Dirk-jan Mollema found one of the most severe vulnerabilities ever discovered in Microsoft Entra ID. One that could have compromised every tenant in the cloud. In this episode, we unpack the story, the stress, and the mindset behind responsible disclosure. 🔥

Introducing PingOneHound! This OpenGraph extension for BloodHound can help you identify, analyze, execute, and remediate attack paths in PingOne organizations. Read the introductory blog post here: specterops.io/blog/2025/10...

Happy #BloodHoundBasics Day from @scoubi.bsky.social! By now, you've probably heard about our Query Library. But did you know you can run any query in your own instance of BHE/BHCE and then save the query to your Personal Library? Follow the steps threaded below! 🧵: 1/5

Today is the 30th anniversary of Hackers

The final round of #DEATHCon2025 online tickets will drop on 9/9 at 0900 UTC deathcon.io/tickets.html In-person tickets still available at some sites (1/4)

Interested in hands-on learning of #DetectionEngineering and #ThreatHunting ? We still have a few tickets left for @DEATHCon2025 in #Montreal We are lucky enough to have 4 Workshops Leaders with us that will be able to hosts a Live Play of their workshop and help you complete it!

Fucking do it, I dare you.

What all do you need to know about BloodHound CE 8.0 & OpenGraph? @scoubi.bsky.social is joining @redsiege.com's Wednesday Offensive tomorrow to dive into the JSON schema for OpenGraph, how to ingest nodes & edges, best practices, & how to create custom icons. Join 👉 ghst.ly/46MNltn

This month's NoiseLetter will make the perfect light reading for a trip to say...Vegas? Make sure to check it out (even if you're not headed to BlackHat/DEF CON there is something in it for you). 🤘

The Python Software Foundation warns of phishing emails directing users to a fake PyPI site (pypj. org) to steal credentials. PyPI isn’t hacked, but users are urged to stay alert. www.bleepingcomputer.com/news/securit... Via @bleepingcomputer.com #hacking #infosec #cybersecurity

This is AMAZING

Think being compliant = being secure? Think again. 🤔 Hear from @scoubi.bsky.social at #BSidesLV as he exposes the gap between blindly following rules & security posture. Get the info on password security & what to do when "compliant" passwords fail you. ghst.ly/4o66cWk

Happy #BloodHoundBasics Day from @scoubi.bsky.social! 🎉 Have you ever run a Cypher Query & get so many nodes you couldn't see anything? You Pinch Zoom to get a closer look and it worked fine, but you Pinch Un-zoom & the application resized. 🧵: 1/2

Only 3 Early Bird tickets left!!

Tickets for #DEATHcon in Montreal are on sale now! Book now to secure your place. FYI, Virtual Tickets for round 1 are already Sold Out! eventbrite.ca/e/deathcon-m... Additional info (like workshops) for the con can be found here : deathcon.io Please like & repost for reach

Tickets for "DEATHcon - Montreal On Site" go on sale July 8th at 8am. www.eventbrite.ca/e/deathcon-m... Be with 50 other DE&TH aficionados for a whole weekend Nov 8-9 2025!! #DEATHcon #Workshops #DetectionEngineering #ThreatHunting

How attackers move between AD domains via trusts depends on trust type & config. We're replacing TrustedBy edge in BloodHound with new trust edges for better attack path mapping. Check out @jonas-bk.bsky.social's blog post to learn more. ghst.ly/4lj9C5T

Ghostwriter v6's new collaborative editing feature is 🔥 Alex Parrill & @printingprops.com discuss the new real-time collaborative editing for observations, findings, & report fields, enabling multiple users to edit simultaneously without overwriting each other. ghst.ly/4jVqdvG

#HuntingTipOfTheDay: a personal favourite, command-line obfuscation. Substituting or inserting special Unicode characters might allow attackers to bypass string-based detections. Look for command lines with unusual Unicode characters. Checkout ArgFuscator.net for more fun!

#HuntingTipOfTheDay: macOS has a built-in SSH mechanism that is disabled by default. Would you detect it if someone enables it and logs in remotely? Look for remote login events, and investigate the associated session.

Personalized my work laptop a bit

🚨 New #BloodHoundBasics courtesy of @scoubi.bsky.social! You've successfully compromised Bob in marketing's account in an engagement. Mark it as Owned by right-clicking ➡️ "Add to Owned" ➡️ run the query "Shortest Paths from Owned objects to Tier Zero" & see your new attack paths! (1/2)

Local to Las Vegas? Looking to mingle with and learn from some of the best people you'll ever meet? Locals and students can get a BSidesLV badge for $35. More information is available online in the FAQ: bsideslv.org/registr...

Waiting for the bus to go to #NorthSec2025 That’s what ne thing I do not miss from the pre covid era! (Waiting for the bus. Not going to NSec!!) If you want to talk all things #BloodHound (BHE & BHCE) let me know. I may or may not have something in return ☺️ #NSEC2025

It's #BloodHoundBasics day! 🙌 The docs got a fresh new look and live at bloodhound.specterops.io — now back in the GitHub repo too, so PRs are welcome! s/o @jonas-bk.bsky.social

That’s the swag I got from my new employer. I think I got more in two weeks than from all my former employers combined!!

omg this looks so fun

I proud of this shot.

Down the rabbit hole we go! The @SecurityBSides Las Vegas #CFP is still open through April 21. Submit your talk & join Alice (& Bob) in Wonderland for #SecuritySummerCamp bsideslv.org/cfp

We are BACK with another #BloodHoundBasics post, this week courtesy of @andyrobbins.bsky.social. ICYMI: The BloodHound BACK button is BACK. Just use your browser's BACK button to go BACK. 🔙

My team has an intern position available! US based (hard req), preferably in the VA area (not a hard requirement, just a nice to have if you want to attend some intern events/team events) If you know someone trying to get their start in red teaming, who are smart/driven have them apply!

Some people are funny

In my trend of reviewing video games 5 years after everyone, #horizon #zerodawn is probably the first game that I really want to play again on Game+ mode!

The DEATHCon 2025 Call for Workshops is now open! If you have a great idea for teaching people how to do #detectionengineering or #threathunting or an adjacent skill through hands-on experience in our lab, we'd love to hear it! deathcon.io/cfp.html Submit before June 1

I’ve lost count of how many times I’ve been asked: “𝐇𝐨𝐰 𝐝𝐨 𝐈 𝐛𝐞𝐜𝐨𝐦𝐞 𝐨𝐧𝐞 𝐨𝐟 𝐲𝐨𝐮𝐫 𝐚𝐧𝐚𝐥𝐲𝐬𝐭𝐬?” Well, here’s your chance 👇 We are now accepting applications for volunteer analysts(there are paid opps too).You’ll get a simulated intrusion case to analyze, write up your findings, and submit by 𝐀𝐩𝐫𝐢𝐥 21.

Haven’t validate the authenticity, but could be interesting for some of you: github.com/APTIRAN/C2 Claims to have Brute Ratel and Nighthawk source.

Only 4 years minus a day left.

The #ShmooCon 2025 talks have been uploaded youtube.com/playlist?lis...

Today is the last day to submit to #SkiCon2025 Get your submission in if you have anything interesting to share with the community! www.skicon.org/cfp/ Tickets are also on sale : www.skicon.org/tickets/ Please reshare for reach!

TELL ME IT AINT SO BOBBY JO!! santandersecurityresearch.github.io/blog/sshing_... we just dont learn

WE DID A THING! 🤓💙👇🏻 perfect for individuals/teams without a proper case management solution in place @eric.zip and i are looking for helpful feedback, so check it out 🚀 especially check it out if you're a fan of notion

Converted Matt Graeber's TraceLogging PS script into C# into the new EtwInspector. gist.github.com/mattifestati... Working quite well. New EtwInspector coming soon...

Tickets for #SkiCon are now on sale! There’s a very limited amount so gets yours while you can! skicon.tickit.ca/events/27355

Stop Forcing A.I. into Fucking EVERYTHING!

I lost my @thinkstcanary.canary.tools t-shirt in a hotel in New Zealand! 😢 I brought this t-shirt to Hawaii last year. I liked it because it was soft and my only green t-shirt.

Interesting that the fact that many move to this platform kind of make both platform feel empty for now. I guess there’s a split between the interesting people (to me) between the two. Or I see the same post 3 times..