// FORTIBLEED — CREDENTIAL COMPROMISE ACTIVE — JUN 2026 // CVE-2025-47981 — WINDOWS NEGOEX — CVSS 9.8 // ANGULARJS 1.7.x — CLIENT-SIDE AUTH BYPASS — CLINICAL APPS AT RISK // ENTRA ID PASSKEY ROLLOUT — URL ALLOWLIST ADVISORY PUBLISHED // FORTIBLEED — CREDENTIAL COMPROMISE ACTIVE — JUN 2026 // CVE-2025-47981 — WINDOWS NEGOEX — CVSS 9.8 // ANGULARJS 1.7.x — CLIENT-SIDE AUTH BYPASS — CLINICAL APPS AT RISK // ENTRA ID PASSKEY ROLLOUT — URL ALLOWLIST ADVISORY PUBLISHED

⬡

// adversary simulation · offensive methodology · ttp

Thinking like the
adversary to defend better.

Red team methodology, APT tradecraft, and lessons from both sides of the wire. More useful than most red team content because it connects offensive findings to defensive outcomes.

⬡ 3 posts in this category

Red Team Coming soon

From Red Team Engineer to Director: What Condensed Advancement Actually Looks Like// coming soon

Moving from individual contributor to security director faster than the expected timeline. The struggles, the identity shift, and what I would tell myself at the start.

~10 min ·

Red Team Coming soon

Assumed Breach Methodology: How We Structure Internal Red Team Engagements// coming soon

The assumed breach model forces realistic threat scenarios. How we scope engagements, document findings, and report to stakeholders who are not technical.

~12 min ·

Red Team Coming soon

Lateral Movement in Healthcare Environments: What Makes Clinical Networks Different// coming soon

Healthcare networks have constraints that make standard lateral movement techniques behave differently.

~8 min ·

Thinking like theadversary to defend better.

From Red Team Engineer to Director: What Condensed Advancement Actually Looks Like// coming soon

Assumed Breach Methodology: How We Structure Internal Red Team Engagements// coming soon

Lateral Movement in Healthcare Environments: What Makes Clinical Networks Different// coming soon

Thinking like the
adversary to defend better.