BC Security

According to the SBA 60% of small businesses close within 6 months of a cyber breach, yet enterprise security testing often leaves organizations priced out. That Gap shouldn't exist so we built SIMAPTIC! bcsecurity.io/blog/introduci…

Empire 6.4 is now public! Here are just a few updates: - Added C# spawn module - Auto-install for plugin marketplace - New task display with parameters - Added "Rerun Task" to Agents and Plugins - Added customizable table headers - Added Debian 13 support

Cyber on the rise: In 2025, Taiwan experienced an average of 2.6 million daily cyberattacks on critical infrastructure, from hospitals to energy systems, up from the previous year. reuters.com/world/china/ch…

New year, new site, new tool! We’ve refreshed the BC Security website and introduced SIMAPTIC, our continuous threat-exposure and validation platform that simulates multi-stage attacks and gives teams real signals they can act on. simaptic.ai bcsecurity.io

Happy Holidays from all of us at BC Security! As the year winds down, we just want to say thanks to our clients, partners, and the awesome community around us. Your support means everything, and it’s what keeps us building, learning, and doing what we love. Thank you!!!

Empire v6.3.0 released!!!! Bringing major upgrades like Starkiller v3.2.0, mTLS support, ChaCha20-Poly1305 encryption, expanded PSExec agent options, and flexible env-based configuration — making Empire more secure and operator-friendly than ever. github.com/BC-SECURITY/Em…

Empire v6.3.0 is out! • mTLS agents & listeners • ChaCha20-Poly1305 encryption + DH key exchange • HTTPS host reuse across HTTP & malleable listeners • Customizable C# obfuscation via EmpireCompiler • Major dependency upgrades & stability fixes github.com/BC-SECURITY/Em…

Cyber Monday Deal: Level Up Your Cyber Skills! One of our flagship cyber courses is going on sale, for a limited time. If you’ve been waiting to jump into hands-on, operator-level training, now’s your moment. training.bc-security.org/courses/empire…

AI-driven cyber-espionage is now real. Anthropic reports autonomous agents running full intrusion chains with minimal human input. Defense has to move at machine speed now. Full report: anthropic.com/news/disruptin…

Google’s AI Threat Tracker shows attackers using malware that rewrites itself in real time. Static defenses can’t stop code that adapts. Modern security needs behavior-based detection, strong identity controls, and real validation. Our defenses must learn faster!

Cybersecurity Awareness Month! Cyber Tip: Segment your administrative network and separate privileged access. Keep domain controllers, jump servers, and management systems separate from user workstations. Isolation limits lateral movement and protects privileged credentials.

Cybersecurity Awareness Month! Cyber Tip: Patch your third-party software. Attackers don’t always need zero-days, just an old plug-in or unpatched tool. Centralize patching, remove legacy apps, and stay current. Every unpatched tool is a potential entry point.

Cybersecurity Awareness Month!! Cyber Tip: Rotate service account passwords often. These high-privilege accounts are prime targets for attackers. Regular rotation limits damage and reduces risk.

Cybersecurity Awareness Month! Cyber Tip: Windows 10 support has officially ended. Without security updates or patches, these systems are vulnerable to new exploits. Upgrade now to Windows 11 or another supported OS to stay secure and compliant.

Cybersecurity Awareness Month!!! Cyber Tip: Close what you don’t use. Unused ports and services expand your attack surface and invite scanning or exploitation. Disabling them keeps your network lean, secure, and harder to breach. #CybersecurityAwarenessMonth #Cybersecurity

Cybersecurity Awareness Month! Cyber Tip: Keep an eye on outbound traffic. Attackers often use it to exfiltrate data or maintain control of compromised systems. Reviewing outbound connections helps you detect and contain threats before sensitive data leaves your network.

Cybersecurity Awareness Month!!! Cyber Tip: Review PowerShell logs often. Attackers use built-in tools to run commands, move laterally, and steal data without dropping malware. Monitoring logs helps spot unusual activity and stop stealthy attacks early.

Cybersecurity Awareness Month!!! Cyber Tip: Check file hashes before installing or running downloads. Verifying the SHA256 or MD5 confirms the file’s integrity and matches the official source. This quick step helps prevent malware from slipping in through fake installers.

Cybersecurity Awareness Month!!! Cyber Tip: Use DNS filtering to block malicious domains before they reach your network. Even if someone clicks a bad link, DNS filters can stop the connection, prevent data theft, and reduce overall risk. #Cybersecurity

Cybersecurity Awareness Month! Cyber Tip: Never enable macros on documents from unknown or untrusted sources. Attackers often send Word/Excel files that trick you into clicking “Enable Content” to launch malware. If you weren’t expecting the file, don’t trust it.