It's time to change how you think about SaaS integrations. The Salesloft attack shows how GitHub → AWS → Drift → Salesforce created an attack highway defenders never saw coming. Jared Atkinson's analysis details the patterns we should look out for. ghst.ly/4ngDQrD

Learn to detect adversary TTPs through behavioral analysis, not just malware signatures. Our Detection course at Specter Bash teaches you to engineer detections based on attacker tactics and techniques. Register & save your spot ➡️ ghst.ly/specter-bash-2025

🎙️ NEW PODCAST: #KnowYourAdversary Jared Atkinson & Justin Kohler explore identity security from the attacker's perspective. Real stories, real tactics, real insights. Check out our first three episodes now 👉 ghst.ly/kya-podcast

New #BloodHoundBasics post from @martinsohn.dk ‼️ Today is a demo of how BloodHound's #OpenGraph helped a customer build ManagerOfHound.ps1 - going from attack path concept to a custom "ManagerOf" edge in BloodHound. Can it fit in a thread? Let's see... 🧵 1/6

Win32_Process has been the go to WMI class for remote command execution for years. Steven Flores explores a new WMI class that functions like Win32_Process and offers further capability. Read more: ghst.ly/4gyPbkr

Last call! Our #military to #cybersecurity webinar is tomorrow, and there's still time to save your spot. Get the real playbook from #veterans on our team: ✅ Resume strategies that work ✅ Application timing ✅ Consultant life insights Don't miss out 👉 ghst.ly/sep-web-bsky

From DACLs to dragons: @winterknight.net is bringing the ultimate mashup to @pancakescon.com. Half Windows security deep-dive, half D&D villain masterclass. Because why choose between protecting your filesystem and crafting the perfect antagonist? 🐉 Learn more: pancakescon.com/

From military to cybersecurity — your next mission awaits! Join our upcoming Hack the Hiring Process webinar & hear from a panel of veterans on our team as they share their transition strategies: resume tips, application timing, and real consultant life insights. Register 👉 ghst.ly/sep-web-bsky

We've got a fresh #BloodHoundBasics post from @jonas-bk.bsky.social! Ever wondered about those obscure AD special identity groups that quietly grant permissions to every principal in your environment? With BloodHound, you can uncover compromising permissions tied to these groups. 🧵: 1/2

Spoiler alert: Your AI safety measures might have a blind spot. 👀 When attackers use conversation context to bypass LLM safeguards, single-prompt evals just don't cut it anymore. Dive into @atomicchonk.bsky.social's latest blog on multi-prompt attack detection. ghst.ly/47qJhzn

Military veterans bring discipline, problem-solving skills, & strategic thinking to #cybersecurity; exactly what our industry needs. Join us for veteran-led insights on: ✅ Resume tips ✅ Application strategy ✅ Life working at a security firm 👉 ghst.ly/sep-web-bsky

BloodHound isn't just for Active Directory anymore. 🤯 @sadprocessor.bsky.social dives into the BloodHound OpenGraph functionality & demonstrates the new PowerShell cmdlets added to the BloodHound Operator module to work with the OpenGraph feature. ghst.ly/4peTTrB

Transitioning from military to #cybersecurity? We've got your six. Veteran members of our consulting team are sharing the playbook: resume strategies, application timing, & what consultant life really looks like. Join us Sept. 18 to learn more 👉 ghst.ly/sep-web-bsky

In today’s installment of #BloodHoundBasics from Carlo Alcantara: Labels and Tags. 🏷️ With the Privilege Zones feature, labels can be created to define a collection of assets. 🧵: 1/2

There's still time to register for today's webinar! Join Jared Atkinson, Andrew Chiles, & Elad Shamir as they dive into our inaugural State of Attack Path Management report. Register ➡️ ghst.ly/aug-web-bsky

🚨 New #BloodHound shirt alert 🚨 ✅ - Unisex adult/child and ladies sizes available ✅ - Cool design :) ✅ - ALL profits go to charity This time we are supporting Hope for HIE, which supports families suffering the effects of hypoxic ischemic encephalopathy Get your shirt here: ghst.ly/bh8-tshirt

Cookie theft has evolved. 🍪 Over the last year, stealing cookies on Windows devices has changed significantly for Chromium browsers like Chrome and Edge. Andrew Gomez dives into these changes, how threat actors adapt, & new detection opportunities. ghst.ly/45S1ZgW

We are back with our BloodHound t-shirt fundraiser, just in time for #InternationalDogDay! Grab your BloodHound 8.0 shirt today. All funds raised will go directly to @hopeforhie.org, the global voice for families affected by Hypoxic Ischemic Encephalopathy. Get yours at ghst.ly/bh8-tshirt

📆 Save the date for #SOCON2026 in Arlington, VA! This next conference will be bigger than before with a new third talk track. 🧑‍🏫 Conference: April 13-14, 2026 💻 Training: April 15-18, 2026 Sign up now to receive updates → specterops.io/so-con

Happy #BloodHoundBasics day from Nathan Davis! Unsure what Active Directory Certificate Services (AD CS) Escalation (ESC) Attack Paths are? These depend heavily on certificate template configurations that may lead to the abuse of any principal in your forest. 🧵: 1/4

Trying to fly under EDR's radar? @logangoins.bsky.social explains how to use HTTP-to-LDAP relay attacks to execute tooling completely off-host through the C2 payload context. Perfect for when you need LDAP access but want to avoid being caught stealing creds. ghst.ly/41mjMv7

Mythic's browser scripting lets operators customize data analysis beyond raw output. Alexander DeMine shows how smart agent design + structured responses transform the operator experience. ghst.ly/4oTkdY4

Don't miss this deep dive of our State of Attack Path Management report! Join Jared Atkinson, Andrew Chiles, & Elad Shamir next Thursday as they discuss some key takeaways from the report to help you understand & address attack paths before they're exploited. Save your spot at ghst.ly/aug-web-bsky

New blog post just dropped! West Shepherd breaks down extending the Mythic Poseidon agent for ARM64 Dylib injection on Apple Silicon. Details include: ✅ Shellcode construction ✅ Memory allocation ✅ Runtime patching ✅ Thread creation Read more: ghst.ly/41Nu4ED

LudusHound: Open-source tool brings BloodHound data to life 📖 Read more: www.helpnetsecurity.com/2025/08/20/l... #cybersecurity #cybersecuritynews #opensource @github.com @specterops.io

Hosts running the WebClient service are prime targets for NTLM relay attacks, and it may be possible to start the service remotely as a low-privileged user. Steven Flores breaks down the service startup mechanics, plus the protocols and technologies. ghst.ly/41QT7GW

Manual recon commands eating up your time? 🕐 @atomiczsec.bsky.social breaks down how Mythic Eventing automates those repetitive reconnaissance tasks during RTOs, complete with starter YAML scripts you can customize. ghst.ly/45jwYDr

Don't miss our BloodHound demo webinar, happening next Tuesday! During this interactive demo, Jonathan Parfait will cover: ✅ Why Attack Path Management matters ✅ BloodHound's identification approach ✅ Prioritizing mitigation efforts Don't miss it: ghst.ly/aug-demo-bsky

The DSInternals PowerShell module just got an upgrade! 🔥 Updates include: ✅ Golden dMSA Attack ✅ Full LAPS support ✅ Trust password & BitLocker recovery key extraction ✅ Read-only domain controller database compatibility Read more from Michael Grafnetter: ghst.ly/412rZ7F

We are breaking down our State of Attack Path Management report. Join Jared Atkinson, Andrew Chiles, & Elad Shamir as they discuss some key takeaways from the report to help you understand & address attack paths before they're exploited. Register 👉 ghst.ly/aug-web-bsky

Wake up, it's Wednesday! Today on the Wednesday Offensive we have @scoubi.bsky.social from @specterops.io diving into BloodHound CE 8.0's new feature, OpenGraph! See you at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

Why should Microsoft's Nested App Authentication (NAA) should be on your security team's radar? @1cemoon.bsky.social breaks down NAA and shows how attackers can pivot between Azure resources using brokered authentication. ghst.ly/45h2Zw3

PDQ SmartDeploy versions prior to 3.0.2046 used static, hardcoded encryption keys for cred storage. Low-privileged users could potentially access admin creds from registry or deployment files. @unsignedsh0rt.bsky.social unpacks his testing in his latest blog post. ghst.ly/4mjyuvw

What all do you need to know about BloodHound CE 8.0 & OpenGraph? @scoubi.bsky.social is joining @redsiege.com's Wednesday Offensive tomorrow to dive into the JSON schema for OpenGraph, how to ingest nodes & edges, best practices, & how to create custom icons. Join 👉 ghst.ly/46MNltn

The AD CS security landscape keeps evolving, and so does our tooling. 🛠️ Valdemar Carøe drops info on Certify 2.0, including a suite of new capabilities and refined usability improvements. ghst.ly/45IrBxI

Step away from the hustle & bustle of the #BHUSA show floor. 🎳 Come hang with the SpecterOps crew at Brooklyn Bowl tomorrow evening to knock down a few pins and enjoy great company, food, and drinks! Register 👉 ghst.ly/bhusabowling...

👋 Say hello to Nemesis 2.0, a streamlined, Docker Compose-based platform that is laser-focused on file triage. After introducing v1 two years ago, the team has reworked the platform to better serve what people need from it. Read more from @harmj0y.bsky.social: ghst.ly/4mxQzFU

BloodHound 8.0 debuts with major upgrades in attack path management 📖 Read more: www.helpnetsecurity.com/2025/08/05/b... #cybersecurity #cybersecuritynews #opensource @specterops.io

Red teamers know the drill: endless file churning, hunting for passwords & tokens. 🔍 Meet DeepPass2, our new secret scanning tool that goes beyond structured tokens to catch those tricky free-form passwords too. Read Neeraj Gupta's blog post for more. ghst.ly/40HLNNA

Entra Connect sync accounts can be exploited to hijack device userCertificate properties, enabling device impersonation and conditional access bypass. @hotnops.bsky.social explores cross-domain compromise tradecraft within the same tenant. Read more: ghst.ly/3ISMGN9

Identity Security is the next great challenge in #infosec. Our State of Attack Path Management report covers: ➡️ The role of identities and attack paths in breaches ➡️ How attack paths cross systems via hijacked identities ➡️ What orgs can do about it ghst.ly/sapm-25

BloodHound v8.0 is here! 🎉 This update introduces BloodHound OpenGraph, revolutionizing Identity Attack Path Management by exposing attack paths throughout your entire tech stack, not just AD/Entra ID. Read more from Justin Kohler: ghst.ly/bloodhoundv8 🧵: 1/7

The industry recommendation for DPAPI backup key compromise remediation is to destroy and rebuild the environment. Alexander Sou explores why this is the current industry guidance. ghst.ly/40DTLHk

@logangoins.bsky.social is dropping knowledge on ADWS exploitation. 🧠 Learn how attackers use the SOAP protocol for LDAP collection on Domain Controllers & dive into maximizing OPSEC-considerate collection workflows while exploring detection methods. ghst.ly/4lPodH4

Think being compliant = being secure? Think again. 🤔 Hear from @scoubi.bsky.social at #BSidesLV as he exposes the gap between blindly following rules & security posture. Get the info on password security & what to do when "compliant" passwords fail you. ghst.ly/4o66cWk

Classic NTLM relay problem: Stuck on port 445/TCP, can't use WMI (needs 135/TCP), and dumping hashes triggers EDR alerts. So what's a stealthy attacker to do? 🤔 Our latest blog post explores evasive alternatives beyond the old techniques. ghst.ly/3ILR1l0

There are some exciting updates coming to BloodHound! Tune in for our next webinar featuring Justin Kohler, Stephen Hinck, Jared Atkinson, and @andyrobbins.bsky.social as they walk through some of the new features you can look forward to. Register today! ghst.ly/july-web-bsky

Real-time collaboration has landed in Ghostwriter v6.0! 👻 Multiple users can now edit observations, findings, & report fields simultaneously w/o the chaos of overwriting each other's work. @printingprops.com dives into the details in his latest blog update. ghst.ly/3TTSrwc

Happy #BloodHoundBasics Day from @scoubi.bsky.social! 🎉 Have you ever run a Cypher Query & get so many nodes you couldn't see anything? You Pinch Zoom to get a closer look and it worked fine, but you Pinch Un-zoom & the application resized. 🧵: 1/2

🤔 Curious who made your most beloved open-source tools? From BloodHound and Mythic to Ghostwriter and more, meet our team at Booth 4527 during #BHUSA! Schedule a conversation ➡️ ghst.ly/bhusa-25