HAIJA INTEL REPORT

Ad sim tradecraft, live defense data, enterprise-scale labs. Red Team Operations at #SpecterBash doesn't just teach you how to attack. It teaches you how to think, adapt & operate under pressure. The scariest part? How much you didn't know going in. https:// ghst.ly/45COqlF

Two years ago, about a third of global companies used generative AI. Now, 80% of companies run autonomous AI agents, not just chatbots. AI security has reset completely. This blog covers six of the biggest changes in AI security.

XSS - SSRF - JWT - OAuth - Cryptography https:// brutelogic.net/ebooks Independent research, original work. Brute Testbeds XSS https:// gym.brutelogic.net Recon https:// recon.brutelogic.net 403 https:// 403.brutelogic.net/access JWT https:// 403.brutelogic.net/authz/jwt OAuth ht

Indicators from a case we are actively investigating: C2: 45[.]153[.]219[.]166:1010 pythonw.exe running from: C:\ProgramData\BgBlqnzAJMkSuYCq\pythonw.exe If you defend a network, hunt your logs for these now. Seeing the same thing, or have additional context? Get in touch

GTA VI malware before GTA VI? Huntress analyzed an ISO file, found in a sandbox, masquerading as a leaked version of the game. You have to wait a few more months to get into Vice City, but you can read our blog breaking down this kill chain now:

Are you at @BlueTeamCon this weekend? Join @brian_psu & John Wotton's talk on Saturday where they will share the research behind ProxyWatch and how it can help defenders find SOCKS proxies in their environments. https:// ghst.ly/4xHdMuZ

I resigned from Hackerone today. I spent the last three years doing foldable research at both Bugcrowd and Hackerone. Neither company is acting responsibly. They have broken trust with the researchers and customers who built them, and I can’t in good conscience keep contributing