Do Son AdaptixC2, a new open-source hacking tool, is being abused by threat actors. The stealthy framework has been used in attacks, with some loaders likely AI-generated.
Red Team
Mandiant Red Team breached Aviatrix Controller via auth bypass & RCE flaws CVE-2025-2171/2172—reached root, gained AWS keys. Full chain, no guesswork.
Water Curse is using GitHub to distribute malicious open-source projects, weaponizing 76 accounts with multi-stage malware targeting developers, red teamers, and gamers.
Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory
Weaponizing Group Policy: Custom Client-Side Extensions as a Stealthy Backdoor into Active Directory
A new, stealthy AD persistence technique abuses custom Group Policy Client-Side Extensions (CSEs) for SYSTEM-level access. Learn how to detect it!