SquidC5: Free Open Source Self-Hosted C5 Teamserver for Authorized Red Teams
Hey everyone, Mr. The Plague here from SquidSec. Commercial C2 is expensive. A lot of “free” options still want your engagement data on someone else’s cloud, or they…
Latest intel
One WebSocket, one Shell: CVE-2026-39987 Explained
CVE-2026-39987: Pre-Authentication Remote Code Execution in marimo Severity: CVSS 4.0 9.3 (Critical) — AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:HWeakness: CWE-306 — Missing Authentication for Critical FunctionAffected: marimo < 0.23.0Fixed in: 0.23.0Advisory: GHSA-2679-6mx9-h9xcProof of…
Agentic Attack Surface Recon: A Real Case Study From 497 Scans
A real production case study of agentic attack surface recon. SquidScan's 45-agent AI pipeline ran 497 jobs, 23,039 tool tasks, and 487 AI reports. Reliability, finding climate, and what autonomous external recon actually produces off demo day.
SquidShield WP: Free Open Source One-Click WordPress Security by SquidSec
SquidSec launches SquidShield WP: free, open-source, one-click WordPress security. Firewall, login protection, malware scanning, and hardening. Get it on GitHub: DotNetRussell/SquidShield-WP.
SquidScanner: Revolutionizing Agentic Reconnaissance for Bug Hunters, Pentesters, and Security Teams
Hey everyone, it’s ☣️ Mr. The Plague ☣️ here from SquidSec. If you’ve ever spent hours stitching together Subfinder runs, Nuclei templates, and random GitHub dorks only to…
Active Directory Hacking Cheat Sheet
Contents ACTIVE DIRECTORY HACKING CHEAT On this page 01 Quick Start 02 Kerberos Attacks 03 Delegation Abuses 04 AD Certificate Services 05 Replication and Credential Dumping 06 Dangerous…
Modular Agentic Attack Surface Scanning — Built on Rails, Not Magic
Security teams today face a paradox. The attack surface is exploding — cloud assets, containers, APIs, shadow IT, and forgotten subdomains — yet most scanning solutions still force…
Leadership Reckoning in 2026: Actionable Blueprints for Senior Cybersecurity Leaders to Forge Enduring Resilience in a Weaponized, Borderless Digital Economy
This is the fifth and final installment in the “Building Resilience in a Globalized Digital Economy” series. Over the past month we’ve dissected the escalating NPM/JavaScript supply-chain nightmare…
Anthropic’s Double Leak: Misconfigurations, npm Packaging Blunders, and the Rising Cyber Risks of “Agentic” AI Development
In the span of just five days in late March 2026, Anthropic—one of the AI industry’s most vocal proponents of safety and responsible development—suffered two major accidental data…
Data Sovereignty Battles in the Cloud: Securing Cross-Border Operations Without Getting Crushed by Privacy Laws or Misconfigs
Part 4 of “Building Resilience in a Globalized Digital Economy.” After geopolitics weaponized your supply chain, the next battlefield is the cloud itself. Data now flows across borders…