Want to learn more about the Bishop Fox #opensource tool Sliver? Then make sure you attend our upcoming #BFLive training session where we’re dedicated the entire time to upping your #pentesting ante with this popular #CobaltStrike alternative.

https://bfx.social/3HezvSw

Pwning the Domain with Sliver Framework

Senior security expert Jon Guild demonstrates how to use the Sliver C2 framework to develop advanced offensive security skills from first-hand experience.

Bishop Fox

Increasingly challenging times in #security demand a new approach.

Purple Teaming, a symbiotic merger of Red Team offense with Blue Team defense, has emerged as a promising #offensivesecurity solution. Discover how this technique can help you achieve multiple goals for your organization – and don’t forget to stream our #BFLive recording if you missed the original broadcast!

https://bfx.social/3RfQdFE

Purple Teaming: Validating Cybersecurity Investments and Enhancing…

Learn how Purple Teaming brings together offensive and defensive strategies for a more comprehensive and impactful cybersecurity approach.

Bishop Fox

How do you get organizational buy-in to stop viewing #cybersecurity as a cost and start seeing it as an investment? Join Ryan Basden to learn how the adoption of Purple Teaming initiatives can help demonstrate ROI and secure revenue.

https://bfx.social/3QS1dcc

#purpleteaming #offensivesecurity #BFLive

Purple Teaming for Security Success: Enhancing ROI and Facilitating Growth | LinkedIn

Cybersecurity programs are widely accepted as a cost-of-doing business for most organizations in the modern digital age, yet it often comes at a significant price tag and financial burden. The most significant exception to this view is in compliance, where security teams are often heavily involved due to the technical nature of evidence gathering. It's challenging to argue against this perception, as compliance reports directly contribute to revenue and can prove instrumental in securing multi-million dollar deals. So how can security professionals compete for budget allocation and garner internal support from decision-makers to bring about organizational change and improvement? Join our webcast to hear Ryan Basden, Red Team Security Consultant II, explore how the adoption of Purple Teaming initiatives can help an organization demonstrate tangible ROI for security teams and facilitate securing existing and future revenue. Learn how cybersecurity can transition from a perceived cost center to a tangible asset driving organizational development and revenue protection. Our webcast will examine actionable approaches, supported by real-world examples, to show how Purple Teaming can: • Establish measurable security baselines and resilience across companies and supply chains • Validate the effectiveness of security investments and identify areas for increased efficiency • Provide a blueprint for organizational advancement and agility through penetration tests and Red Teams • Enable evidence-based ROI communication to leadership and stakeholders • Offer demonstrable and continuous protection against headline-grabbing, investor-rattling emerging threats. (If there are any technical snags, feel free to watch on our YouTube channel.)

Auditing #API endpoints after discovering a public hosted specification file is no small feat for #pentesters. Enter the new #opensource tool from Tony West (@un4gi_io), Swagger Jacker. He’ll walk you through how to use this new #pentesting tool in our next #BFLive training session. 🔨

https://bfx.social/4156hyN

And afterwards, we’ll be doing a quick #AMA with Tony in our #Discord server, which you can join at the link! It’s an active group consisting of 1600+ #infosec community members.

https://discord.com/invite/redsec

Swagger Jacker: Improved Auditing of OpenAPI Definition Files

Join Bishop Fox for a demo of Swagger Jacker, an open-source audit tool to improve inspection of unintentionally exposed OpenAPI definition files.

Bishop Fox

Level up your web #appsecurity testing with the #OWASP #ASVS! Listen in to our live discussion with our security consultant Shanni Prutchi as she shares her #appsec expertise, happening here later today!

Join us & bring your ASVS questions. #infosectraining #applicationsecurity #BFLive

And don't forget about our Discord AMA starting at 1 PM MST.

https://bfx.social/4601Aqt

OWASP ASVS: Unlocking Stronger Application Security

Join Shanni Prutchi as she shares her analysis of the 278 verification requirements listed in OWASP's Application Security Verification Standard.

Bishop Fox

Make sure you join us tomorrow for our livestreamed training session “OWASP ASVS: Unlocking Stronger Application Security” with Shanni Prutchi, the author of “OWASP ASVS Demystified: A Practical Guide to Web #ApplicationSecurity Testing.” Let us know if you have ideas for future training sessions! #BFLive

https://bfx.social/4601Aqt

OWASP ASVS: Unlocking Stronger Application Security

Join Shanni Prutchi as she shares her analysis of the 278 verification requirements listed in OWASP's Application Security Verification Standard.

Bishop Fox

In our next Bishop Fox training session, Shanni Prutchi will share how to use the #OWASP #ASVS guide to help you generate test cases for your organization and identify the precise access needed to correctly verify each requirement. Seize the opportunity for advancement in application security and gain insightful context for testing your organization’s web applications against the ASVS verification requirements.

https://bfx.social/4601Aqt

#BFLive

OWASP ASVS: Unlocking Stronger Application Security

Join Shanni Prutchi as she shares her analysis of the 278 verification requirements listed in OWASP's Application Security Verification Standard.

Bishop Fox

Renowned security researcher John Hammond of Huntress helped kick off our #DEFCON “Art of Hacking” livestream. Watch the recording of his interview with hosts Tom Eston and Lindsay Von Tish where he chats about various topics ranging from #malware analysis to coping with #burnout. #BFLive

https://bfx.social/49jssVs

Bishop Fox Interview with John Hammond - DEF CON 31

In this session, hear from John Hammond who is a cybersecurity researcher, educator and content creator.

Bishop Fox

Happy International Women in Cyber Day! In honor of today's important celebration, we encourage you to check out this #BFLive event with Lindsay Von Tish, Katie Ritchie, Shanni Prutchi, Jessica Stinson and @alethe.

They share their paths to #cybersecurity, how getting involved in relevant organizations and conferences is a critical career move, and how others can elevate their #security skillsets.

We are proud that so many talented #womenincyber call the Fox Den their professional home!

https://bfx.social/3ElRVzf

Defend Like A Girl: Hacking Your Way to Cyber Success

YouTube

This year’s hacker summer camp was action-packed for us. We’re sharing our highlight reel with the Diana Initiative, BSides Las Vegas,
a signature DryBar event, #BFLive at #DEFCON, a party at the Bird Bar, a DEF CON talk, and a Red Team Village sponsorship.

Whew!

https://bfx.social/3OQHFUu

A Bishop Fox Recap - Hacker Summer Camp 2023

Get a recap of Bishop Fox events during the 2023 Hacker Summer Camp in Las Vegas. Learn more here!

Bishop Fox