Bishop Fox

@bishopfox

Tempe, AZ

Bishop Fox
@bishopfox
9h
Most AWS attack paths focus on IAM. This Saturday at @BSidesCleveland, David Garlak shows why that's only part of the story, covering new AWS compromise paths, attack graph patterns, and research behind an upcoming Bishop Fox tool. 👀
1
Bishop Fox
@bishopfox
Sep 23
This secret wasn't secret. New research from Nate Robb and the Bishop Fox Threat Enablement & Analysis Team shows how an empty cluster join key let attackers mint administrator tokens on default JFrog Artifactory installs.
2
Bishop Fox
@bishopfox
Sep 22
The security priorities for 2027 are already taking shape. On Sept. 29, Vinnie Liu joins Justin Greis and Evan Wolff to discuss AI security, identity risk, and where security leaders should focus next.
1
Bishop Fox
@bishopfox
Sep 21
“The map is not the territory.” A critical CVSS score tells you something. It doesn’t tell you everything. In the latest Initial Access, Jon Williams talks about his NetScaler research and why defenders need to look beyond the advisory to understand what a CVE actually means for
00:00
1
Bishop Fox
@bishopfox
Sep 21
A patched router can still belong to the attacker. Bishop Fox reproduced the MikroTrick RouterOS takeover chain, then found real devices with persistent accounts, scripts, and scheduled tasks consistent with the reported campaign. Patch. Then investigate.
1