In the wild of cyberspace, 'Atomics on a Friday' is the El Camino of security testing. Guiding defenders with vital content to safeguard their organizations.
New Mexico
Joined August 2023
- Tweets275
- Following28
- Followers600
- Likes280
Pinned Tweet
🚨 Live on Friday the 13th at 11 AM MST | 1 PM EST 🚨
Next week on Atomics on a Friday, we’re diving into:
🔥 APTs
🔧 Concerns that AI has 🤔
⚛️ Live Atomic Red Team demos
AND MUCH MOAR!
Subscribe, Like and be there!
youtube.com/watch?v=JUmKamrw…
⚛️ WE GO LIVE IN 45 MINUTES.
Today on Atomics on a Friday we’re diving into the Handala threat activity making headlines — the Iran-aligned hacktivist group recently linked to destructive attacks and global disruptions.
No script. No safety rails.
youtube.com/watch?v=QtyeIqJu…
⚛️ Atomics on a Friday is back!
Friday the March 13th:
This week:
🔎 Security Detections MCP 3.0
🚨 Recent threats in the wild
⚛️ Shipping Atomic Red Team tests live
No script. Just hacking, hunting, and detection engineering in the wild.
t📺
youtube.com/watch?v=QtyeIqJu…
AtomicsonaFriday retweeted
🔥 New project drop: Package Inferno
- an open-source tool for deep NPM package analysis + scalable scanning.
Supply chain threats in NPM are still one of the fastest paths to compromise, so I built this to level up my own understanding of the ecosystem and to give the community a solid FOSS option for research + learning.
What it can do:
•🔎 Deep package + version analysis (beyond surface metadata)
•🧠 Flag suspicious patterns / red flags (heuristics + signals)
•📈 Scan at scale + pipeline-friendly workflows
•🕒 Track deltas over time (when behavior changes, new versions, etc.)
⭐️ If it’s useful, a star helps a ton:
github.com/MHaggis/Package-I…
Docs/overview: michaelhaag.org/projects/pac…
AtomicsonaFriday retweeted
🚀 Just shipped my new personal site
I wanted a place to house all my tools, blog posts, and videos. Instead of spending weeks building it myself, I "vibe coded" it with Claude in a single session.
The result: michaelhaag.org/
Tech stack:
⚡ Astro
🎨 TailwindCSS
📝 MDX for content
🔍 Fuse.js for search
🚀 Deployed on Vercel
What's on the site:
🛠️ Arsenal - 25+ open source security tools and projects
📓 Field Notes - 40+ blog posts on detection engineering and threat hunting
📺 Videos - My YouTube content and @AtomicsonaFri episodes
Happy new year! More to come!
AtomicsonaFriday retweeted
Black Friday deal for the defenders:
75% off MagicSword Expert Monthly (up to 100 endpoints, 12 months)
Use Code: THISENDSWITHUS
Expires Dec 5.
Built to catch what EDRs miss: RMM abuse, LOLBins, vulnerable drivers.⚔️
Check it out: bit.ly/4qJo0Ir
AtomicsonaFriday retweeted
🚨 Over 60 exploits during the last 24 hours against the currently unnamed Fortinet FortiWeb CVE!
Subscribe to Defused TF ["ThreatFlix"] to review live intelligence on actors exploiting this vulnerability against our honeypot feeds
console.defusedcyber.com/sig…
AtomicsonaFriday retweeted
Thanks @_JohnHammond for spreading the word about Atomic Red Team MCP! Grateful to have advocates like you and @M_haggis amplifying this tool.
For anyone curious about AI powered security testing, check out the project here:
github.com/cyberbuff/atomic-…
Associated Blogposts:
open.substack.com/pub/cyberb…
open.substack.com/pub/cyberb…
Hat tip, kudos and credit where credit is due to @cyb3rbuff , big thanks for his tool and work on this Atomic Red Team MCP server! cyberbuff.substack.com/p/cla…
AtomicsonaFriday retweeted
💾 November marks 2 years of tracking dozens of kernel drivers - from POORTRY.sys and BlackLotus to Capcom.sys - that still show up in 2025 intrusions. Some in incident reports, some quietly repurposed in the wild.
Thanks to everyone who contributes, tests, or shares intel.
Keep submitting. Keep reviewing. Shared visibility makes a difference.
🔗 Explore & contribute: github.com/magicsword-io/LOL…
#LOLDrivers #LivingOffTheLand #ThreatIntel #OpenSource #poortry #Blacklotus #Capcom
🛡️ In the ancient halls of Active Directory, the hunt begins once more.
We sat down with @HuntressLabs Andrew Schwartz & @TrustedSec Megan Nilsen to explore AD attacks, detections, & defenses.
Watch: youtube.com/watch?v=WIkAYtdt…
AtomicsonaFriday retweeted
🧩 The NPM Threat Emulation suite just leveled up.
Now with cross-platform coverage for Windows + Linux/macOS lifecycle hooks - safely emulating malicious npm behaviors for real detection testing.
⚛️ Hunt Smarter, Hunt Harder!
github.com/MHaggis/NPM-Threa…
🧩 The NPM Threat Emulation suite just leveled up.
Now with cross-platform coverage for Windows + Linux/macOS lifecycle hooks - safely emulating malicious npm behaviors for real detection testing.
⚛️ Hunt Smarter, Hunt Harder!
github.com/MHaggis/NPM-Threa…
🎉 Huge thanks to everyone following Atomics on a Friday!
We’ve hit the threshold to stream directly to LinkedIn - just in time for our next episode, dropping the Friday before Thanksgiving. 🦃⚛️
Appreciate all the support — you made this happen. 💀
linkedin.com/company/atomics…
⚛️ The Atomic Red Team MCP is ALIVE.
On our latest Atomics on a Friday, we showed how @cyb3rbuff 's MCP automates atomic testing across hosts & streams results straight into Splunk.
Think Frankenstein’s lab… but for adversary emulation. 💀
youtube.com/watch?v=nSuCkEFH…
AtomicsonaFriday retweeted
Atomics on a Friday || Night of the Living Indicators 🧟 nitter.gq/i/broadcasts/1YpJkkAQL…
🎃 Going live in 30 minutes!
Atomics on a Friday: Night of the Living Indicators - join us for live emulations, haunted artifacts, and MCP mayhem.
See you there… or on the recording. 👻⚛️
Twitch: twitch.tv/atomicsonafriday
X
Linkedin
YT: youtube.com/watch?v=nSuCkEFH…
AtomicsonaFriday retweeted
🚀 Just released the Atomic Red Team MCP Server!
Brings 1500+ atomic tests directly into AI assistants like Claude. Search, create & validate security tests with natural language.
✨ "Show me all mimikatz tests"
✨ "Create atomic test for Chrome credential extraction"
✨ "Generate tests from this threat intel report"
Repo: github.com/cyberbuff/atomic-…
🔴 @M_haggis is demoing it on YouTube today at 1 PM EST!
📖 Read the full story to learn more about the MCP: "Claude becomes the APT"
open.substack.com/pub/cyberb…
#atomicredteam #mcp #adversaryemulation
Special thanks to @OrOneEqualsOne and @M_haggis for beta testing and invaluable feedback!
🧪 Deep in the lab, something modular is stirring...
This Friday, on Atomics on a Friday,
we’re unleashing @cyb3rbuff Atomic Red Team MCP 💥
Think of it as the Frankenstein’s lab of atomic testing - built for automation, precision, and chaos.
youtube.com/watch?v=nSuCkEFH…
🎃 Tomorrow - Night of The Living Indicators 🎃
⚛️Twitch, X, YT, Linkedin - Live📺
Follow + Subscribe
youtube.com/watch?v=nSuCkEFH…
🧪 Deep in the lab, something modular is stirring...
This Friday, on Atomics on a Friday,
we’re unleashing @cyb3rbuff Atomic Red Team MCP 💥
Think of it as the Frankenstein’s lab of atomic testing - built for automation, precision, and chaos.
youtube.com/watch?v=nSuCkEFH…
🎃 This Friday... something wicked logs in.
We’re teaming up with the brilliant minds at @DefusedCyber for our Halloween special 💀
We’ll resurrect real-world threats, view them live, and hunt their artifacts.
youtube.com/watch?v=nSuCkEFH…