Attack Paths

Hackers don’t break in, they log in. This has never been more true - as the demand for data increases,…

As enterprises continue to transition on-premises infrastructure and information systems to the cloud, hybrid cloud systems have emerged as a…

NodeZero APT: Azure Password Spray to Business Email Compromise

Since introducing NTLM coercion techniques such as PetitPotam into the NodeZero platform, we frequently have security practitioners request help understanding…

Misconfigured AWS Role Enables Cloud Initial Access

Pervasive CISA Known Exploited Vulnerability Enables Initial Access

A NodeZero autonomous attack that leveraged two weaknesses to achieve domain compromise in 33 minutes, 9 seconds.

Active Directory Analytics Solution Enables Domain Compromise

Combining Compromised Credentials Enables Domain Takeover

Low-Level Vulnerability Leads to Domain Compromise