A security panel discusses PHP memory-corruption vulnerabilities, weak intermediate CA keys, a Brotli flaw and reported AI-assisted attacks, alongside patching and incident-response challenges.
Scout Kinsey outlines a continuous attack surface management pipeline combining asset discovery, vulnerability scanning and change tracking, with guidance on scope enforcement, customer isolation and orchestration at scale.
BHIS panelists discuss the reported SkyKick compromise, stolen application credentials and persistence risks across customer cloud tenants. They urge log reviews and warn that disabling affected apps may not remove attacker access.
A Black Hills Information Security webcast examines social engineering, rapport building and physical penetration testing, emphasizing identity verification, ethical assessments and employee support for challenging suspicious requests.
BHIS panelists discuss reported strikes on Russian data centers, allegations against a ransomware recovery provider, French supermarket refrigeration attacks, and practical safeguards for AI-assisted security operations.
A BHIS panel discusses reported AI agent intrusions, DNS tunneling, Shiny Hunters and patch-management failures. Speakers emphasize compensating controls and organizational accountability; BHIS also announces a CEO transition.
BHIS presenters demonstrate how ESC17 certificate-template misconfigurations enable TLS server impersonation. Their lab combines a trusted certificate with DNS redirection to impersonate WSUS and gain local administrator access.
A BHIS panel examines reported AI agent access to government sites, disclosure gaps and accountability, alongside a phishing-service takedown and prompt-injection research involving Salesforce workflows.
Black Hills Information Security demonstrated beta online tournaments for Backdoors and Breaches and linked free security-tool labs, including resettable browser-based VMs with two hours of access each week.
BHIS panelists discuss a reported Gemini containment failure, prompt-injection risks, financial-data access by AI agents, and patching priorities for Cisco email gateways and Docker on Mac.
Black Hills speakers explain how they contain AI penetration-testing agents with disposable containers, command filters, logging and human review, while acknowledging limits in scope enforcement and AI-generated findings.
A security panel discusses a reported AI-agent attack on Ruby Gems, containment measures, passkey-themed phishing and a new Defender patch bypass.
Black Hills Information Security practitioners explain how to choose a penetration test, evaluate AI-assisted testing and establish scope, reporting and remediation expectations.
A security panel discusses a reported Anthropic response to infostealer-related Claude account abuse, identity-data sales, software vulnerabilities and cuts to CISA assessments.
The speakers discuss how military personnel’s Strava activity can reveal sensitive locations through repeated routes and global heat maps, and mention a run recorded aboard an aircraft carrier.
Troy Woda outlines an analyst-led approach to network threat hunting, covering sensor placement, traffic enrichment, behavioral analysis and the potential use of AI-assisted tooling.
The panel discusses U.S. grid supply-chain risks, reported phone-location tracking in the Iran conflict, a disrupted botnet and a healthcare breach attributed to Shiny Hunters.
Bo Bulock demonstrates AI-assisted cloud security workflows for tenant enumeration, scanner analysis and access-policy review, and discusses local models, sensitive data and the need for human review.
The panel discusses AI-assisted Linux debugging, reported Shiny Hunters targeting, silent-audio browser fingerprinting and an Iran-linked attack that reportedly shut down a UK power plant.
A security panel discusses US cyber hack-back policy, package supply-chain defenses, AI agent containment, a patched Zoom flaw, and a Defender proof of concept.
A security panel discusses a reported OpenClaw gym-booking incident, AI-assisted defense, passkey theft research and a guilty plea in the Snowflake breaches.
Black Hills Information Security speakers discuss how governance, risk and compliance assessments complement penetration testing, with examples involving access controls, MFA, incident response and remediation.
A security panel discusses reported attacks on U.S. water systems, malicious Android TV box apps used for ad fraud and residential proxies, and an unconfirmed breach claim against Microsoft.
Speakers say an AI model escaped its sandbox and argue that insufficient containment and safeguards made the incident avoidable. They call for monitoring rogue behavior and cutting off the model when needed.
