Tanto Security

@justinsteven hits the main stage today at Kawaiicon. If you can’t be in Wellington the live stream is here: m.twitch.tv/kawaiiconnz?de…. It’s going to be a lot of fun 🤩 Congratulations to Noah and Jesse for their awesome talk yesterday!

🔥ℝ𝕖𝕒𝕕𝕪 𝕥𝕠 𝕓𝕣𝕖𝕒𝕜 𝕥𝕙𝕖 𝕤𝕥𝕒𝕔𝕜 𝕒𝕟𝕕 𝕡𝕨𝕟 𝕥𝕙𝕖 𝕙𝕖𝕒𝕡? Corelan Stack (Feb 3-6) + Heap (Feb 9-12) in Melbourne 🇦🇺 — the ultimate exploit dev combo, back to back 💥 Do both = earn your shot at CCED 😈 Seats 👉 bit.ly/corelan-traini…  💛 Sharing = caring

Are you going to be in or around Wellington on the 7th-8th November? Are you a student or currently unwaged? TantoSec wants to get you to Kawaiicon❤️ We have tickets to give away. They cover entry to the con only. Travel & accom aren't included. Send us a DM if you can make it😎

🚨BBOT Security Advisory🚨 4 fresh CVEs (2 CRITICAL RCE) can give a clever defender RCE on your attack box if you’re on BBOT <2.7.0. Hat tip to @justinsteven of @TantoSecurity for the catch. 🙌 Details 👉BLS Blog blog.blacklanternsecurity.com/p/bbot-securit… #infosec #CVE

Tomorrow at @AISA_National CyberCon in Melbourne 👀

@BSidesCbr is just around the corner and we've got six talks booked in. Starting tomorrow with CrestCon then 5 spots at BSides from Thursday to Saturday. If you are coming along come say hi and we'll have stickers and t-shirts to give away!

We think @DownUnderCTF does incredible work, and Tanto Security is proud to have been a sponsor since 2023. Thank you friends for letting us pentest your new scoreboard, and we'll see you for DownUnderCTF 7 in 2026 🫡

@DownUnderCTF have published their annual infra writeup at downunderctf.com/blog/2025/infr… and today's an extra special day, because they're open sourcing their scoreboard, noCTF! 🎉 we think it's pretty dang good (and probably pretty secure)

Tanto Security ❤️ @DownUnderCTF - and when they asked us if we could do a pentest of their new brand new CTF scoreboard we knew we had to say yes. With their permission we are proud to release the full pentest report today! 👇

🚆🚄🚅🚉🛤️🚃🚂 Training Alert! We are partnering with @corelanc0d3r to bring his amazing exploit dev workshop to Melbourne for the first time. Want to take your exploit dev to the next level? Check out events.humanitix.com/corelan-stack-… Early Bird Discounts if you get in before October 1

Always happy to be back supporting Australia's greatest HackerCon 🥷

Tickets are free for practicing professionals. Come along and learn yourself an AppSec! clutchevents.co/events/melbour…

Our Technical Director and co-founder @marcioalm will be at the Melbourne AppSec & DevSecOps Summit next week! He'll be pondering the changing nature of software assurance alongside @jksdua and friends of TantoSec @volvent and @pamoshea

He ends up delivering a perfectly spoofed email, indistinguishable from one that would have been sent from within the victim organisation. Some of the tricks have been patched 🥳 some tricks haven't 👀 so grab a cup of tea and get busy reading 😁 tantosec.com/blog/2025/08/m…

It's blog post day! 🎉 Our email whisperer Ben Wilson has distilled his Outlook email spoofing journey from @BSidesCbr 2024 into a terrific post, walking you through the process of exploring niche email tricks that bypass anti-spoofing controls 👇

Come check out @an1msh_ talk at BSides CBR in September.

The Melbourne TantoSec crew got outside and touched some grass 🙌

@DownUnderCTF @googlecloud @3xploit5ecurit7 @TrenchantARC @Division5io @VolkisAU @PentesterLab 🐶🙏

Swinging from the treetops with a mighty roar of thanks to our sponsors — @googlecloud, @TantoSecurity, @3xploit5ecurit7, REA Security, @TrenchantARC, Mantel Group, @Division5io, @VolkisAU, asontu & @PentesterLab! You made this wild adventure unforgettable! 🦁🌴🎉