One WebSocket, one Shell: CVE-2026-39987 Explained
Contents CVE-2026-39987 On this page 01 Summary 02 Root Cause 03 The Patch 04 Impact: Why a PTY Raises the Ceiling 05 Exposure Discovery 06 Exploitation Timeline 07…
Category: pentesting
SquidC5: Free Open Source Self-Hosted C5 Teamserver for Authorized Red Teams
Hey everyone, Mr. The Plague here from SquidSec. Commercial C2 is expensive. A lot of “free” options still want your engagement data on someone else’s cloud, or they…
Agentic Attack Surface Recon: A Real Case Study From 497 Scans
A real production case study of agentic attack surface recon. SquidScan's 45-agent AI pipeline ran 497 jobs, 23,039 tool tasks, and 487 AI reports. Reliability, finding climate, and what autonomous external recon actually produces off demo day.
SquidScanner: Revolutionizing Agentic Reconnaissance for Bug Hunters, Pentesters, and Security Teams
Hey everyone, it’s ☣️ Mr. The Plague ☣️ here from SquidSec. If you’ve ever spent hours stitching together Subfinder runs, Nuclei templates, and random GitHub dorks only to…
Active Directory Hacking Cheat Sheet
Contents ACTIVE DIRECTORY HACKING CHEAT On this page 01 Quick Start 02 Kerberos Attacks 03 Delegation Abuses 04 AD Certificate Services 05 Replication and Credential Dumping 06 Dangerous…
Modular Agentic Attack Surface Scanning — Built on Rails, Not Magic
Security teams today face a paradox. The attack surface is exploding — cloud assets, containers, APIs, shadow IT, and forgotten subdomains — yet most scanning solutions still force…
Leadership Reckoning in 2026: Actionable Blueprints for Senior Cybersecurity Leaders to Forge Enduring Resilience in a Weaponized, Borderless Digital Economy
This is the fifth and final installment in the “Building Resilience in a Globalized Digital Economy” series. Over the past month we’ve dissected the escalating NPM/JavaScript supply-chain nightmare…
Anthropic’s Double Leak: Misconfigurations, npm Packaging Blunders, and the Rising Cyber Risks of “Agentic” AI Development
In the span of just five days in late March 2026, Anthropic—one of the AI industry’s most vocal proponents of safety and responsible development—suffered two major accidental data…
Data Sovereignty Battles in the Cloud: Securing Cross-Border Operations Without Getting Crushed by Privacy Laws or Misconfigs
Part 4 of “Building Resilience in a Globalized Digital Economy.” After geopolitics weaponized your supply chain, the next battlefield is the cloud itself. Data now flows across borders…
Cyber Geopolitics: Nation-State Actors, Trade Wars, and Sanctions Weaponizing the Digital Economy – Resilience Tactics That Actually Work
Part 3 of “Building Resilience in a Globalized Digital Economy.” After NPM worms and full-spectrum supply-chain armageddon, here’s the ugly truth: in 2026, dependencies aren’t just technical—they’re geopolitical…