https://t.co/ANq7Q6k5Xd

SpecterOps reverse engineered Cortex XDR with LLMs to extract YARA rules, ML models, and behavioral detections.

SpecterOps reverse engineered Cortex XDR with LLMs to extract YARA rules, ML models, and behavioral detections.

Using Claude Opus to autonomously generate Mythic C2 agents from prompt to deployment—and what that means for defenders.

Using Claude Opus to autonomously generate Mythic C2 agents from prompt to deployment—and what that means for defenders.

No hype. No guessing. SpecterOps built GhostWorks to test frontier AI tools against real identity security problems and document what actually works.

Stop hoping your prompt edits helped. GEPA uses Genetic-Pareto selection and scored evaluations to prove it. Real code, real results.

Stop hoping your prompt edits helped. GEPA uses Genetic-Pareto selection and scored evaluations to prove it. Real code, real results.

Peel back the layers of Microsoft Dev Tunnels and you'll find embedded protocols, RPC message exchanges, and a full command-and-control architecture hiding in plain sight.

Peel back the layers of Microsoft Dev Tunnels and you'll find embedded protocols, RPC message exchanges, and a full command-and-control architecture hiding in plain sight.

ALT: a clown on a stage in front of a banner that says time to dance

This blog post explores a bug, (CVE-2025-64755), I found while trying to find a command execution primitive within Claude Code to demonstrate the risks of web-hosted MCP to a client.

YouTube video by Talking Heads

ALT: a man in a suit and tie is standing in front of a microphone and saying `` please be true '' .

Meta's Prompt Guard 2 aims to prevent prompt injection. This post looks at how much knowledge of ML we need to be effective at testing these LLM WAFs.

Meta's Prompt Guard 2 aims to prevent prompt injection. This post looks at how much knowledge of ML we need to be effective at testing these LLM WAFs.

ALT: taylor swift is wearing a black off the shoulder top .

YouTube video by Adam Chester

WinRMS relay (@Defte_), plaintext Zip attacks (@pfiatde), SQL Server Crypto deep dive (@_xpn_), FindUnusualSessions (@podalirius_), and more!

A collections of presentations. Contribute to xpn/Presentations development by creating an account on GitHub.

Get the gist for Natural Language Processing (NLP) and how tokenization plays a factor

As part of my role as Service Architect here at SpecterOps, one of the things I’m tasked with is exploring all kinds of technologies to help those on assessments with advancing their engagement. Not l...

How tech companies make money and why it's important