1.Governing the Agentic SDLC Through Continuous Policy Enforcementblog | 2026-10-12 16:24 | jfrog.com | Original ↗ | .md | #ai-security | #gitlab | #sdlc
2.Evolving our submission accuracy and throttling controls to protect triage speedblog | 2026-10-08 12:36 | bugcrowd.com | Original ↗ | .md | #ai-security | #macos | #malware-analysis
3.Battling Zombie Certificates: The Persistent Risk Lurking in AD CSblog | 2026-10-07 14:16 | semperis.com | Original ↗ | .md | #active-directory | #certificates | #pki
4.Azure VM Command Execution using Third-Party Extensions – Salt Minionblog | 2026-07-27 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #privilege-escalation
5.Azure VM Command Execution using Third-Party Extensions – Chefblog | 2026-07-21 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #red-team
6.Bypassing Microsoft Entra Conditional Access Policies via Nested App Authenticationblog | 2026-06-22 00:00 | netspi.com | Original ↗ | .md | #oauth | #conditional-access | #msrc
7.Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaignblog | 2026-03-24 18:40 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
8.Exposed BYOB C2 Infrastructure Reveals a Multi-Stage Malware Deploymentblog | 2026-01-28 00:00 | hunt.io | Original ↗ | .md | #attack-chains | #malware | #threat-hunting
9.AsyncRAT Campaigns Uncovered: How Attackers Abuse ScreenConnect and Open Directoriesblog | 2025-09-18 00:00 | hunt.io | Original ↗ | .md | #ai-security | #malware | #persistence
10.APT MuddyWater Targets CFOs with Multi-Stage Phishing & NetBird Abuseblog | 2025-08-20 00:00 | hunt.io | Original ↗ | .md | #phishing | #social-engineering | #apt
11.JSPSpy and ‘Filebroser’: A Custom File Management Tool in Webshell Infrastructureblog | 2025-03-11 00:00 | hunt.io | Original ↗ | .md | #infrastructure | #webshell | #persistence
12.Backdooring Azure Automation Account Packages and Runtime Environmentsblog | 2024-09-24 00:00 | netspi.com | Original ↗ | .md | #cloud | #powershell | #backdoor
13.How to Defend Against SID History Injectionblog | 2024-05-03 20:16 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #defense
14.‘I stay on targets for a long, long time’: Chackal and Serizao on passion, persistence and partnerships in Bug Bountyblog | 2024-03-13 09:06 | yeswehack.com | Original ↗ | .md | #bug-bounty | #interview | #collaboration
15.CharmingCypress: Innovating Persistenceresearch | 2024-02-13 09:47 | volexity.com | Original ↗ | .md | #vulnerability-research | #threat-intelligence | #phishing
16.Mistaken Identity: Extracting Managed Identity Credentials from Azure Function Appsblog | 2023-11-16 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #azure
17.Hiding in Plain Sight — Discovering Hidden Active Directory Objectsincident | 2022-03-30 09:23 | semperis.com | Original ↗ | .md | #active-directory | #detection | #persistence
18.Azure Persistence with Desired State Configurationsblog | 2021-06-24 00:00 | netspi.com | Original ↗ | .md | #cloud | #red-team | #azure
19.Active Directory Security: Abusing Display Specifiersblog | 2021-05-20 19:53 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #attack-technique
20.New Research: Detecting DCShadow on Rogue Hostsblog | 2020-11-16 15:40 | semperis.com | Original ↗ | .md | #active-directory | #detection | #research
21.Maintaining Azure Persistence via Automation Accountsblog | 2019-09-12 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #red-team
22.Why Most Organizations Still Can’t Defend against DCShadowblog | 2019-07-16 19:15 | semperis.com | Original ↗ | .md | #active-directory | #backdoor | #mimikatz
23.Get-AzurePasswords: Exporting Azure RunAs Certificates for Persistenceblog | 2019-02-27 00:00 | netspi.com | Original ↗ | .md | #cloud | #automation | #azure
24.Attacking SQL Server CLR Assembliesblog | 2017-07-13 00:00 | netspi.com | Original ↗ | .md | #active-directory | #privilege-escalation | #persistence
25.Getting Started with WMI Weaponization – Part 6blog | 2017-04-20 00:00 | netspi.com | Original ↗ | .md | #powershell | #wmi | #defense-evasion
26.Getting Started with WMI Weaponization – Part 5blog | 2017-04-18 00:00 | netspi.com | Original ↗ | .md | #windows | #powershell | #wmi
27.Establishing Registry Persistence via SQL Server with PowerUpSQLblog | 2016-08-05 00:00 | netspi.com | Original ↗ | .md | #windows | #red-team | #registry
28.Maintaining Persistence via SQL Server – Part 2: Triggersblog | 2016-04-11 00:00 | netspi.com | Original ↗ | .md | #red-team | #detection | #triggers
29.Maintaining Persistence via SQL Server – Part 1: Startup Stored Proceduresblog | 2016-03-07 00:00 | netspi.com | Original ↗ | .md | #red-team | #detection | #persistence
30.Malicious Outlook Rulesblog | 2015-12-04 00:00 | netspi.com | Original ↗ | .md | #phishing | #red-team | #powershell