BC Security

ATE: Active Directory, is at #BHUSA! Come learn the nuances behind delegation attacks, certificate abuse, & more! AD is one of the largest attack surfaces in modern networks. Upgrade your skills today. @BlackHatEvents Prices go up on May 22nd! #advanced-threat-emulation-active-directory-bhat-edition-50907" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Had a great time on the panel @HackRedCon today. Lots of interesting disucssion & the most debated one: "Do we expect to see auditors for things like SOC 2 start accepting AI-executed security assessments in the near future?" The panel was evenly split. What are your thoughts?

New to offensive security & not sure where to start? Or part of the blue team looking for a broad overview of C2? Check out our new 1-day course at Black Hat, RTE: Foundations of C2. Prices go up May 22nd! #red-team-essentials-foundations-of-command-and-control-50958" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Back by popular demand, we will be teaching ATE: Active Directory again at #BHUSA this year! One of our most popular classes every year. Prices go up at the end of May, don't miss out! @BlackHatEvents #advanced-threat-emulation-active-directory-bhat-edition-50907" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

Black Hat 2026 is offering 1-day courses for the first time & we are rolling out a new course! RTE: Introduction to Ransomware Simulation. Come learn how ransomware works & the intricacies of crypto-theft Prices go up May 22nd! @BlackHatEvents #BlackHat #red-team-essentials-introduction-to-ransomware-simulation-51010" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

@BlackHatEvents 2026 is offering 1-day courses for the first time & we are rolling out a brand new course as a result! RTE: Introduction to Ransomware Simulation. Come learn how ransomware works & the intricacies of crypto-theft. Prices go up on May 22nd! #red-team-essentials-introduction-to-ransomware-simulation-51010" target="_blank" rel="nofollow noopener">blackhat.com/us-26/training…

According to the SBA 60% of small businesses close within 6 months of a cyber breach, yet enterprise security testing often leaves organizations priced out. That Gap shouldn't exist so we built SIMAPTIC! bcsecurity.io/blog/introduci…

Empire 6.4 is now public! Here are just a few updates: - Added C# spawn module - Auto-install for plugin marketplace - New task display with parameters - Added "Rerun Task" to Agents and Plugins - Added customizable table headers - Added Debian 13 support

Cyber on the rise: In 2025, Taiwan experienced an average of 2.6 million daily cyberattacks on critical infrastructure, from hospitals to energy systems, up from the previous year. reuters.com/world/china/ch…

New year, new site, new tool! We’ve refreshed the BC Security website and introduced SIMAPTIC, our continuous threat-exposure and validation platform that simulates multi-stage attacks and gives teams real signals they can act on. simaptic.ai bcsecurity.io

Happy Holidays from all of us at BC Security! As the year winds down, we just want to say thanks to our clients, partners, and the awesome community around us. Your support means everything, and it’s what keeps us building, learning, and doing what we love. Thank you!!!

Empire v6.3.0 released!!!! Bringing major upgrades like Starkiller v3.2.0, mTLS support, ChaCha20-Poly1305 encryption, expanded PSExec agent options, and flexible env-based configuration — making Empire more secure and operator-friendly than ever. github.com/BC-SECURITY/Em…

Empire v6.3.0 is out! • mTLS agents & listeners • ChaCha20-Poly1305 encryption + DH key exchange • HTTPS host reuse across HTTP & malleable listeners • Customizable C# obfuscation via EmpireCompiler • Major dependency upgrades & stability fixes github.com/BC-SECURITY/Em…

Cyber Monday Deal: Level Up Your Cyber Skills! One of our flagship cyber courses is going on sale, for a limited time. If you’ve been waiting to jump into hands-on, operator-level training, now’s your moment. training.bc-security.org/courses/empire…

AI-driven cyber-espionage is now real. Anthropic reports autonomous agents running full intrusion chains with minimal human input. Defense has to move at machine speed now. Full report: anthropic.com/news/disruptin…

Google’s AI Threat Tracker shows attackers using malware that rewrites itself in real time. Static defenses can’t stop code that adapts. Modern security needs behavior-based detection, strong identity controls, and real validation. Our defenses must learn faster!

Cybersecurity Awareness Month! Cyber Tip: Segment your administrative network and separate privileged access. Keep domain controllers, jump servers, and management systems separate from user workstations. Isolation limits lateral movement and protects privileged credentials.