H4
0.72
Unauthenticated attackers are gaining SYSTEM on domain controllers with crafted packets. The vulnerability being exploited is CVE-2026-41089, a CVSS 9.8 hole in Windows Netlogon, and exploitation in the wild has been co…
Official intelligence summary
HAIJA INTEL REPORT
Generated 12/06/2026, 09:18. Pipeline: Europe/Belgrade. Regular sources favor exploit, blog, red-team, and attack-path content. CVE items only stay with exploit signal.
Total items15
Regular sources3
Tweets / X12
Threshold0.62
You can save this report in your browser with the favorite button. If you need a shared favorite list, use the CLI helper.
Tweets / X
12 items
0.60
Want to better defend Azure and Entra ID environments? Start by understanding the adversary's perspective. At #BHUSA, our Azure training uses hands-on labs to teach the attack paths, misconfigs, and techniques used against modern cloud environments. https:// ghst.ly/4uii3Ua
MA
0.49
ShinyHunters is exploiting an Oracle PeopleSoft vulnerability (CVE-2026-35273) as part of an extortion campaign targeting higher education. Read the full analysis, and get IOCs and remediation guidance to stay ahead of …
0.46
just wrapped up @OutsiderSec ’s Offensive Entra ID training with @_dirkjan . He is in fact #thegoat it was literally the best Entra ID training going into the nitty gritty details including agent identity blueprints
0.42
AI is actively embedding itself into today's criminal tradecraft - lending itself to social engineering, fraud, impersonation, identity abuse & more. Get to know tools like WormGPT and BruteforceAI, plus, how orgs should react, all in a new blog: https:// r-7.co/4ooQFS7
0.41
ICYMI: Mandiant identified exploitation of a critical vulnerability in KnowledgeDeliver, a learning management system commonly used in Japan. The vulnerability allows for unauthenticated remote code execution via ViewState deserialization. Details: https:// goo.gle/444QSjW
0.38
Broken Token: OAuth New ebook, 2nd of the series. Master every way to break OAuth flow: PKCE downgrade DCR injection Token lifecycle abuse Grant flow weaponization + 13 original named techniques https:// brutelogic.net/ebooks/broken- token/oauth/ … The most complete offensive OAu
0.32
A little bit different than in the movies AI research at the gym
0.25
Releasing DCOMIllusionist as part of our talk on DCOM at @x33fcon with @k3vinTell . It's a remote in memory fileless lateral movement technique based on some research of @tiraniddo
0.24
Long live Active Directory! I’m giving a talk for ContinuumCon tomorrow (Friday June 12th) at 1:30pm eastern. Killing AD attack paths by using auth policies & silos.
0.24
What questions should security teams ask before adopting AI pentesting? According to our CTO and co-founder @MarkKuhr , the right framework is less about model benchmarks and more about three things: access, governance, and validation: https:// hubs.ly/Q04l5bSY0 #aipentesting
0.24
Hello, If you're a person who lives inside my computer and/or likes malware and/or goes to computer conventions, I have a message for you. tl;dr 1. idk if going to defcon, stop asking fr 2. vxug party? idfk 3. big giveaway thingy 4. defcon shirts ig idfk 5. papers non-tl;dr
Regular sources
3 itemsFrom SQLi to RCE - Exploiting LangGraph’s Checkpointer
By Yarden Porat AI agents need memory. Frameworks like LangGraph provide it through checkpointers - persistence layers that store execution state. But what happens when …
‘GreatXML’ Zero-Day Exploit Bypasses BitLocker
The PoC exploits Microsoft Defender’s offline scan to spawn a SYSTEM shell when rebooting in Recovery Mode. The post ‘GreatXML’ Zero-Day Exploit Bypasses BitLocker appea…
Naxclow IoT Platform
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to impersonate devices, intercept or manipulate communications, harvest sensit…