Skip to content

Company

SpecterOps

Cybersecurity firm specializing in identity and Active Directory security research, known for creating the BloodHound attack-path analysis tool.

Known aliases

  • SpecterOp

Current stories

buildOne report1 publisher

Blacklight's author says saved coding-agent transcripts point intruders at projects and connected systems

SpecterOps' Gavin Kramer, who built the Blacklight toolkit, says coding-agent transcripts expose projects, decisions and connected systems as well as keys. His advice to security teams starts with an inventory and per-role retention, with the caveat that an empty Blacklight report does not show a clean machine.

Reality

Evidence45
Adoption
Not scored
Hype gap0
Incentives35
Confidence55
securityConfirmed3 publishers

CISA reframes the CVE program around data quality as 2026 heads for 96,000 records

Disclosure volume is climbing faster than the process around it. CISA's answer is a framework that describes what a good CVE record is and how the program should be judged on producing one.

Perspective Coverage

3 publishers
Builder
Builder 33%
Operator
Operator 50%
Investor
Investor 17%

Reality

Evidence68
Adoption
Not scored
Hype gap+30
Incentives55
Confidence66
securityOne report1 publisher

Bessent tells the House that AI labs should be liable for what their models generate

Treasury Secretary Scott Bessent told the House Financial Services Committee that frontier labs asking for a liability exemption should instead answer for what they build. The incidents behind that ask started with ordinary control failures.

Publishers:news.risky.biz

Reality

Evidence55
Adoption35
Hype gap+10
Incentives70
Confidence50
buildOne report1 publisher

Criminal AI relays run on the same open-source gateways platform teams deploy for caching

Team Cymru says more than 10,000 proxy servers are masking malicious AI activity out of China, and that most of them run a handful of open-source gateway projects whose donors include residential proxy vendors.

Publishers:news.risky.biz

Reality

Evidence30
Adoption40
Hype gap+15
Incentives55
Confidence35
securityOne report1 publisher

SpecterOps shows malware getting valid passkey assertions out of Windows itself

BleepingComputer counts at least 39 published passkey attack methods. Most of the ones it names need code on the endpoint or control of a sync account first, and that is where the defensive work actually lands.

Reality

Evidence42
Adoption20
Hype gap+38
Incentives78
Confidence45