Why Active Directory Vulnerabilities Demand More Than a Patch

CVE-2026-25177 is a high-severity privilege escalation flaw in Microsoft Active Directory Domain Services that can let an authenticated domain user gain broader access through SPN manipulation and Kerberos abuse. The article stresses that patching is essential, but lasting protection also requires least-privilege governance, consistent policy enforcement, and tighter control of service accounts and non-human identities. #CVE-2026-25177 #MicrosoftActiveDirectoryDomainServices #OneIdentityActiveRoles #RichardLambert

Read More
Fable 5 Export Control Takedown: One Jailbreak, Whole Planet Dark

On June 12, 2026, a US export control directive forced Anthropic to disable Claude Fable 5 and Mythos 5 worldwide after a narrow jailbreak was found that made the models reveal code flaws. The shutdown was driven by deemed-export rules that treat model output shown to a foreign national as an export, making a global off switch the only compliant option. #Anthropic #ClaudeFable5 #Mythos5 #DeemedExport #USCommerce

Read More
Privacy & Cybersecurity #75

EU and UK regulators have introduced or consulted on major updates covering GDPR breach notifications, AI-generated content labeling, consumer IoT, and data intermediary services, while France and Malta issued new guidance on electronic communications and AI governance. In the US, New York advanced rules on surveillance pricing and health information privacy, Colorado enacted conversational AI safety requirements, and Anthropic said a government directive forced suspension of Fable 5 and Mythos 5 access for foreign nationals. #EDPB #GDPR #EUAIAct #CNIL #ICO #MFSA #NewYork #Colorado #Anthropic #Fable5 #Mythos5

Read More
Mythos 5 Restricted by US Government for Being Too Dangerous

The article argues that Mythos represents a real shift in cybersecurity, driven by new AI models that can discover and exploit vulnerabilities at unprecedented speed. It warns that major AI vendors such as OpenAI, Grok, and Chinese AI companies will soon reach similar capabilities, compressing timelines for both defense and offensive exploitation. #Mythos #Anthropic #OpenAI #Grok

Read More
Automated Penetration Testing with Claude AI

This article describes an end-to-end lab penetration test orchestrated through Claude Desktop connected to an MCP Kali Server, where natural-language prompts drove tools like Nmap, sqlmap, Hydra, Metasploit, John the Ripper, WPScan, and NetExec. The attack chain moved from reconnaissance and exploitation to root access, WordPress compromise, and domain administrator credential recovery on a Windows Server 2019 domain controller. #ClaudeDesktop #MCPKaliServer #Metasploit #sqlmap #Hydra #JohnTheRipper #WPScan #NetExec #Samba #WordPress #WindowsServer2019

Read More
Penelope – A Modern Alternative to Netcat for Red Teamers

Penelope is presented as a full post-exploitation framework that managed a complete Windows and Linux engagement, from initial reverse shell access on a Windows Server 2019 Domain Controller to credential dumping, Active Directory abuse, Kerberoasting, and cleanup. The walkthrough also showed pivoting with Ligolo-ng into a hidden subnet, compromising a Linux host, and using Penelope’s built-in listeners, port forwarding, file transfer, and HTTP serving features to control the operation end to end. #Penelope #Ligolo-ng #Meterpreter #Mimikatz #Rubeus #LinPEAS #LSE #LinuxExploitSuggester #winPEAS #GodPotato #PrintSpoofer

Read More
Opus Causes B Zcash Wipeout; B+ in Funding; and 38 Forward CloudSec Talks

The Cybersecurity Pulse highlights major security and AI developments, including Claude Opus 4.8 discovering a critical Zcash Orchard flaw that triggered a massive market wipeout and Anthropic’s release of Claude Fable 5 with classifier-based guardrails. It also covers Salesforce’s SATA triage agent, Datadog’s agent-security launch, and major funding news from Cyera, NinjaOne, Opal Security, Aryon Security, A Security, and Emphere. #ClaudeOpus4.8 #Zcash #Orchard #ClaudeFable5 #Salesforce #SATA #Datadog #Cyera #NinjaOne #OpalSecurity #AryonSecurity #Emphere

Read More
Hacking Salesforce Sites With an LLM Agent

AI-powered agents are now able to autonomously map Salesforce Experience Cloud attack surfaces, identify vulnerabilities, write exploits, and extract sensitive data without human guidance. Reco’s research showed real-world impact on organizations like Aegis Security and Helios, exposing broken access control, SOQL injection, and confidential file access. #AegisSecurity #Helios #SalesforceExperienceCloud #PartnerPortalOnboardingController #BlogDetailController #AuraInspector #Reco

Read More
How Attackers Are Adding AI Voice Cloning to Microsoft Teams Attacks

Microsoft Teams’ default cross-tenant messaging can be abused for helpdesk impersonation attacks that begin with an unsolicited chat and escalate to Quick Assist, malware deployment, and lateral movement. Adding AI-generated voice makes the scam harder to detect, so organizations should restrict external Teams access, lock down Quick Assist and WinRM, and require out-of-band verification. #MicrosoftTeams #QuickAssist #WinRM #Rclone #Arup #AdaptiveSecurity

Read More
Privacy & Cybersecurity #74

ENISA’s latest NIS360 report says EU critical-sector cybersecurity is improving unevenly, while health, ICT service management, public administrations, space, and drinking and waste water remain in the risk zone and face pressure from AI, supply-chain exposure, and geopolitical volatility. North America also saw major policy moves, including Canada’s new AI strategy, the U.S. AI Executive Order, and proposed or enacted privacy and AI laws in Vermont, Louisiana, Connecticut, California, and the draft Great American AI Act. #ENISA #NIS360 #Myndoor #VermontS71 #VermontH211 #CaliforniaSB923 #LouisianaDataPrivacyAct #ConnecticutPublicAct2664 #ConnecticutPublicAct2615 #GreatAmericanAIAct #WhiteHouseAIOrder #CanadaAIforAll

Read More
Agentic AI Attacks Explained: How Autonomous Agents Hack You in 2026 (and How to Stop Them)

Agentic AI attacks hijack autonomous agents by hiding malicious instructions inside ordinary content, turning the agent’s own tools, memory, and permissions into an attack path for exfiltration, misuse, or code execution. The article explains that the core defense is containment through least privilege, sandboxing, human approval for risky actions, and structured logging to detect suspicious agent behavior. #ClaudeCode #GTG-1002 #Anthropic #MCP #OWASP

Read More
AI-Powered Penetration Testing with Metasploit

This article shows an end-to-end agentic penetration test where Claude Desktop, connected to Metasploit through MCP, scans targets, launches exploits, runs post-exploitation, and generates a payload across a lab network. It demonstrates compromise of a Metasploitable 2 Linux host and a Windows Server 2019 Domain Controller, while emphasizing human approval gates, isolated testing, and mitigation guidance. #ClaudeDesktop #Metasploit #MCP #Metasploitable2 #WindowsServer2019 #DomainController

Read More