| CTO @specterops | Host @dcpthepodcast | Ex PowerShell MVP | USAF Vet | FC Bayern Supporter | Language Learner 🇳🇴 🇮🇹 🇧🇷 |
Las Vegas, NV
Joined July 2013
- Tweets7.2K
- Following1.5K
- Followers10.3K
- Likes8.2K
Pinned Tweet
💡 WHAT IS PURPLE TEAMING AT SPECTEROPS?
SpecterOps recently introduced our Purple Team service offering, but what is it? We define it as "the evaluation of security control efficacy through atomic testing using deliberately selected test cases."
ghst.ly/3EUVRHB
Jared Atkinson retweeted
What do your AWS permissions make possible?
@hotnops and @n0pe_sled join our hosts @jaredcatkinson and @JustinKohler10 to discuss bringing AWS attack paths into BloodHound in the latest episode of #KnowYourAdversary.
🎧: ghst.ly/4gS0KFc
Jared Atkinson retweeted
🔜
Don't miss our webinar TOMORROW!
Hear from @ne0nd0g, @AndrewChiles & @_xpn_ on how AI is reshaping how adversaries operate and what red teams need to evaluate.
➡️ ghst.ly/4r78mqJ
Jared Atkinson retweeted
New #KnowYourAdversary 🚨
Visibility is the foundation of effective exposure mgmt.
Vlad Rotshteyn joins @jaredcatkinson & @JustinKohler10 to discuss prioritizing risk w/ context, Attack Path Management, AI & why security fundamentals still matter.
🎧: ghst.ly/4gS0KFc
Jared Atkinson retweeted
Started digging into ServiceNow at the annual SpecterOps hackathon earlier this year after being intrigued by @__invictus_ 's "Red Teaming with ServiceNow" blog. First post from that deep dive using AJAX functionality to query cleartext discovery secrets specterops.io/blog/2026/08/2…
Jared Atkinson retweeted
An open letter for a global surge in cyber defense, signed by over 100 organizations including Anthropic, AWS, Google, Microsoft, OpenAI, and Oracle.
Attack paths are evolving with cloud, agentic AI, and an expanding web of identities and permissions.
Join @JustinKohler10 & me on Aug. 25 for our discussion around what we’re seeing, why AWS is the next frontier for Attack Path Management, and what AI-driven identities mean for defenders.
Join us: ghst.ly/4h0yWPn
Jared Atkinson retweeted
"Can this role read that bucket?" and "Can it decrypt that key?" aren't the same question.
@n0pe_sled's latest blog post introduces AWSHound, free, self-hosted, turns AWS Orgs into real BloodHound CE attack paths.
Check it out: ghst.ly/4g4EJm9
Jared Atkinson retweeted
Last week I had a nice chat with @merill, where we discussed my recent #BHUSA talk about passkey security and what it meant for Entra admins.
entra.news/p/pass-the-passke…
Jared Atkinson retweeted
CVE-2026-34348 exploitation demo from my #BHUSA "Pass-the-Passkey Family of Attacks" talk: WebAuthn assertion from recent YubiKey authentication is extracted from Windows Event Log and replayed against Microsoft Entra ID using Passkey Injector.
Whitepaper: specterops.io/passkeys
Jared Atkinson retweeted
ConfigManBearPig 2.0 is out, a full Python rewrite built on OpenHound. Faster, runs on Linux, SOCKS proxy support, better BloodHound pathfinding for SCCM attacks.
➡️ ghst.ly/3RGyETm
Catch @_Mayyhem demo-ing it live at #BHUSA Arsenal TOMORROW, Tue 8/4, 5:15pm, Station 6.
Jared Atkinson retweeted
Who can actually assume that role? 🤔
Who can reach your secrets, keys, or data? 🔐
@hotnops explores how BloodHound Enterprise brings the attack path mindset to AWS to answer those questions. ghst.ly/3ToU5ZP
Jared Atkinson retweeted
Your attack surface doesn't stop at AD.
BloodHound Enterprise now supports AWS & Microsoft Entra Agent ID. We're also introducing BloodHound Hunter to bring attack path intel into AI workflows.
Learn more ➡️ ghst.ly/4fZQN7W
Jared Atkinson retweeted
Introducing Tradecraft Academy 📚
Our new on-demand training platform brings the practitioner-led education we are known for to learners anywhere, anytime. Get started with BloodHound Basics today.
Read more: ghst.ly/4ywKLmM
Start learning: ghst.ly/4wBbZqE
Jared Atkinson retweeted
Quick 'n dirty BloodHound ecosystem overview. The different ingestors, collectors, analysis tools.
There might be things missing.
gist.github.com/gitgotgitgot…
ALT Part of the BloodHound ecosytem overview.
Jared Atkinson retweeted
Most orgs think of GitHub as a code platform. Attackers increasingly see it as a gateway to everything connected to it.
@jaredcatkinson joined @riskydotbiz to discuss CI/CD attack paths and why GitHub is often a pivot point into the enterprise.
🎧: ghst.ly/4ezC0zf
Jared Atkinson retweeted
This work is published as part of GhostWorks, an AI-focused engineering and research initiative at SpecterOps, focused on the disciplined exploration of frontier AI-enabled cybersecurity tooling. Read more ⤵️ ghst.ly/4otZ1rJ
Jared Atkinson retweeted
Most prompt engineering still boils down to vibes.
@_xpn_ explores GEPA, a framework for optimizing prompts using eval results, execution traces, & iterative refinement.
Read this practical look at bringing measurable engineering practices to AI agents. ghst.ly/4vGffAp
Jared Atkinson retweeted
Ghostwriter v7 just dropped! 👻
@cmaddalena built the release operators have been asking for, scoped service tokens, opaque API credentials, and non-human automation.
Now you can connect an LLM with read-only tokens without having to hope it behaves. ghst.ly/4o04tm3
Jared Atkinson retweeted
New episode of #KnowYourAdversary! 🚨
@jaredcatkinson & @JustinKohler10 are joined by @0xr0BIT to discuss TaskHound, an open-source BloodHound OpenGraph extension that uncovers credential exposure and attack paths hidden in Windows Scheduled Tasks. ghst.ly/4x4qGmU
Jared Atkinson retweeted
AI and non-human identities are changing identity security.
Join @jaredcatkinson & @JustinKohler10 for a webinar on our latest research into Identity APM adoption, challenges, and operational maturity.
Save your spot: ghst.ly/3QQDhcJ
