Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

Filter by company: All Microsoft Google Huntress Apple Inc. GitHub Amazon Web Services Amazon Meta

• Attackers Bypass Azure AD Conditional Access Using Phantom Device Registration

  GBHackers

  T1556.007 55% T1098 43% T1111 42%
  18 hours ago
• Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool

  Quarkslab

  T1525 89% T1528 55% T1098 39%
  2026-04-29
• Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

  The Hacker News

  T1098.003 49% T1078.004 46% T1098 32%
  2026-04-28
• Walking Through an Attack Path with ForceHound

  NetSPI

  T1525 92% T1552.005 56% T1098 50%
  2026-04-17
• Shadow Admins in Active Directory: Hidden Privilege Paths Attackers Exploit

  Praetorian

  T1552.004 56% T1003.006 53% T1558.003 36%
  2026-04-15
• Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

  Microsoft Threat Intelligence

  T1071.001 96% T1556.006 92% T1137.005 86%
  2026-04-09
• Proactive Preparation and Hardening Against Destructive Attacks: 2026 Edition

  Mandiant

  T1021.001 99% T1021.006 99% T1649 93%
  2026-03-06
• SDFlags | Huntress

  Huntress

  T1482 93% T1069.002 72% T1098.007 64%
  2026-01-15
• Deceptive-Auditing: An Active Directory Honeypots Tool

  Black Hills InfoSec

  T1098 76% T1548.002 65% T1558.003 53%
  2026-01-07
• Cat’s Got Your Files: Lynx Ransomware

  The DFIR Report

  T1486 100% T1046 100% T1135 98%
  2025-12-17
• Abusing Delegation with Impacket (Part 3): Resource-Based Constrained Delegation

  Black Hills InfoSec

  T1557.001 79% T1550.003 72% T1558 66%
  2025-11-26
• #ShadyHacks with Kyle Hanslovan

  Huntress

  T1078.004 92% T1564.008 76% T1111 64%
  2025-11-26
• Breaking Down S3 Ransomware: Variants, Attack Paths and Trend Vision One™ Defenses

  Trend Micro Research

  T1486 95% T1485 92% T1530 77%
  2025-11-18
• Abusing Delegation with Impacket (Part 2): Constrained Delegation

  Black Hills InfoSec

  T1003.006 85% T1558.003 77% T1550.003 70%
  2025-11-12
• Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware

  Trend Micro Research

  T1486 100% T1190 99% T1069.001 97%
  2025-08-20
• Getting Started with NetExec: Streamlining Network Discovery and Access

  Black Hills InfoSec

  T1021.002 97% T1110.003 97% T1201 95%
  2025-07-09
• How to Design and Execute Effective Social Engineering Attacks by Phone

  Black Hills InfoSec

  T1589.001 63% T1566.004 63% T1684.001 62%
  2025-06-18
• Abusing S4U2Self for Active Directory Pivoting

  Black Hills InfoSec

  T1550.002 92% T1136.001 80% T1550.003 68%
  2025-06-11
• Untold Tales from Tactical Response | Huntress

  Huntress

  T1078 92% T1021.006 86% T1059.001 82%
  2025-03-10
• Cracks in the Foundation: FOUNDATION Accounting Intrusions | Huntress

  Huntress

  T1110.001 65% T1098 65% T1078.001 46%
  2024-09-17
• Business Email Compromise via Azure Administrative Privileges | Huntress

  Huntress

  T1078.004 75% T1098 72% T1556.006 59%
  2023-07-27
• MITM6 Strikes Again: The Dark Side of IPv6

  Black Hills InfoSec

  T1003.006 89% T1557.001 85% T1557 73%
  2023-02-14
• PlumHound Reporting Engine for BloodHoundAD

  Black Hills InfoSec

  T1087.002 93% T1098 53% T1654 45%
  2022-12-06
• Cybersecurity Controls to Stop Ransomware

  F5 Labs

  T1486 93% T1531 55% T1098 45%
  2021-07-28