🤖 Security - AI Agents in Azure
Azure and Entra ID the way attackers do. During our Azure course at #SpecterBash, learn to identify the misconfigs and attack paths that matter, including those involving agents and identities. Get the attacker’s perspective: https://ghst.ly/45COqlF ↗
Key Points:
Azure Security Misconfigurations: Azure and Entra ID security misconfigurations can be exploited by attackers to gain unauthorized access to sensitive data.
Agent and Identity Attack Paths: Attackers can use agents and identities to bypass security controls and gain access to sensitive data.
Attacker’s Perspective: The attacker’s perspective is crucial in understanding how to identify and exploit security misconfigurations in Azure and Entra ID.
🔗 Resources:
- Original source ↗
- Original source
- Azure and Entra ID
- Azure and Entra ID security misconfigurations and agent and identity attack paths
🚀 Security - Azure Pentesting Suite
azure-pentesting-suite — Go toolkit for authorized Azure security assessments: enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob storage anonymously. https://ktp.sh/BTehCGOEaf ↗
Key Points:
Azure Security Assessments: The azure-pentesting-suite is a Go toolkit for authorized Azure security assessments.
Enumerating Subscriptions and Resources: The toolkit enumerates subscriptions and resources, audits misconfigurations, and attacks public Blob storage anonymously.
Authorized Security Assessments: The toolkit is designed for authorized security assessments, not for malicious activities.
🔗 Resources:
- Original source ↗
- Original source
- azure-pentesting-suite
- Azure security assessments and toolkit
🚀 Security - Anthropic Claude Code Credits
Anthropic rolls out up to $250 in free Claude Code credits, but only for cloud sessions https://bleepingcomputer.com/news/artificial-intelligence/anthropic-rolls-out-up-to-250-in-free-claude-code-credits-but-only-for-cloud-sessions/… ↗
Key Points:
Claude Code Credits: Anthropic rolls out up to $250 in free Claude Code credits.
Cloud Sessions Only: The credits are only available for cloud sessions.
Free Credits: The credits are free, but with limitations.
🔗 Resources:
- Original source ↗
- Original source
- Anthropic Claude Code credits
- Cloud sessions and free credits
🚨 Security - KEV Catalog
We added Microsoft SharePoint vulnerability CVE-2026-65660 & Mikrotik RouterOS vulnerability CVE-2026-67279 to our KEV Catalog. Visit https://go.dhs.gov/Z3Q ↗ & apply mitigations to protect your org from cyberattacks. #Cybersecurity #InfoSec
Key Points:
KEV Catalog: The KEV Catalog has been updated with new vulnerabilities.
CVE-2026-65660 and CVE-2026-67279: The vulnerabilities are Microsoft SharePoint and Mikrotik RouterOS.
Mitigations: Apply mitigations to protect your organization from cyberattacks.
🔗 Resources:
- Original source ↗
- Original source
- KEV Catalog
- Microsoft SharePoint and Mikrotik RouterOS vulnerabilities
🚨 Security - SOC 2 and AI Agents
Your SOC 2 controls can pass an audit while still failing to answer what AI agents are running, who authorized them, or whose credentials they're using. @TheTokenSec explains why SOC 2 needs to adapt. https://bleepingcomputer.com/news/security/with-the-rise-of-ai-agents-soc-2-should-adapt-or-risk-irrelevance/… ↗
Key Points:
SOC 2 and AI Agents: SOC 2 controls can pass an audit while still failing to address AI agents.
AI Agent Risks: The risks associated with AI agents are not being addressed by SOC 2 controls.
Adaptation Needed: SOC 2 needs to adapt to address the risks associated with AI agents.
🔗 Resources:
- Original source ↗
- Original source
- SOC 2 and AI agents
- AI agent risks and adaptation needed
🤖 Malware Analysis - Ghidra Basics
Using Ghidra in malware analysis. Manual identification, decryption and fixing of encrypted strings of Vidar Malware sample. A post by Matthew ( @embee_research ). Source: https://embeeresearch.io/ghidra-basics-identifying-and-decoding-encrypted-strings/… ↗
Key Points:
Ghidra in Malware Analysis: Ghidra is used in malware analysis for manual identification, decryption, and fixing of encrypted strings.
Vidar Malware Sample: The Vidar malware sample is used as an example in the post.
Ghidra Basics: The post covers the basics of using Ghidra in malware analysis.
🔗 Resources:
- Original source ↗
- Original source
- Ghidra in malware analysis
- Vidar malware sample and Ghidra basics
🚨 macOS Implant - OpsLoader
1/ New suspicious #macOS implant, and it's currently FUD on VirusTotal, shared by @malwrhunterteam . We're calling it OpsLoader (from its own codesign identifier). It fingerprints your Mac, phones home and blindly executes whatever its operator sends back. Breakdown below
Key Points:
OpsLoader macOS Implant: OpsLoader is a new suspicious macOS implant.
FUD on VirusTotal: OpsLoader is currently FUD on VirusTotal.
Fingerprinting and Phoning Home: OpsLoader fingerprints the Mac and phones home to its operator.
Blind Execution: OpsLoader blindly executes whatever its operator sends back.
🔗 Resources:
- Original source ↗
- Original source
- OpsLoader macOS implant
- Fingerprinting, phoning home, and blind execution
🚀 Security - BSides ATL
Hey Georgia! We're a little over a week away from @bsidesatl and we're so excited to be attending as a proud sponsor. Come see us at our booth and say hello to the team if you'll be there! https://hubs.la/Q04ykB0X0 ↗
Key Points:
BSides ATL: BSides ATL is an upcoming security conference.
Proud Sponsor: TrustedSec is a proud sponsor of the conference.
Booth and Team: The team will be at the booth, and attendees are encouraged to say hello.
🔗 Resources:
- Original source ↗
- Original source
- BSides ATL
- Proud sponsor and booth
