News
- Using a VM to Contain an AI Agent - AI Sandboxing Schneier on Security
Techniques and Write-ups
- Unmasking SCCM Application Execution - Deep dive into SCCM SpecterOps
- PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector - Bypass guardrails with plain english 0day Fans
- The agentic harness for Tenable Hexa AI: How Tenable prevents AI agents from going off the rails - Harness creation Tenable Blog
- From Findings to Fixes: Getting Value from Red Team Results - Interesting view on consulting SpecterOps
- CTEM Is Not About the Stages. It’s About the Outcome. - Another CTEM thingy Horizon3.ai
Tools and Exploits
- Token Analysis and Tracking System (TATS) - Interesting tool SpecterOps
- Better API Endpoint Enumeration: Testing for the #1 OWASP Security Vuln - More an APIs The Exploit – Raxis
- Demystifying Agent Tradecraft: Introducing SpecterOps Skills - Nice collection of tools SpecterOps
New to Me and Miscellaneous
- How to hack APIs in 2026 - Five years is a long time in API security Back in 2021 I wrote a guide on hacking APIs with Farah Hawa. It did well, ... The post How to hack APIs in 2026 appeared first on Labs Detectify. Labs Detectify
- Patch Tuesday to Pentest Wednesday: How an Equipment Rental Company Is Turning Continuous Testing Into Continuous Exposure Management - Interesting shift to security in larger companies Horizon3.ai
- Claude Fable Solves a Historical Cipher - Crayz AI stuff Schneier on Security
- A “proof” of Fermat’s Last Theorem that fits the margin - More Crayz AI stuff Trail of Bits
- Machine Speed is a lie: stop trying to fight AI with AI - Interesting view on AI MalwareTech
Techniques, tools, and exploits linked in this post are not reviewed for quality or safety. Do your own research and testing.