HAIJA INTEL REPORT

To defend Azure & Entra ID, you first need to understand how attackers see them. Join our Azure training at #BHUSA & learn the misconfigs adversaries look for through hands-on labs built around real-world attack paths. https:// ghst.ly/4y15ZZv

Impersonated "System Administrator" #phishing abuses Teams to seize remote control of victim's machine to deploy #EtherRAT via a malicious MSI/PowerShell, with its C2 hidden in an Ethereum smart contract. An open dir exposes the actor's malware. Details at https:// bit.ly/4v6cfN6

ICYMI: @hdmoore joined #KnowYourAdversary to discuss why defenders need to think beyond vulnerabilities. From RunZeroHound & BloodHound OpenGraph to OT security, hidden exposure, & AI, this episode explores the relationships attackers exploit. : http:// ghst.ly/4g9XtkB

Spent some time in @flaresystems 's new CTI Intelligence Browser today. One thing I liked: I could start with a threat actor and pivot through campaigns, malware, IOCs, and dark web activity without bouncing between four different tools or losing context. That's the gap I see

We gave GPT-5.5-Cyber a single /goal: find a specific class of bugs in zlib, the compression library used by Linux, macOS, iOS, and Git. It built a fuzzing lab in less than a day, a task that takes a skilled researcher weeks. Patch the Planet field report by Benjamin Samuels:

Threat actors are integrating AI into their exploit chains. Rapid7's Red Team is doing the same. A newly formalized multi-agent system follows our pen testing methodology end-to-end - from scoping an engagement to validating findings & generating reports: