Bishop Fox

@bishopfox

Tempe, AZ

Bishop Fox
@bishopfox
Sep 4
Trust us, you don't always need admin permissions to escalate privileges in AWS. ...as long as you've got automation with more permissions than you! Join us on Sept. 15 (English) or Sept. 17 (Spanish) for a hands-on workshop exploring CloudFormation execution role abuse,
2
Bishop Fox
@bishopfox
Sep 2
Traefik's request read timeout looked enabled, but on HTTP/3 it wasn't. Our advisory covers a vulnerability allowing unauthenticated clients to hold requests open indefinitely and exhaust backend connections. Update to: ✅ 2.11.56 ✅ 3.7.12
1
Bishop Fox
@bishopfox
Aug 31
AI can help you build software faster, but it won't tell you whether it's any good. Former Fox and @datadoghq security researcher @sethsec talks about why testing, resiliency, and trust still matter in the age of AI.
00:00
2
Bishop Fox
@bishopfox
Aug 28
Two critical vulnerabilities in Veeam Service Provider Console can be chained into unauthenticated remote code execution. Our researchers validated the attack chain, analyzed the patch, published indicators of compromise, and released a safe detection tool defenders can use
1
Bishop Fox
@bishopfox
Aug 27
Everyone's talking about AI. @infolocktech Field CTO Kraig Faulkner says the real conversation should be about the data AI can access. We talk data security, AI guardrails, why "set it and forget it" doesn't work, and the shift from identities to entities.
00:00
1