Jared Atkinson

| CTO @specterops | Host @dcpthepodcast | Ex PowerShell MVP | USAF Vet | FC Bayern Supporter | Language Learner 🇳🇴 🇮🇹 🇧🇷 |

[Jared Atkinson @jaredcatkinson]

💡 WHAT IS PURPLE TEAMING AT SPECTEROPS?

SpecterOps recently introduced our Purple Team service offering, but what is it? We define it as "the evaluation of security control efficacy through atomic testing using deliberately selected test cases."

https://t.co/SSwnzSxUGK

[Raj Patel @GrayHatKiller]

1/2

LDAP signing was supposed to stop NTLM relay to LDAP. I found a way to relay coerced SMB auth to a DC with LDAP signing and channel binding enforced.

Patched in October.

Blog: https://t.co/dUHIN6JfaE
PoC: https://t.co/xT98z64V96

[SpecterOps @SpecterOps]

What do your AWS permissions make possible?

@hotnops and @n0pe_sled join our hosts @jaredcatkinson and @JustinKohler10 to discuss bringing AWS attack paths into BloodHound in the latest episode of #KnowYourAdversary.

🎧: https://t.co/jeQcjINGZo

[Jared Atkinson @jaredcatkinson]

@Prince_Tmighty Olise

[Jared Atkinson @jaredcatkinson]

@yekaball Luis Diaz

[SpecterOps @SpecterOps]

🔜

[SpecterOps @SpecterOps]

New #KnowYourAdversary 🚨

Visibility is the foundation of effective exposure mgmt.

Vlad Rotshteyn joins @jaredcatkinson & @JustinKohler10 to discuss prioritizing risk w/ context, Attack Path Management, AI & why security fundamentals still matter.

🎧: https://t.co/jeQcjINGZo

[Matt Creel @Tw1sm]

Started digging into ServiceNow at the annual SpecterOps hackathon earlier this year after being intrigued by @__invictus_ 's "Red Teaming with ServiceNow" blog. First post from that deep dive using AJAX functionality to query cleartext discovery secrets https://t.co/m0T6ooB83M

[Greg Brockman @gdb]

An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle. https://t.co/uKXPS8LdAU

[Jared Atkinson @jaredcatkinson]

Attack paths are evolving with cloud, agentic AI, and an expanding web of identities and permissions.

Join @JustinKohler10 & me on Aug. 25 for our discussion around what we’re seeing, why AWS is the next frontier for Attack Path Management, and what AI-driven identities mean for defenders.

Join us: https://t.co/VuAPzbas7J

[SpecterOps @SpecterOps]

"Can this role read that bucket?" and "Can it decrypt that key?" aren't the same question.

@n0pe_sled's latest blog post introduces AWSHound, free, self-hosted, turns AWS Orgs into real BloodHound CE attack paths.

Check it out: https://t.co/jojzxphhx5

[📔 Michael Grafnetter @MGrafnetter]

Last week I had a nice chat with @merill, where we discussed my recent #BHUSA talk about passkey security and what it meant for Entra admins.
https://t.co/TyTBUg84wJ

[📔 Michael Grafnetter @MGrafnetter]

CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector.
Whitepaper: https://t.co/bp5sriMB5z

[SpecterOps @SpecterOps]

ConfigManBearPig 2.0 is out, a full Python rewrite built on OpenHound. Faster, runs on Linux, SOCKS proxy support, better BloodHound pathfinding for SCCM attacks.

➡️ https://t.co/RC18EuuJqp

Catch @_Mayyhem demo-ing it live at #BHUSA Arsenal TOMORROW, Tue 8/4, 5:15pm, Station 6.

[SpecterOps @SpecterOps]

Who can actually assume that role? 🤔

Who can reach your secrets, keys, or data? 🔐

@hotnops explores how BloodHound Enterprise brings the attack path mindset to AWS to answer those questions. https://t.co/5U8cZggwN5

[SpecterOps @SpecterOps]

Your attack surface doesn't stop at AD.

BloodHound Enterprise now supports AWS & Microsoft Entra Agent ID. We're also introducing BloodHound Hunter to bring attack path intel into AI workflows.

Learn more ➡️ https://t.co/mlrSFFKaLw

[SpecterOps @SpecterOps]

Introducing Tradecraft Academy 📚

Our new on-demand training platform brings the practitioner-led education we are known for to learners anywhere, anytime. Get started with BloodHound Basics today.

Read more: https://t.co/oiKMBrm0dB

Start learning: https://t.co/uV9Zb5WavQ

[🕳 @sekurlsa_pw]

Quick 'n dirty BloodHound ecosystem overview. The different ingestors, collectors, analysis tools.
There might be things missing.
https://t.co/w9UI3Rii7d

[SpecterOps @SpecterOps]

Most orgs think of GitHub as a code platform. Attackers increasingly see it as a gateway to everything connected to it.

@jaredcatkinson joined @riskydotbiz to discuss CI/CD attack paths and why GitHub is often a pivot point into the enterprise.

🎧: https://t.co/ymWe14x937

[SpecterOps @SpecterOps]

This work is published as part of GhostWorks, an AI-focused engineering and research initiative at SpecterOps, focused on the disciplined exploration of frontier AI-enabled cybersecurity tooling. Read more ⤵️ https://t.co/eZtaKGNnAD

[SpecterOps @SpecterOps]

Most prompt engineering still boils down to vibes.

@_xpn_ explores GEPA, a framework for optimizing prompts using eval results, execution traces, & iterative refinement.

Read this practical look at bringing measurable engineering practices to AI agents. https://t.co/7KiZZFA1V9