Bishop Fox
A leading provider of #offensivesecurity solutions & contributor to the #infosec community. #pentesting #hacking
- At Bishop Fox, we know that good coffee can fuel great conversations. That’s why we’re proud to sponsor the Coffee/Espresso Bar at #BSidesNOLA on May 13. If you’re attending, have a cup on us. ☕️ Get your ticket while they last: https//nolabsides....
- Tomorrow at GISEC Global: Senior Security Consultant Brandon Kovacs is presenting “Attacking & Defending Deepfakes: A Red Teamer's Perspective.” Don’t miss if you’re in Dubai. #redteam #deepfakes More: bfx.social/43eA8aq
- How do you really measure the value of an #ASM solution? On May 7, Bishop Fox and @gigaom.com.web.brid.gy cut through the buzz to share what matters, from ROI to real-world threats. Join experts from #Cosmos, TEA, ASI, and GigaOm to sharpen your strategy. Save a seat: bishopfox.com/resources/as...
- We’re hosting a live Discord workshop on Sliver, our open-source C2 for Red Teams. Sr. Red Teamer Tim Makram Ghatas will cover how listeners, beacons, and sessions work, how Sliver hides gRPC traffic, and what’s new in 1.6. Save your spot: discord.gg/ANytASyDFr?e... #SliverC2 #RedTeam #offsec
- A #SonicWall SSL VPN vuln. A deep dive with the engineer who found it. And insights you won’t find anywhere else. This client-exclusive Bishop Fox briefing covers discovery, impact, and mitigation — with a live Q&A. www.linkedin.com/events/techn...
- Today’s the day! #GITEXAsia kicks off in Singapore. Catch Brandon Kovacs' presenting Cyber Mirage, including a live #deepfake demo making its regional debut. Learn how #AI deception is evolving and how to stay ahead. bfx.social/4ixCgib
- Our live Discord workshop on Sliver C2 is happening May 8. Learn how it handles listeners, gRPC traffic, and what’s new in 1.6. Save your spot: discord.gg/ANytASyDFr?e... #RedTeam #SliverC2 #offsec #C2Framework
- Reposted by Bishop Fox[Not loaded yet]
- AI is changing the game for attackers and defenders. @theoradical.bsky.social joins a @darkreading.bsky.social panel to talk #deepfakes, agentic #AI, and what security teams need to do next. Watch the full interview: bishopfox.com/resources/da...
- Deidre Diamond and Juliet Okafor are two women in cybersecurity who are changing the conversation. This is a must-watch for anyone thinking about what it means to build something bold in this space. Hosted by our own Christie Terrill. cybersn.com/cyber-resour...
- Senior Security Consultant Brandon Kovacs is bringing his live demo to #GITEX Asia in Singapore for the first time! “Cyber Mirage” explores how AI is reshaping deception—and what it means for security. bishopfox.com/events/brand...
- We’re live! Join @alethe.bsky.social now for Epic Fails & Heist Tales—a webcast packed with Red Team stories, lessons learned, and moments that didn’t go according to plan (and what came from it). Watch live: bishopfox.com/resources/re...
- 👑 #BloodHound(dot)py takes the crown! Your 2025 Ultimate Red Team Tool has been decided. After a stacked bracket and six rounds of voting, AD mapping reigns supreme. Shoutout to #AzureHound for a strong finals run—and everyone who showed up to vote. #cybersecurity #redteam
- Join @alethe.bsky.social for a behind-the-scenes look at real #RedTeam ops: successes, failures, and the lessons that could level up your security game. #cybersecurity bishopfox.com/resources/re...
- Reposted by Bishop Fox[Not loaded yet]
- The #FinalFour are here. From 32 tools to just 4 contenders—our Ultimate #RedTeam Tool Showdown is down to the best of the best. • Sliver vs BloodHound.py • AzureHound vs Scapy Cast your vote and help crown the champion! Voting is live now: bishopfox.com/redteam-tool...
- New report reveals a surge in third-party breaches across industries — with nearly 1 in 3 breaches tied to vendors. Retail, tech, and energy sectors were hit hardest. #cybersecurity #riskmanagement siliconangle.com/2025/03/26/s...
- Rust is gaining traction in malware development—offering evasion advantages over C. Security Consultant Nick Cerne breaks down why, compares reverse engineering challenges, and builds a Rust-based dropper to stage Sliver. bishopfox.com/blog/rust-fo...
- The top Red Team tools are battling for a spot in the Final Four. Who moves on? You decide. • Sliver vs. Metasploit • BloodHound vs. GhostPack • AzureHound vs. MicroBurst • Scapy vs. EvilGinx Voting is live through Monday! bishopfox.com/redteam-tool...
- Reposted by Bishop Fox[Not loaded yet]
- Tomcat CVE-2025-24813: What You Need to Know A lot of noise is swirling around this Apache Tomcat RCE chain—but should you be worried? Our security researcher Jon Williams breaks it down. Subscribe to our blog for all the latest updates: bishopfox.com/blog
- Keeping up with vulnerabilities shouldn’t slow you down. With Cosmos now integrated with Jira, security teams can automatically sync exposures, reduce manual tracking, and keep remediation moving—without the extra hassle. #AttackSurfaceManagement #ASM Less friction, faster fixes. See how it works:
- The first round is in the books and the 2025 Ultimate Red Team Tool Showdown is heating up! We’re down to our "Sweet 16" tools, the top 4 from each division. Only 8 will advance—who makes the cut? Cast your vote now and decide who moves on. bishopfox.com/redteam-tool...
- Join Principal Researcher @theoradical.bsky.social for a @darkreading.bsky.social panel on “The Promise and Perils of AI.” Learn: • How attackers are using #AI • AI’s role in #DevSecOps and #SecOps • Strategies for security teams March 20, 2025 2:35-3:20 p.m. ET bishopfox.com/events/rob-r...
- 🚨 The 2025 Ultimate Red Team Tool Showdown is here! 🚨 We’re putting the top offensive security tools head-to-head, but only ONE will take the crown. And it’s all up to YOU! Check out the full bracket & cast your votes: bishopfox.com/redteam-tool...
- Vulnerability management just got smoother. Cosmos now integrates with #Jira! 🔹 Auto-create structured tickets 🔹 Get real-time alerts 🔹 Secure authentication Faster remediation, better workflows, and more automation for security teams. Learn more: bishopfox.com/news/bishop-...
- Missed our live webcast? No worries—it’s now available on demand! Red Team Practice Director Trevin Edgeworth covers when (and when NOT) to #RedTeam, must-have security practices, and whether to build or buy your Red Team program. bishopfox.com/resources/re...
- Traditional security models often focus on individual vulnerabilities, but attack graphs provide a big-picture view, showing how weaknesses can be chained together to create real-world attack paths. From @thehackernews.bsky.social thehackernews.com/2025/03/outs...
- We’re excited to officially welcome Christopher Martin as our new COO! With a track record of scaling startups into multi-billion-dollar companies while keeping culture and quality at the forefront, he’s already making an impact. Welcome to the #FoxDen! bishopfox.com/news/bishop-...
- Cisco has rolled out a fix, but admins shouldn’t just wait for updates. Rotate credentials now, enforce secure transport, and audit logs for exposure.
- New research from #tamnoon analyzed 4.76 million #CNAPP alerts over 12 months, revealing why critical vulnerabilities sit open for months and what security teams can do about it. tamnoon.io/state-of-clo...
- History repeats itself—even in cybersecurity. In his new article for @securityweek.bsky.social, Red Team Practice Director Trevin Edgeworth breaks down five security failures that keep showing up in real-world incidents and how to avoid them. www.securityweek.com/failure-rins...
- Now available on demand: "Red Teaming: Is Your Security Program Ready for the Ultimate Test?" #RedTeam Practice Director Trevin Edgeworth breaks down when Red Teaming is the right move, key security practices, and whether to build or buy. bishopfox.com/resources/re...
- Headed to #HackGDL this weekend? Don’t miss our lineup of talks & hands-on experiences! Fri & Sat: Talks on mobile security, red teaming, #socialengineering & cloud threats. Sat: Test your #vishing skills at the Vishing Village, hosted by Bishop Fox. #cybersecurity #redteam #appsec
- We decrypted #SonicOSX firmware—here’s how. Our latest research reveals what’s behind SonicWall’s encryption, plus we’re releasing #SoniCrack, an open-source tool for security research. bishopfox.com/blog/sonicwa...
- Is your security program ready for a #RedTeam assessment? Join Trevin Edgeworth on Feb 25 @ 1 p.m. ET to learn: -When to Red Team (and when not to) -Must-have security practices -Build vs. buy: In-house vs. external Red Teaming bishopfox.com/resources/re...
- Happening today @districtcon.bsky.social! “Tearing Down (Sonic)Walls: Reverse-Engineering SonicOSX Firmware Encryption” at 1:30 p.m. w/ @br4inde4d.bsky.social & @noperator.bsky.social. Also, get energized with free drinks at our Coffee Cart ☕️! #SonicWall #firewall bishopfox.com/events/bisho...
- Feeling lost in the vast world of #cybersecurity? Catch Yael Basurto at #HackGDL: “Don’t Worry, Be Hacky: Survival Guide for Today’s Hacker” on March 1, at 12 p.m. CT. bishopfox.com/events/bisho...
- Catch Iván Sánchez and Jorge Gibbs at HackGDL for: “Post-exploitation Techniques Used by Threat Actors in the Cloud” March 1 | 2 p.m. CT. Learn how attackers escalate privileges and expand access post-compromise.
- Is your security program ready for a #RedTeam assessment? Before you dive in, make sure your defenses can handle real-world adversaries. Join Trevin Edgeworth on Feb 25 at 1 p.m. ET / 10 a.m. PT for a webcast on when to Red Team (and when not to) Register now: bishopfox.com/resources/re...
- Don’t miss @br4inde4d.bsky.social and @noperator.bsky.social presenting: “Tearing Down (Sonic)Walls: Reverse-Engineering SonicOSX Firmware Encryption” at @districtcon.bsky.social Feb 21 at 1:30p.m. And stop by our Coffee Cart for ☕️ & convo! More: bishopfox.com/events/bisho... #SonicWall #firewall
- .@cactuscon.com is in full swing with @alethe.bsky.social with @dnsp.bsky.social sessions happening tomorrow! #infosec #cybersecurity #hacking #redteam
- A special gift arrives today... 👀💘
- Hackers exploit trust more than technology. On The Audit podcast from IT Audit Labs, @alethe.bsky.social shares jaw-dropping #socialengineering tactics, #redteam insights, and how #AI & #deepfakes are changing cybercrime. www.itauditlabs.com/the-audit
- Join us at HackGDL on Feb 28 at 12:20 p.m. CT! Luis De la Rosa & Steeven Rodríguez present Burning Down the Walls: Android and iOS Security Bypass. More info: bishopfox.com/events/bisho... #iOS #Android #HackGDL #cybersecurity
- Mesa, AZ cybersecurity folks! If you’re heading to @cactuscon.com this weekend, don’t miss @alethe.bsky.social’s #RedTeam keynote and @dnsp.bsky.social’ two must-see talks on Unconventional Paths in #Cybersecurity and wireless hacking with #LLMs - all this Saturday! bishopfox.com/events/bisho...
- 768 CVEs were exploited in 2024—a 20% increase from the year before. It’s another banner year for threat actors targeting vulnerabilities. Time to strengthen patch management and reduce attack surfaces. #threatintel (via @thehackernews.com.web.brid.gy) thehackernews.com/2025/02/768-...
- Now Hiring in Mexico: Senior Software Engineer (Remote) Join us at Bishop Fox to build and scale the award-winning Cosmos platform. If you love Go, #Terraform, and #AWS—and thrive solving complex challenges—we want to hear from you. #careers #hiring bishopfox.com/jobs?gh_jid=...
- Reposted by Bishop Fox[Not loaded yet]
- Join us at HackGDL for the Vishing Village on March 1! Hosted by Iván Sánchez, Berenice Flores, & Samuel Santiago, this hands-on challenge lets you test your #vishing skills in AI-powered simulations. Can you extract the right “flags” without getting caught? bishopfox.com/events/bisho...
- We’re headed to @cactuscon.com! Keynote: @alethe.bsky.social – “Red Team Deep Fakes & the Evolution of #SocialEngineering” @dnsp.bsky.social – “Unconventional Paths in Cybersecurity” & ” #LLMs: Your Wireless Hacking Friend” Feb 14-15 in Mesa, AZ bishopfox.com/events/bisho...
- IVR (Interactive Voice Response) systems keep businesses running—but they also open new attack surfaces for threat actors. In her latest blog, @alethe.bsky.social explores #IVR #penetrationtesting, the vulnerabilities lurking in these systems, and how to secure them. bishopfox.com/blog/dial-to...
- Senior Security Consultant @alethe.bsky.social is headlining @cactuscon.com 13! A @defcon.bsky.social Black Badge winner & #socialengineering expert, you won't want to miss her keynote. bishopfox.com/events/bisho...
- There’s no single path into cybersecurity. Our Foxes’ career journeys include cloning RFID badges, writing tech columns, and even World of Warcraft! #cybersecurity #careers
