XINTRA

Check out my write-up on the AB Projekt Blue lab from XINTRA. In this lab, Scattered Spider leveraged social engineering, cloud-based persistence, credential theft, and covert data exfiltration to carry out a full ransomware extortion campaign. https://lnkd.in/gQaMrn9V

Finally reached the end of the ‘AbuJibal’ challenge with a colleague too shy to be mentioned ;) . Thanks for this high-quality lab @q8fawazo @r3nzsec and XINTRA Lina L. - Now let's go for the next one !

Just finished a new DFIR lab that walks investigators through initial exploitation of a commonly exposed service and how attackers pivot into the network. 🔍 Key techniques covered: • TeamCity exploitation • Malicious drivers • Linux & Windows forensics • DLL hijacking • Golden SAML #DFIR #CyberSecurity #Forensics

The first AI driven APT espionage campaign is here. This Anthropic report is a huge turning point for our industry. It documents the first known AI led espionage campaign by an APT group, running intrusion chains at machine speed and breaching around 30 organisations. Around 80 to 90 percent of the operation was handled autonomously, with humans only stepping in for the final pieces. There were limits still. The AI made mistakes, occasionally hallucinated credentials, and needed human steering for about 10 to 20 percent of the work. But the ceiling is rising fast. This happened in September 2025. It will keep happening. The next era of cyber will be humans defending against machines. Manual detection and manual threat hunting will fall behind. We need AI supported defence and safe environments to understand and train against machine speed threats. https://lnkd.in/djp4Mynr

🚀 🎉 I am thrilled to announce that I have achieved the XINTRA "Attacking and Defending Azure & M365" certification! 🚀 🎉 The XINTRA certification involved an in-depth, where I mastered advanced cloud attack techniques, designed robust defense strategies, and showcased my ability to perform real-world security assessments in Microsoft 365 and Azure environments. 💻 With this certification, I am now equipped to help organizations strengthen their cloud and hybrid security posture by: 🔍 Identifying and remediating critical vulnerabilities from credential enumeration to privilege escalation in Azure AD and M365 🛡️ Implementing advanced threat detection - detecting suspicious sign-in patterns, lateral movement, and unauthorized access attempts 🔐 Securing identity and access management - enforcing conditional access policies, MFA hardening, and anomalous behavior detection 🚨 Developing incident response strategies - simulating real-world cyberattacks to validate detection capabilities and response procedures A special thanks to Lina L. for structuring an exceptional course that seamlessly integrated attack, detection, and mitigation perspectives - an approach that truly made the difference in bridging offensive and defensive knowledge. 🙌 #CloudSecurity #XINTRA #M365 #Azure #Microsoft #AttackandDetect #Mitigate