Pathfinding Labs is a collection of over 100 intentionally vulnerable AWS environments, deployable via Terraform and managed through a Go CLI, enabling red and blue teams to practice privilege escalation and CSPM misconfigurations. It builds on the pathfinding.cloud catalog, provides CTF‑style hints and automated exploit scripts, and helps validate detections and improve cloud security tooling.
Honeyslop is an open‑source collection of decoy code snippets that act as canaries for projects overwhelmed by AI‑hallucinated, unverified vulnerability reports. By embedding these canaries, developers can quickly spot false alerts and reduce noise, improving security triage in the age of large‑language‑model generated findings.
Prempti is an open‑source tool that intercepts every tool call (shell commands, file ops, web fetches, etc.) made by AI coding agents and evaluates them against configurable Falco rules, returning allow, deny, or ask verdicts. It offers real‑time visibility, audit logs, and guardrail or monitor modes, helping developers enforce security policies for AI‑driven code generation.
SpecterOps released TailscaleHound, an OpenGraph collector that feeds Tailscale data into BloodHound. It models users, devices, groups, tags, ACLs, routes, SSH rules and more, letting analysts query and visualise attack paths such as which users can reach a device or use an exit node. This improves visibility of Tailscale‑based access in red‑team assessments.