"LdrShuffle" is a stealthy code execution technique that abuses the Windows Loader by overwriting a DLL's EntryPoint, enabling injection without creating new threads.

DCOMRunAs is a covert technique that exploits DCOM and DLL hijacking to execute payloads in the context of a remote, logged-on user's session without new process creation.

FusterCluck PoC exploits the Windows Cluster API over RPC to migrate cluster groups and achieve lateral movement across all nodes of a failover cluster.

Hello, fellow nerds!

SpeechRuntimeMove abuses DCOM and COM hijacking to execute code in an active user's session, bypassing the need for a full system takeover.

TL;DR

Arctic Wolf warns of CVE-2026-1731, a critical BeyondTrust flaw exploited in the wild. Attackers use it to deploy backdoors. Patch self-hosted instances now.

Privilege Escalation: How a Single Misconfigured Permission Can Bring Down an Entire Domain

The compromise of a perimeter network appliance can swiftly shepherd a malefactor toward domain controllers and the enterprise’s

SentinelOne DFIR reveals how attackers exploit FortiGate NGFW flaws to extract credentials, abuse Active Directory, and establish persistent network access.

Microsoft’s April 2026 Patch Tuesday fixes two "wormable" CVEs (9.8 & 8.1 CVSS). Secure your network against zero-click RCE and lateral movement now.

Microsoft warns of a Teams campaign using fake IT support to hijack workstations via Quick Assist, move laterally with WinRM, and steal data using Rclone.

Splunk STRT identifies a new campaign bundling Ghost RAT with CloverPlus adware to steal RDP credentials and monetize infections. Patch your systems now!

In offensive security engagements, gaining an initial foothold is rarely the end goal. What truly defines the impact of a penetration test…

Wazuh patches a critical 9.0 CVSS flaw (CVE-2026-30893) in cluster sync. Malicious peers can achieve RCE and lateral movement. Upgrade your clusters now.

Güvenlik açığının bir nükleer reaktörde ya da bankada olmasına gerek yoktu. Bir termometre yeterliydi.

At a glance Malware family Spirals (new Rust-based ransomware, named by its operators) Threat actor Unknown. No named group; attribution not established. Target / victims One IT services company i…