SpecterOps blog

The SpecterOps blog covers attack path management, red team operations, detection engineering, and the identity security shifts reshaping the modern enterprise, offering deep technical research and adversary tradecraft from the team behind BloodHound.

Filters

All articles & videos

Expanding attack path management to the AI frontier 

AI & Security

Expanding attack path management to the AI frontier 

Attackers don’t move through isolated systems. They move through the relationships between those systems and identities, chaining privileges to move laterally across…

Read More
Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication

Research & Tradecraft

Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication

For years, we thought LDAP and SMB signing protected us from NTLM relay attacks. However, we found that both protocols…

By: Raj Patel

21 mins
ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant 

Research & Tradecraft

ConnectWise SkyKick Breach: How to Check Your Microsoft 365 Tenant 

Last updated October 19, 2026 at 16:45 UTC An attacker used a compromised credential belonging to ConnectWise Cloud Backup (formerly…

By: Justin Kohler, Duane Michael

5 mins
Be the Architect: Intentional AI Engagement for Cybersecurity Engineering

Research & Tradecraft

Be the Architect: Intentional AI Engagement for Cybersecurity Engineering

TL;DR: How SpecterOps combined deliberate human engagement, model routing, and specialized tools to overhaul Ghostwriter’s user interface for $815.50 in…

By: Christopher Maddalena

20 mins
What the 2026 Microsoft Digital Defense Report reveals about AI, identity, and the future of cybersecurity

Industry Insights

What the 2026 Microsoft Digital Defense Report reveals about AI, identity, and the future of cybersecurity

Key Takeaways The recently released 2026 Microsoft Digital Defense Report describes a security landscape shaped by interconnected risk, identity sprawl,…

By: Justin Kohler

9 mins
Introducing Adversary Intelligence: LLM Tradecraft

AI & Security

Introducing Adversary Intelligence: LLM Tradecraft

TL;DR: Adversary Intelligence: LLM Tradecraft is a new on-demand course covering how modern LLMs and agentic systems work, how they…

By: Will Schroeder

7 mins
AI for Offensive Security: What Works, What Does Not, and How to Adopt It 

Research & Tradecraft

AI for Offensive Security: What Works, What Does Not, and How to Adopt It 

Companies frequently ask SpecterOps some version of the same question: How are you using AI in offensive security, and how can we begin using it…

By: Russel Van Tuyl

17 mins
Introducing Ghostwriter Skills

AI & Security

Introducing Ghostwriter Skills

TL;DR: Ghostwriter Skills is a new collection of portable Agent Skills for common Ghostwriter workflows. The initial release includes skills…

By: Christopher Maddalena

8 mins
CiliumHound: Graphing Kubernetes Network Policies

Research & Tradecraft

CiliumHound: Graphing Kubernetes Network Policies

TLDR: CiliumHound is a BloodHound OpenGraph extension for auditing Cilium network policies. It ingests a folder of JSON or YAML…

By: Andrew Luke

10 mins
Ghostwriter v7.3.0: A Fresh New Look

Research & Tradecraft

Ghostwriter v7.3.0: A Fresh New Look

TL;DR: The upcoming Ghostwriter v7.3.0 release brings a major UI refresh to nearly every part of the application. The new…

By: Christopher Maddalena

6 mins

Ready to get started?

See how BloodHound Enterprise eliminates millions of attack paths while focusing your defenses on the routes attackers actually use to reach your critical assets.