, advisories and tools for practitioners.

#detection

Security coverage tagged detection.

1.

How to Spot and Stop Rogue Device Joins

blog | 2026-08-18 16:24 | wiz.io | original ↗ | #ai-security | #microsoft | #identity-security

2.

No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452

vulnerability | 2026-08-06 00:00 | CVE-2026-8452 | bishopfox.com | original ↗ | #citrix | #netscaler | #detection

3.

Weaponized RMM: Hunting the Adversary Abuse of Remote Monitoring Tools

blog | 2026-06-05 00:00 | netlas.io | original ↗ | #threat-intelligence | #threat-hunting | #phishing

4.

Trusted AI Adoption (Part 2): Detection

blog | 2026-06-02 13:15 | jfrog.com | original ↗ | #ai-security | #supply-chain | #ai-governance

5.

Why EDR and proxy won’t save you from supply chain malware

blog | 2026-06-02 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #npm

6.

The Gold Mine Red Teamers Never Touch

blog | 2026-05-22 00:00 | abdulmhsblog.com | original ↗ | #kerberos | #windows-security | #ntlm

7.

Dissecting Impacket for Good and Bad

blog | 2026-05-10 00:00 | abdulmhsblog.com | original ↗ | #active-directory | #kerberos | #smb

8.

Would You Click ‘Accept’? Automatically detecting malicious Azure OAuth applications using LLMs

blog | 2026-02-18 19:09 | wiz.io | original ↗ | #ai-security | #cloud | #llm

9.

The Evolution of C2: Centralized to On-Chain

blog | 2025-12-12 00:00 | netlas.io | original ↗ | #web3 | #threat-intelligence | #malware

10.

How to detect React2Shell with Burp Suite

blog | 2025-12-05 13:53 | portswigger.net | original ↗ | #rce | #appsec | #burp-suite

11.

3 OAuth TTPs Seen This Month — and How to Detect Them with Entra ID Logs

blog | 2025-11-27 16:27 | wiz.io | original ↗ | #cloud | #identity-security | #entra-id

12.

The Complete Guide to Hunting Cobalt Strike - Part 2: 10+ HuntSQL Recipes to Find Cobalt Strike

blog | 2025-11-19 00:00 | hunt.io | original ↗ | #threat-detection | #threat-hunting | #c2

13.

The ultimate Bug Bounty guide to HTTP request smuggling vulnerabilities

research | 2025-10-30 12:50 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #detection

14.

AdaptixC2 Uncovered: Capabilities, Tactics & Hunting Strategies

research | 2025-10-09 00:00 | hunt.io | original ↗ | #threat-hunting | #c2 | #malware-analysis

15.

How to find RCE: A list of pathways and detection methods

blog | 2025-10-03 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #rce | #exploitation

16.

Detecting and Preventing Malware in Modern Software Supply Chains

blog | 2025-08-20 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #npm

17.

The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?

blog | 2025-08-06 22:22 | portswigger.net | original ↗ | #http-desync | #request-smuggling | #detection

18.

Proactive Threat Hunting: Techniques to Identify Malicious Infrastructure

blog | 2025-07-30 00:00 | netlas.io | original ↗ | #threat-hunting | #c2 | #detection

19.

The Pyramid of Pain: Beyond the Basics

blog | 2025-07-25 00:00 | netlas.io | original ↗ | #threat-intelligence | #defense | #detection

20.

BadSuccessor: How to Detect and Mitigate dMSA Privilege Escalation

vulnerability | 2025-06-05 13:34 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #detection

21.

Defending Against Cable: Prevent Malicious Use of Post-Exploitation Tool

blog | 2025-05-06 14:00 | semperis.com | original ↗ | #threat-detection | #active-directory | #post-exploitation

22.

NTDS.DIT Extraction Explained

blog | 2025-04-06 19:46 | semperis.com | original ↗ | #active-directory | #defense | #detection

23.

LDAP Reconnaissance Explained

blog | 2025-03-06 15:14 | semperis.com | original ↗ | #active-directory | #reconnaissance | #detection

24.

Group Policy Abuse Explained

blog | 2025-02-27 05:36 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #detection

25.

Password Spraying Explained

blog | 2025-02-22 20:48 | semperis.com | original ↗ | #active-directory | #credential-security | #entra-id

26.

Advanced Threat Hunting with New SSL Features: Unlocking HuntSQL™ Anomaly Flags for Deeper Detection

blog | 2025-02-13 00:00 | hunt.io | original ↗ | #threat-hunting | #detection | #ssl

27.

Tracking Pyramid C2: Identifying Post-Exploitation Servers in Hunt

blog | 2025-02-12 00:00 | hunt.io | original ↗ | #python | #c2 | #post-exploitation

28.

How to Defend Against Silver Ticket Attacks

blog | 2025-02-02 22:00 | semperis.com | original ↗ | #active-directory | #privilege-escalation | #kerberos

29.

Cloud Detection Without Drowning: The Zero-Noise Approach

blog | 2025-01-27 14:00 | wiz.io | original ↗ | #cloud | #cloud-security | #incident-response

30.

Unconstrained Delegation Explained

blog | 2025-01-26 14:28 | semperis.com | original ↗ | #active-directory | #kerberos | #detection