Bishop Fox

Full episode: bfx.social/4pnEky4

"When did you realize this wasn't just another bug?" For Matt Evans (aka uturn), it was discovering that a Tenda router's "guest network" was only separated by subnetting.

@AletheDenis Or watch from our Discord server: bfx.social/3RHDmAi

🔴 Happening now! Join @AletheDenis for a hands-on workshop on building pressure-proof pretexts that hold up when the unexpected happens. If you're interested in social engineering, this one's a must-see: bfx.social/4wO9X6x

Try it on GitHub: bfx.social/4hfPK4Q

New open-source tool: snowpick ServiceNow portals can expose backend data through public widgets and the Table REST API. snowpick helps security teams test for those exposures from an unauthenticated perspective and generates reproducible evidence for validation. Full writeup by Emilio Gallegos on our blog.

@AletheDenis bfx.social/44pZFNT

Happening this week! The best pretexts are the ones that survive unexpected questions. Join DEF CON Black Badge winner @AletheDenis for a hands-on workshop on building pressure-proof pretexts.

Like breaking things (professionally)? We’re hiring across multiple roles at Bishop Fox. If offensive security, research, AppSec, cloud, AI, or red teaming sounds like your kind of challenge, come take a look: bfx.social/4vX1VrX

@AletheDenis Viewable on our site or in our Discord server! Website: bfx.social/3SSeupT Discord: bfx.social/4yvhJ74

A good pretext is a resilient pretext. Join DEF CON Black Badge winner @AletheDenis for a workshop on building pressure-proof pretexts for physical red team engagements. July 16 2 p.m. ET

@SummerC0n Full details: bfx.social/4h3ALeb

Get ready, @summerC0n kicks off tomorrow! If you’re in Brooklyn, catch Shad Malloy presenting: "Sparkplugs, Mosquitos, and Robots: Fuzzing the Protocol Running Half the Smart Factories on Earth" We’ll also be at the booth with pizza, recovery kits, and plenty of security conversations. See you there!

“Remember when gamers became Bitcoin miners?” @BehkFox thinks AI could be headed down a similar path with specialized hardware becoming the next big differentiator. Agree or disagree? Full episode: bfx.social/4gtTFe7

@RedTeamVillage_ Can't wait!

🥈 Sponsor Spotlight! We're excited to welcome @BishopFox as a Silver Sponsor of Red Team Village at DEF CON 34! 🔥 Their support helps us continue creating a space where the offensive security community can learn, connect, and share knowledge. Thank you, Bishop Fox! See you in Vegas. 🤘

That tiny favicon in your browser tab is more useful than it looks. Aaron Ringo breaks down how favicon hashes can identify software, pivot to related hosts, and support attack surface intelligence. Plus: the AI-assisted workflow behind a new public dataset. bfx.social/4fpYP91

Full episode: bfx.social/4y8NyCv

Residential proxies don’t always come from hacked devices. Sometimes people install them willingly in exchange for “free” software or services. Kendrick Urbaniak explains why that’s riskier than most people realize.

@securitymeetup bfx.social/3TcNIsd

Heading to the Boston @securitymeetup on July 16? Ori Zigindere will be talking about CTEM in practice: how it differs from traditional vulnerability management and how teams are using it to continuously reduce real risk. Come say hi if you’re there.