🎯 Persistence

The items that name it 8

• NIK C2: The new AI-enabled command-and-control framework
  writeup2026-10-29It is written here as Persistence: copy to %appdata%/Roaming/Microsoft/Network, autostart registry entries, watchdog and copywatchdog modes.
• Frequently Asked Questions About the BeyondTrust Remote Support Arbitrary File Upload (CVE-2026-102764)
  advisory2026-10-16

  Attacker set up persistence that survived reboots

• ♫Why♥Not♪ (@Python_s_) on X
  advisory2026-10-09It is written here as Persistence (indicator: gh-token-monitor).

  indicator: gh-token-monitor

• artemy-ccrsky/COM-Jungle
  repo2026-09-23It is written here as Persistence: a normal program later loads an attacker-registered COM class.
• Incident response guide for AWS CloudTrail investigations – Part 1 | Amazon Web Services
  writeup2026-09-03

  Establishing ongoing access, e.g. creating new IAM users or access keys, so access remains even if the original entry point is closed

• XBOW: Legal Boundaries of AI Penetration Testing
  article2026-08-08

  Listed as a prohibited action an AI pentesting agent's scope should exclude

• Introducing GuardDog 3.0: new YARA rules engine, risk scoring, and sandboxing
  article2026-06-26

  Injecting code into standard startup locations such as .bashrc or Windows registry keys so malicious code persists after uninstall or reboot.

• elementalsouls/Claude-BugHunter
  repo2026-05-22It is written here as Persistence (registry, scheduled tasks, WMI events, COM hijacking).

  post-exploit persistence techniques; mentioned as out of scope for this bundle