Live signal
Penetration testing tradecraft, agentic recon, supply-chain deep dives, and practical hardening — from the SquidSec crew.
Hey everyone, it’s ☣️ Mr. The Plague ☣️ here from SquidSec. If you’ve ever spent hours stitching together Subfinder runs, Nuclei templates, and random GitHub dorks only to…
Active Directory Hacking Cheat Sheet Active Directory is still the main target in most enterprise networks. SharpHound pulls the data into JSON files, but the real value comes…
Security teams today face a paradox. The attack surface is exploding — cloud assets, containers, APIs, shadow IT, and forgotten subdomains — yet most scanning solutions still force…
This is the fifth and final installment in the “Building Resilience in a Globalized Digital Economy” series. Over the past month we’ve dissected the escalating NPM/JavaScript supply-chain nightmare…
In the span of just five days in late March 2026, Anthropic—one of the AI industry’s most vocal proponents of safety and responsible development—suffered two major accidental data…
Part 4 of “Building Resilience in a Globalized Digital Economy.” After geopolitics weaponized your supply chain, the next battlefield is the cloud itself. Data now flows across borders…
Part 3 of “Building Resilience in a Globalized Digital Economy.” After NPM worms and full-spectrum supply-chain armageddon, here’s the ugly truth: in 2026, dependencies aren’t just technical—they’re geopolitical…
From Shai-Hulud worms cascading across npm to UEFI bootkit persistence and MSP credential abuse turning one breach into hundreds—2025–2026 proved the global digital economy has zero perimeters. Here’s…
If you read my last deep-dive on NPM supply-chain risks, you remember the punchline: the JavaScript ecosystem is a house of cards built on voluntary maintainer effort, transitive…
Active Directory (AD) reconnaissance is a critical step in pentester engagements, penetration testing, and security assessments. Traditionally, tools like BloodHound — paired with its data collector SharpHound —…
