Detecting Certighost attack5 August 2026·4 minsDmitry ShchetininBlueTeam ADCSA user with minimal privileges can gain control over the domain
Attack with Four Remote Access Channels19 February 2026·2 minsDmitry ShchetininBlueTeam Velociraptor VS Code Tunnel Cloudflare Tunnel Zoho AssistAttackers used Velociraptor, VS Code Tunnel, Cloudflare Tunnel, and Zoho Assist
