Browse public community intelligence reports, source analysis, and threat research.
4 intel reports
Comprehensive analysis of Active Directory exploitation techniques including NTLM relaying, Kerberos delegation abuse, and AD Certificate Services vulnerabilities.
Affiliates of INC and The Gentlemen ransomware groups are using an AI-orchestrated infrastructure featuring the 'Phantom' autonomous red team framework to exploit edge devices and deploy ransomware.
An unauthenticated remote attacker can execute arbitrary code on Windows domain controllers by exploiting a stack based buffer overflow in the Netlogon service. (CVE-2026-41089)
The MexicanMafia threat actor, also known as PanchoVilla, is conducting a sophisticated campaign using the Kimera reconnaissance engine and custom exploits against perimeter devices in Latin America.
