Eduardo P. Sánchez

Moving from Electron to frameworks like Tauri doesn’t necessarily eliminate risk, but it does change the mechanics of exploitation. New Bishop Fox research shows how XSS & permissive configuration can still lead to RCE in desktop apps. Full scoop: bfx.social/4cHVl1R

AI risk is very different from traditional software risk. For starters: No CVE-style ecosystem. Infinite input space. Major supply chain blind spots. @KrisKimmerle of @RealPage from our recent AI & Security Risk cyber leadership panel: (Full write up: bfx.social/3OyqZoo)

Giving AI control over infrastructure isn’t sci-fi anymore. Vinnie Liu, Nathan Case (TPO Group), and Zach Moreno on OpenClaw / MoltBot, early-stage AI tooling, and why basic security hygiene still matters especially now. From this week's Initial Access: bfx.social/3OgckOm

Tool Spotlight: Unredacter Pixelation ≠ redaction. Unredacter proves it.

Cloud enumeration can eat up your whole day. Spend ~60 minutes with us and we’ll fix that. Live Discord workshop with Mitchell Sperling on CloudFox - Aug 21. Aug 21 | 2pm EST | bfx.social/45L6vOc

Episode 9 Party, Lord of Mysteries , ohhh intenso

¡Gracias por ser parte de esta increíble edición de #BSidesCDMX ! Nos emociona seguir creciendo junto a esta comunidad 💙 🎥 Ya puedes ver las charlas en nuestro YouTube: @bsidescdmx?si=T15ETNy5KYwvuqzI" target="_blank" rel="nofollow noopener">youtube.com/@bsidescdmx?si… 📸 Y revivir los mejores momentos con las fotos oficiales: securitybsidescdmx.pixieset.com/bsidescdmx25/

Foxes incoming at @defcon 33 this year! Can’t wait to see @hecky and @brandonkovacs doing their thing. #DEFCON33 bfx.social/4mB68g3

Want a peek into what our red team really uses on engagements? This breakdown hits on some of the tools we rely on to get the job done stealthily. Some familiar names, some underrated gems: bfx.social/4lyUoKv bfx.social/3FXi7Vs

How the Busiest People Find Joy hbr.org/2025/07/how-th… , no hay que olvidarse de pasarla bien en un mundo tan ocupado

Tools don’t make the hacker, but they can make the job faster, stealthier, and way more effective. These are the C2s our Red Teamers reach for. Featuring open-source tools by @LittleJoeTables, Ronan Kervella, @its_a_feature_, and @Ne0nd0g. Take a look: bfx.social/404p65C

Really excited for this one. @brandonkovacs is discussing how red teamers are attacking and defending against deepfakes. Super relevant with how fast AI threats are evolving. Should be a great session. Come hang out on May 21! bfx.social/4ji6JB4

The one and only @TomNomNom’s keynoting NahamCon tomorrow! His talk "Good Vibes Only: Should You Still Learn to Code?" gets into what it really takes to grow as a hacker today. Definitely worth checking out if you’re into red teaming or bug bounties. bfx.social/43oCq5M

Can @rustlang outpace C in malware development? Bishop Fox consultant Nick Cerne joins @thecyberwire’s Research Saturday to explore Rust’s stealth advantages, OPSEC tradeoffs, and red team value. Listen: bfx.social/4kp0oVv

Roger Schank argued that “we learn by doing,” not by memorizing for exams, learning should be experience based. Removing grades can reduce stress, but without meaningful alternatives, we risk losing accountability. 📚 rb.gy/6zyv42

I saw some of my students now say grades don’t reflect learning and ask to skip evaluations. But are we mistaking evaluation for punishment? What about effort and commitment? It’s not about no evaluation — it’s about better evaluation.

¡Semana y media para cerrar #cfp de #bsidescdmx25 ! Si no han metido su propuesta corran que el tiempo se acaba. sessionize.com/bsidescdmx25

AI is changing the game—for attackers and defenders. @sweepthatleg joins a @DarkReading panel to talk deepfakes, agentic AI, and what security teams need to do next. #AI #cybersecurity #genAI Watch the full interview: bfx.social/3YlGbau

Our live Discord workshop on Sliver C2 is happening May 8. Learn how it handles listeners, gRPC traffic, and what’s new in 1.6. Save your spot: bfx.social/4iNwBER #RedTeam #SliverC2 #offsec #C2Framework

Antes de imos de fin largo, recuerden que estamos a tres meses de #bsidescdmx25!Y a un mes del cierre del #CallForPapers ¿ya metieron su plática/taller/villa/ actividad? tal vez ¿quieres patrocinar? Nuestro #callforsponsorship sigue abierto también!