BloodHound

ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant 

What the 2026 Microsoft Digital Defense Report reveals about AI, identity, and the future of cybersecurity

AI for Offensive Security: What Works, What Does Not, and How to Adopt It 

Introducing Ghostwriter Skills

CiliumHound: Graphing Kubernetes Network Policies

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use

CISA, NSA, global cyber agencies issue guidance to detect and mitigate 17 Active Directory compromise techniques

AI-powered attack exploited PaperCut flaws to hack 395 organizations

Demystifying Agent Tradecraft: Introducing SpecterOps Skills

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Why SpecterOps Signed OpenAI’s Call for Collective Cyber Defense

CISA red team assessments expose critical infrastructure gaps in threat detection, response and OT security

A Tale of Two SOCs: Insights From Two Red Team Assessments

AWSHound: An OpenSource AWS OpenGraph Collector

NoiseHound — Detection-aware BloodHound attack-path scoring - find the quietest route to your objective, calibrated across audit/EDR/SIEM tiers.

ConfigManBearPig 2.0 – Things Are Getting Cereal

MovementHound — PowerShell tool for active minimal-rights lateral movement enumeration, extending BloodHound Legacy

adhammer — Active Directory security-assessment toolkit in Rust — PingCastle-class audit + authorized red-team validation, on a from-scratch DCE/RPC · NTLM · SMB2 · Kerberos stack. One static binary, from Kali or Windows.

Clustered Points of Failure

ForceHound — Salesforce identity and permission graph collector for BloodHound CE. Maps users, profiles, permission sets, roles, groups, sharing rules, connected apps, and field-level security into attack-path graphs.

Introducing Attack Path Management for Entra Agents in BloodHound Enterprise 

Designing an MCP Server for AI Agents: Why Wrapping Your API Is the Wrong Abstraction

Attack Path Management Comes to AWS

Expanding attack path management to the AI frontier 

AgentHound — Offensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for the agentic stack.

RootHound — Map your path from a low-priv shell to root — like BloodHound, for local Linux privesc.

Introducing the SpecterOps Tradecraft Academy

ghosthound — GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumerating deleted objects via SHOW_DELETED, mapping who can restore them, and revealing when a reanimated identity regains privileged group membership.

AD-PathFinder — Attack path mapping for Active Directory, ADCS, SCCM, and MSSQL using BloodHound CE + OpenGraph data.

Why “Least Privilege” Fails in Real Environments