SpecterOps @SpecterOps
Creators of BloodHound | Experts in Adversary Tradecraft | Leaders in Identity Attack Path Management specterops.io Joined January 2017-
Tweets4K
-
Followers42K
-
Following403
-
Likes2K
Identify paths from the impacted service principal to Tier Zero. MATCH p=shortestPath((sp:AZServicePrincipal)-[*1..6]->(t)) WHERE toLower(sp.appownerorganizationid) = ‘3f9cd7a0-127a-4ed4-bf06-2f830d5616b7’ AND t.system_tags CONTAINS ‘admin_tier_0’
BloodHound users may run the below queries to identify potential impact to their environs. Identify outbound control of ConnectWise app: MATCH p=(sp:AZServicePrincipal)-[r]->(target) WHERE toLower(sp.appownerorganizationid) = ‘3f9cd7a0-127a-4ed4-bf06-2f830d5616b7’ RETURN p
PSA for Microsoft 365 admins: Huntress has reported a widespread security incident involving ConnectWise Cloud Backup (formerly SkyKick). A threat actor used a vendor credential to sign in as the SkyKick app and reach customer M365 tenants. 🧵1/4
RAPID RESPONSE: Huntress has become aware of a widespread security incident involving ConnectWise Cloud Backup (formerly SkyKick). We’ve confirmed that an unknown threat actor abused the access they obtained in SkyKick to pivot to access customers' Microsoft 365 environments. 🧵
This new view also includes updates to the underlying API which now tracks history of findings & remediations. Filtering & sorting the columns now provides a way to track progress over time, giving you insight into when a finding first appeared & when it was last seen. (3/3)
Certain fields (Platform, Attack Paths, Environment) can be searched to filter the view to specific findings. (2/3)
This week's #BloodHoundBasics courtesy of Carlo Alcantara: Table View! Because sometimes defenders think in lists. The new table view accompanies the Graph View on the Attack Paths page in BloodHound Enterprise. (1/3)
I will be @BSidesNYC tomorrow at the @SpecterOps booth! Come talk to us and if you are wearing a #SpecterOps or #BloodHound t-shirt, I might have something special for you (very limited). See you tomorrow! :)
“We have to assume that it will take us some time to patch.” Sahan Fernando, CISO at @radychildrens, discusses balancing security remediation with patient care in the latest episode of #KnowYourAdversary. 👀: ghst.ly/4zvoVQ1
One more day to haunt a graph. 👻 Our OpenGraph Halloween Art Competition closes TOMORROW, Oct 16. Pumpkins, skeletons, or something completely cursed. No masterpiece required. Email [email protected] Subject: OpenGraph Halloween Art Competition
Intentional AI use means setting the direction, choosing models for the task and verifying results. @cmaddalena put it to work on Ghostwriter’s 99-screen UI overhaul for $815.50 in model spend. You’re still the architect. Read more ⤵️ ghst.ly/4yoTCph
Your graph could use a few ghosts. 👻 Our OpenGraph Halloween Art Competition closes Friday, Oct 16. Get weird with it for a chance to win our swag, including a desk mat. 📧 [email protected] Subject: OpenGraph Halloween Art Competition
How do AWS permissions combine into attack paths? @hotnops and @n0pe_sled discuss mapping relationships across accounts on #KnowYourAdversary. 👀: ghst.ly/4gS0KFc
We’re back with another SO:Brief, this time exploring AWSHound. @ScoubiMtl & @n0pe_sled explore how individual AWS permissions can connect into attack paths and how AWSHound brings those relationships into BloodHound.
Happy #BloodHoundBasics from @martinsohndk! 🙌 In RBAC you grant permissions to groups - not individuals. A must-have design in AD. You can easily audit RBAC violations with the BloodHound query 'Principals With Direct Rights Assignment': ghst.ly/4hDNp3N
AI agents add identities. AI helps attackers find existing paths faster. Our Chief Product Officer @JustinKohler10 explores what the 2026 Microsoft Digital Defense Report means for identity risk and Attack Path Management. Read his analysis ⤵️ ghst.ly/4AWdGlh
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Florian Hansemann @CyberWarship
90K Followers 46 Following Father, Founder @HanseSecure, Pentesting, Student, ExploitDev, Redteaming, InfoSec & CyberCyber; -- Mastodon: https://t.co/KFSKYUN98M
ippsec @ippsec
125K Followers 372 Following
Vincent Yiu @vysecurity
32K Followers 414 Following Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Mike Felch (Stay Read... @ustayready
18K Followers 2K Following Offensive @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | Fighter for truth | K1HAQ | RE/VR/ED
rootsecdev @rootsecdev
27K Followers 1K Following Senior Security Consultant @TrustedSec | Military grade meme poster, researcher, cloud penetration tester, voider of warranties. My thoughts are my own.
Oliver Lyak @ly4k_
9K Followers 268 Following Yet another security researcher 🔦 Github: https://t.co/7WFOFz17KI
Mick Douglas 🇺🇦... @bettersafetynet
33K Followers 575 Following Consultant for InfoSec Innovations | @SANSInstitute Principal Instructor | @IANS_Security Faculty | I like information security. How about you?
Stephan Berger @malmoeb
30K Followers 1K Following Head of Investigations @InfoGuardAG https://t.co/A5lnFAu7eX
Josh @passthehashbrwn
10K Followers 294 Following Adversarial Simulation at IBM, tweets are mine etc.
mgeeky | Mariusz Bana... @mariuszbit
15K Followers 1K Following 🔴 Offensive Security Developer @ Outflank, Red Team operator, ex-AV dev, ex- malware researcher 🫖 Green tea lover
sn🥶vvcr💥sh @snovvcrash
12K Followers 492 Following Sr. Penetration Tester / Red Team Operator @ptswarm :: Author of the Pentester’s Promiscuous Notebook :: He/him :: Tweets’re my pwn 🐣
mpgn @mpgn_x64
19K Followers 237 Following Flibustier du net ̿ ̿̿'̿'\̵͇̿̿\=(•̪●)=/̵͇̿̿/'̿̿ ̿ ̿ ̿ Podcast Hack'n Speak @hacknspeak / https://t.co/GyACSFg9mw
Jean @Jean_Maes_1994
12K Followers 1K Following @sansoffensive Certified instructor/SEC565 author/SEC699 co author https://t.co/cp5DerI3g4
n00py @n00py1
14K Followers 966 Following Retweeter of InfoSec/Offsec/Pentest/Red Team. Occasional blogger/Independent security research.
Drogba @ygp78m2yhc
2 Followers 29 Following
May. @cybseh
111 Followers 1K Following
dhfikffb @dhfikffb
19 Followers 2K Following
NikoA @ajakovaa
78 Followers 555 Following
Rohit Raut @RohitRaut572036
0 Followers 134 Following
KXS @KXSDroid
5 Followers 344 Following
Al Kawsar | Incident ... @AlKawsar8jj
2 Followers 18 Following specialist Detection & Response| Novartis| Prague CZ
go joy @gojoy14
10 Followers 151 Following
Cyber_Fish 🐡 @shepper50
32 Followers 251 Following
cybersec barbie @itscyberbarbie
40 Followers 564 Following Cyber Security. Automation. Crying. Photographer. Shitty drone pilot.
Rohit Warghade @Roowarghade
0 Followers 79 Following Cyber Threat Intel | Football. Cricket. OSINT. Repeat.
fuitededonnées.fr @fuitededonnees
1 Followers 189 Following Toutes les fuites de données et cyberattaques en France 🇫🇷 et en Belgique 🇧🇪, en temps réel. Alertes, base des fuites et conseils pour vous protéger.
Cole Pezzi @colepezzi
4 Followers 27 Following
Nicolas @Nicolas39361318
219 Followers 6K Following
Xfcdmp @Xfcdmp
0 Followers 55 Following
Carlo e @Carloem4p1
0 Followers 110 Following
SaiTeja @crysis939386
547 Followers 5K Following Cloud security architect, 13+ yrs. Detection engineering, DFIR, AI security. I post what defenders should check today, with sources. No vendor slides.
Tom Jerry @TomJerry45a
0 Followers 4K Following
jameshoneycutt.net @P0w3rChi3f
241 Followers 215 Following Using my skills and knowledge to help others break into the industry by teaching at colleges and presenting at conferences and PowerShell enthusiast.
blazingcactus31 @blazingcactus31
0 Followers 347 Following
Emmanuel Nubi @theSOJOURNER__
0 Followers 16 Following Cybersecurity student | Aspiring Network/Infrastructure Penetration Tester | Active Directory | Security awareness for everyday users
tank_tg @tg_snk
6 Followers 140 Following
Tachicoma @tachicomecha
12 Followers 185 Following
Pro Enter @proenter01
0 Followers 16 Following Ahmed | ProEnter 💻 Software Engineer & Quantitative Backtester 📊 Tech, Automation & Trading Systems ⚙️ Building & testing tech projects behind the scenes 🚀
Breach Wire @breach_wire_
0 Followers 43 Following Breach post-mortems, and my own offsec work — documented as I do it.
MrT3ln3t @_MrT3ln3t_
1 Followers 24 Following
Xyrt @qbk1234560
0 Followers 81 Following
Javi GR @jvx_LaGaR
52 Followers 3K Following Soy un tipo de pocas palabras... (en lo que a twittear respecta)
suyttt @suyttt181960
0 Followers 234 Following
🎤Yogesh🎸 @YogeshBang
1K Followers 6K Following Interests in Technology (IETF contributor for RFC 7230 of HTTP/1.1, Moderator@Lidnug ), Economics, Finance, Books, Cosmology, Zen Meditation
UK @Tedbroilure
131 Followers 267 Following サイバーな方のへっぽこセキュリティアナリスト。趣味は、昔はEDF、今はジョギング、フットサル。株は勉強中(一生)
PayerProud @PayerProudqm
0 Followers 44 Following
hunter @hunter23261499
0 Followers 188 Following
Ashland Wilson @ashlandwilson
9 Followers 166 Following What happened, happened, and couldn't of happened any other way...
Luiz Gabriel @gabc4ber
109 Followers 2K Following
Mary Anderson @MaryAnders57041
12 Followers 490 Following
贺 @lia077290094209
2 Followers 84 Following
NothingToSeeHere @Curbo87
8 Followers 101 Following
Norahc @charon876
5 Followers 90 Following
yoyobobo @seeduloklh
1 Followers 46 Following
Lou @loucalhost
5 Followers 52 Following
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Dave Kennedy @HackingDave
233K Followers 6K Following Founder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Florian Hansemann @CyberWarship
90K Followers 46 Following Father, Founder @HanseSecure, Pentesting, Student, ExploitDev, Redteaming, InfoSec & CyberCyber; -- Mastodon: https://t.co/KFSKYUN98M
Adam Chester 🏴�... @_xpn_
40K Followers 560 Following TRACE at @SpecterOps | Blog at https://t.co/tjfTOllCEu
Vincent Yiu @vysecurity
32K Followers 414 Following Director of Red Team, Offensive Security, Agentic Super Intelligence. Helping organizations safeguard their businesses from the bad guys.
Mike Felch (Stay Read... @ustayready
18K Followers 2K Following Offensive @ TrustedSec | Hacking since Renegade BBS backdoors | Prior CrowdStrike/BHIS | In Christ's grip | Fighter for truth | K1HAQ | RE/VR/ED
Dirk-jan @_dirkjan
30K Followers 208 Following Hacker at @OutsiderSec. Researches AD and Azure (AD) security. Likes to play around with Python and write tools that make work easier.
mgeeky | Mariusz Bana... @mariuszbit
15K Followers 1K Following 🔴 Offensive Security Developer @ Outflank, Red Team operator, ex-AV dev, ex- malware researcher 🫖 Green tea lover
Jean @Jean_Maes_1994
12K Followers 1K Following @sansoffensive Certified instructor/SEC565 author/SEC699 co author https://t.co/cp5DerI3g4
b33f | 🇺🇦✊ @FuzzySec
34K Followers 1K Following 意志 / mobile research @ ▓▓▓▓▓ / Team 501 / ex IBM Capability Lead & FireEye TORE / I rewrite pointers and read memory / AI Psychoanalyst / BHUSA Review Board
🥝🏳️🌈 Be... @gentilkiwi
63K Followers 298 Following A kiwi coding mimikatz & kekeo github: https://t.co/eS3LVgU6i0 Head of security services @banquedefrance Tweets are my own and not the views of my employer
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
SANS DFIR @sansforensics
112K Followers 104 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
strandjs - strandjs@b... @strandjs
46K Followers 2K Following I will light the way by the bridges I burn. Retired Senior SANS Instructor IANS Faculty Black Hills Information Security Active Countermeasures
Dominic Chell 👻 @domchell
18K Followers 559 Following Just your friendly neighbourhood red teamer @MDSecLabs @nighthawk_c2 | Creator of /r/redteamsec | https://t.co/3k3EBAZqGd | https://t.co/KwO2OwDOkl
Marcello @byt3bl33d3r
30K Followers 1K Following CyBeRsEcUrItY | Not afraid to put down with some THICC malware on disk | AI Research @PaloAltoNtwks | former purple team | Ex @spacex
Neeraj Gupta @gneeraj97
18 Followers 92 Following Applied AI/ML • AI Agents • Researcher • IIT Kanpur
BSides Aarhus @BSidesAarhus
139 Followers 137 Following Follow this account for updates on future BSides Aarhus conferences.
PERMPOON @permpoon_GMMTV
303K Followers 36 Following Call:(+66)61-414-4046 Line OA: @gmmtvartists_work Email: [email protected]
jd @c0kernel
143 Followers 383 Following Interested in books, mathematics, running, rock climbing, and infosec.
Rémi GASCOU (Podalir... @podalirius_
8K Followers 750 Following Senior Security Researcher @SpecterOps | 5 x Microsoft MVP | Creator of opensource security tools 🎬 https://t.co/QaAENc5l2w | Views are my own
Valdemar Carøe @bytewreck
641 Followers 6 Following Security Researcher at @SpecterOps. CTF with @cor_ctf.
📔 Michael Grafnett... @MGrafnetter
4K Followers 143 Following Principal Security Researcher @SpecterOps, Microsoft MVP Identity & Access + Enterprise & Platform Security
Burning River Cyber C... @BurningRiverCon
47 Followers 17 Following Cleveland's Newest Hacking Conference | Nov 14 2026
Blaise @BlaiseBrignac
415 Followers 153 Following Left the USB, took the cannoli. Hacker shenanigans 8-11pm CST, Sat-Thurs @ https://t.co/vrcdljAdDj
Munich Cyber Tactics,... @MCTTP_Con
604 Followers 3 Following 4th edition of our awesome con will happen, save the date 16-18th of september 2026 #mcttp
Alex @RonJonArod
289 Followers 329 Following Adversary Simulation Consultant for @SpecterOps Really enjoy containers, automation, & linux 🐧🤓 https://t.co/iyNGSJgZ8t
Dave Cossa @G0ldenGunSec
2K Followers 266 Following Adversary Simulation and Research / Frequent reader of the first page of Google results / Occasional reader of the second page of Google results
George V. Hulme @georgevhulme
14K Followers 4K Following Covering enterprise cybersecurity, risk & IT for 20+ yrs | Contributor: Dark Reading, CYBRSECMedia, DigitalCXO | Past: CSO Online, InformationWeek, TechTarget
turbo @turbo_sec
130 Followers 909 Following
Scoubi @ScoubiMtl
3K Followers 263 Following All Things BloodHound | InfoSec, Threat Hunting, Detection Engineering, DFIR and some personal stuff.
Hugo @HugovdToorn
199 Followers 620 Following Former-CISO, Red Teamer | Hacking | TechnicalFluff @ SpecterOps | My opinion, no one else's.
CactusCon @CactusCon
4K Followers 92 Following Arizona's hacker con. CactusCon 14: Feb 6 & 7 2026 in beautiful Mesa, AZ. https://t.co/29lnaRVQy9 + LinkedIn, Bluesky, Mastodon
REcon @reconmtl
18K Followers 709 Following REcon: Annual reverse engineering and security conference held in Montreal.
OpenAI @OpenAI
5.4M Followers 4 Following OpenAI’s mission is to ensure that artificial general intelligence benefits all of humanity. We’re hiring: https://t.co/dJGr6LgzPA
Insight Partners @insightpartners
19K Followers 1K Following With 900+ investments and 30 years of experience, Insight Partners is a trusted partner in software. Scale up, Take off.
Ansa @ansacapital
382 Followers 71 Following Ansa is a venture capital firm focused on creating a new model for founders: equal, aligned, and relentless. We make investments in Series A-C companies.
M12 - Microsoft's Ven... @M12vc
12K Followers 312 Following Our mission is to accelerate the future of technology through investments, insights, and meaningful partnership with Microsoft.
Cisco Investments @Cisco_Invests
3K Followers 296 Following Cisco Investments is the corporate development and venture capital arm of Cisco, investing in enterprise technology Series A and beyond.
SecurityInfoWatch @SecInfoWatch
18K Followers 392 Following Featuring targeted security news & information for end-users, executives, vendors, integrators & more. Updates by Rodney Bosch, Samantha Schober & Paul Rothman.
ChannelE2E @ChannelE2E
4K Followers 377 Following Where security-minded MSPs maximize business valuations & mitigate risk -- from Entrepreneur to Exit (E2E). From CyberRisk Alliance.
CCob🏴�... @_EthicalChaos_
10K Followers 436 Following Ceri Coburn: Hacker | R̷u̷n̷n̷e̷r̷ DIYer| Vizsla Fanboy and a Little Welsh Bull apparently 🏴 Author of poorly coded tools: https://t.co/P6tT2qQksC
Leo Tsaousis @LAripping
652 Followers 686 Following Senior Security Consultant @ Reversec (fka @withconsulting / MWR). Talks mostly about security. As Rino put it, sometimes maybe good sometimes maybe shit
Bad Sector Labs @badsectorlabs
9K Followers 529 Following Cybersecurity news, techniques, exploits, and tools every week at https://t.co/UgKmeEEjIV 🐘 @[email protected]
Greg Otto @gregotto
7K Followers 3K Following Doing the professional thing over at @gregotto.bsky.social. Bad Philly sports tweets otherwise. You're welcome/I'm sorry.
CyberScoop @CyberScoopNews
23K Followers 1K Following CyberScoop, a @ScoopNewsGroup property, reports on news and events impacting technology and security.
Center for Internet S... @CISecurity
43K Followers 2K Following CIS makes the connected world a safer place for people, businesses, and governments through our core competencies of collaboration and innovation.
Security Boulevard @securityblvd
7K Followers 2K Following The primary destination for leading cybersecurity news and discourse. Powered by @TechstrongGroup.
Forrest Kasler @FKasler
553 Followers 398 Following Climber, Penetration Tester, Code Junkie, Malware Enthusiast @specterops
Tom Degreef @TomDegreef
863 Followers 132 Following CoFounder @AppControlAI | Making application allowlisting simple & scalable | Helping orgs stop malware at the source instead of chasing signatures | Zero-trust
Kim Oppalfens (MVP) �... @TheWMIGuy
5K Followers 227 Following “Non-limited code execution will almost certainly result in full system compromise over time.” #WDAC. 20 years of MVP citizenship. https://t.co/wINqHIDUc0 founder.
Blue Team Con @BlueTeamCon
11K Followers 7 Following Blue Team Con is an annual cybersecurity conference built for defenders, inclusive of anyone interested in safeguarding organizations. | Stay Tuned on 2027!
Kay Daskalakis @KayDaskalakis
97 Followers 290 Following 🛡️ Visually helping to spread the message #DefenceInDepth starts with #Identity @SpecterOps - Tweets, satire and harmless opinions are my own.
Zach Stein @synzack21
705 Followers 411 Following Red Teamer | Penetration Tester | AD Nerd | Adversary Simulation @SpecterOps
eChannelNews @eChannelNews
850 Followers 727 Following https://t.co/Pr6O882zPz is a news publisher focusing on the IT reseller channel.
werdhaihai @werdhaihai
624 Followers 484 Following Principal Capability Researcher @armadinsecurity https://t.co/pztdK7udq3
CompuNet @Compunetbiz
459 Followers 245 Following While we know perfection is hard to achieve, we always have it in our sights. Every day we work to improve and grow our IT solutions. Can you keep up?
@guidepointsec @GuidePointSec
3K Followers 490 Following GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make informed decisions and minimize risk.




















