HAIJA INTEL REPORT

Attackers don’t need malware when they can abuse identities. At #InfoSecEurope, Mark Wilson will break down how hidden attack paths in AD & Entra ID enable enterprise-wide compromise and how defenders can eliminate them. Learn more https:// ghst.ly/4dzMu2k

Frontier AI teams are leveling up their models with Bugcrowd’s new Reinforcement Learning environments. By interacting with real software, AI learns to find, exploit, and patch vulnerabilities through practice. But AI can’t do it alone. True security still relies on human

ssrf leaked a header name w the k8s server name using @pdiscoveryio 's neo to exploit that and map the internal cluster

AI agents leave footprints that traditional identity security solutions might miss. If an autonomous agent performed a privileged action in your Entra tenant, what would that look like in the logs? Read the first installment of our new blog series about suspicious AI

First stop: Mile High City #optivcon Denver is right around the corner! Join Synack on June 4 to discover how Sara AI Pentesting helps teams: • Expand security testing coverage • Validate exploitable risk • Close the 68% security coverage gap Register here:

People will study this AI doomer FOMO narrative as one of the greatest marketing strategies of all time... Moloch in full force! Oh

While researching "Can AI do novel research? Meet the HTTP Terminator" I logged the discovery journey behind every breakthrough. My intention was just to flag fully autonomous vs HITL discoveries, but it revealed new facets of how/why my research methodology actually works!

Good news bug bounty programs are finally waking up and dumping HackerOne. They use 'AI' to steal researchers' reports. They auto-close valid reports. Partners are leaving for a reason. I'm getting at least one email a week saying a program is closing and a company is leaving Hac

Great insight on how Tycoon 2FA operates. Very interesting to see how they rely on using custom authentication flows for M365 and Google Workspace to acquire access tokens and not the the classic session cookie capture. @SBousseaden and I did some investigations into Tycoon 2FA r

Reflecting on major infrastructure disruptions reminds the industry that widespread tech reliance creates deep concentration risks. When a single software update can disrupt transportation, healthcare, and banking globally, resilience has to be designed into systems from the