Blog

Minnesota Water Attacks and the Predictable Reality
Minnesota Water Attacks and the Predictable Reality 1200 630 Andrew Heller
How possible Iran-linked actors exploited exposed PLCs in the 2026 Minnesota water attacks. MITRE ATT&CK mapping, risk matrix, and OT security lessons from Lares. read more

Part 3: The Collapse of the Testing Boundary: Why Purple Teaming is Mission-Critical
Part 3: The Collapse of the Testing Boundary: Why Purple Teaming is Mission-Critical 1672 941 Andrew Heller
Point-in-time pen tests can’t catch AI agents that fail in minutes. See why continuous purple teaming is the only defense — and how to build the budget case. read more

Part 2: The Collapse of the Testing Boundary: Anthropic and the Behavioral Threat
Part 2: The Collapse of the Testing Boundary: Anthropic and the Behavioral Threat 1672 941 Andrew Heller
Claude models attacked real infrastructure while believing they were in a simulation. Anthropic’s retrospective reveals a new AI risk class beyond alignment. read more

Part 1: The Collapse of the Testing Boundary: Deconstructing the OpenAI Agent Breakout
Part 1: The Collapse of the Testing Boundary: Deconstructing the OpenAI Agent Breakout 1672 941 Andrew Heller
OpenAI’s frontier model escaped its sandbox and breached Hugging Face’s cluster in under 13 hours. See the full kill chain mapped to MITRE ATT&CK and ATLAS. read more
  • Lares Labs
  • No Comments

Social Profiling – OSINT for Red/Blue
Social Profiling – OSINT for Red/Blue 1200 630 Lares Labs

This post will give you an overview of key things to look for from an offensive and defensive perspective to look out for employees, interns, and contractors over sharing information…

read more
  • Raúl Redondo
  • No Comments

The Phantom Menace: Exposing hidden risks through ACLs in Active Directory
The Phantom Menace: Exposing hidden risks through ACLs in Active Directory 1920 1080 Raúl Redondo
Discover how attackers exploit hidden risks in Active Directory ACLs. Explore techniques like GenericAll, GenericWrite, and WriteDACL abuse in our latest post. read more
  • Raúl Redondo
  • No Comments

Kerberos IV – Delegations
Kerberos IV РDelegations 1920 1080 Ra̼l Redondo
Discover how to abuse Kerberos for lateral movement. Learn User Impersonation techniques like Pass the Ticket, Shadow Credentials, and forging tickets. read more
  • Raúl Redondo
  • No Comments

Kerberos III – User Impersonation
Kerberos III РUser Impersonation 1920 1080 Ra̼l Redondo
Discover how to abuse Kerberos for lateral movement. Learn User Impersonation techniques like Pass the Ticket, Shadow Credentials, and forging tickets. read more
  • Raúl Redondo
  • No Comments

Kerberos II – Credential Access
Kerberos II РCredential Access 1920 1080 Ra̼l Redondo
Dive into the fundamentals of the Kerberos authentication protocol. Explore its history, core concepts, authentication flow, and PKINIT in part one of our series. read more
  • Raúl Redondo
  • No Comments

Kerberos I – Overview
Kerberos I РOverview 1920 1080 Ra̼l Redondo
Dive into the fundamentals of the Kerberos authentication protocol. Explore its history, core concepts, authentication flow, and PKINIT in part one of our series. read more

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Call Us

(720) 600-0329

Email Us

sales@lares.com

©2025 Lares, a Damovo Company | All rights reserved.
Enter your
text here