Red Siege Information Security

Penetration Testing, Purple Team, Red Team & Adversary Emulation, Security Posture Review and Training
Let our Offense, Prepare your Defense.

#weareoffensive

[Red Siege Information Security @RedSiege]

Offense for Defense is now On-Demand: Brought to you by CEO @TimMedin and Security Consultant Jason Downey 🔗 https://t.co/WWAShmRUBI

Your Lab, On Your Time

0️⃣ Zero setup. Total control.
🏰 Built for defenders who want to think like attackers

[Red Siege Information Security @RedSiege]

PHP2Shell is officially being exploited in the wild. Researchers confirmed successful remote code execution through two critical PHP vulnerabilities, with emergency patches now available.

via @BleepinComputer

🔗 https://t.co/HAdrKmXrKH

[Red Siege Information Security @RedSiege]

Here's what we've got coming up this week!

Join us for The Wednesday Offensive, every Wednesday at 130pm ET. This week Andy Pettit will be talking about his xdr-cli tool released at WWHF and some of the attacker uses of Microsoft Defender.

🔗 https://t.co/OGH4LfV2rp

[Red Siege Information Security @RedSiege]

Think Content Security Policies are just another security header?

Listen in as Red Siege Security Consultants Douglas and Stuart discuss Cross-Site Scripting (XSS), and hear Douglas explain why CSPs are far more powerful than most people realize.

[Tim Medin @TimMedin]

For years this will be a case study on internal phishing gone wrong.
I’d bet they weren’t going to give rings, but because of this mess up, they have to (good?).

Tests like this gauge the effectiveness of the ruse, not the effectiveness of the staff. See my @WWHackinFest talk.

[Red Siege Information Security @RedSiege]

Reports are in. Vibes are loading... 🎧

https://t.co/vZHGM4bSKd

#hacking #infosec #cybersecurity #lofi

[Red Siege Information Security @RedSiege]

Huge thanks to Brian Halbach for joining the WedOff to talk about life on both sides of cybersecurity consulting, vulnerability management, and the challenges of getting security findings fixed.

See y'all next week! ⚔️

🔗 https://t.co/OGH4LfV2rp

[Red Siege Information Security @RedSiege]

It's time for the 2nd Best Show on the Internet: The Wednesday Offensive!

Today we have Brian Halbach talkin about vulnerability management, its connection to offensive security, and the challenges of keeping up with an endless flood of CVEs.

See you at 130pm ET 🔗👇

[Red Siege Information Security @RedSiege]

Friendly Neighborhood Reminder!

Tomorrow on The WedOff, Brian Halbach joins us to talk vulnerability management, offensive security, and the never-ending flood of CVEs.

Join us at 130pmET 🔗 https://t.co/OGH4LfVAgX

[Red Siege Information Security @RedSiege]

Senior Security Consultant Justin Palk expands on his original Windows AD lab series with new capabilities designed to make your lab more realistic and versatile.

The first installment shows you how to deploy Elastic Defend EDR 🔗 https://t.co/gmBgbhthII

[Red Siege Information Security @RedSiege]

ConnectWise suspends Cloud Backup and other services after attackers compromise app identities to access Microsoft 365 tenants. Backups and restores remain unavailable.

via @TheHackersNews

https://t.co/3QsEegFmuV

[Red Siege Information Security @RedSiege]

Here's what we've got coming up this week!

This week on The Wedoff Brian Halbach will be talking about the transition from cybersecurity consulting to cybersecurity in the Fortune 500 world, and vice-versa.

🔗 https://t.co/OGH4LfV2rp

[Red Siege Information Security @RedSiege]

Red Siege Senior Security Consultant Justin Palk continues his series on expanding a Windows AD lab, this time walking through how to add Microsoft SQL Server Express to Windows Server 2022 Server Core Edition. 🔗 https://t.co/IgJjfgsmic

#hacking #infosec #cybersecurity

[Red Siege Information Security @RedSiege]

@TimMedin @WWHackinFest I'll go first...

[Red Siege Information Security @RedSiege]

Seeing where @TimMedin stickers end up is my favorite part of any con. Spotted this bad boy last week at @WWHackinFest!

Drop your best Tiny Tim photos below. (Trust me, he won't find out, I'm pretty sure he doesn't know how the internet works.)

[Red Siege Information Security @RedSiege]

AWS ReadOnlyAccess can reveal more than you think.

In his latest blog, Principal Security Consultant Mike Saunders breaks down how this policy can expose sensitive information, including passwords, secrets, container data, Lambda code, and more.

🔗 https://t.co/KIjaAUtGT3

[Red Siege Information Security @RedSiege]

Do you really know what's inside your mobile app?

In this blog, Security Consultant Stuart Rorer breaks down how unexpected TLS pinning, third-party code, and AI-generated code can create security risks and waste valuable testing time.

🔗 https://t.co/M6BJ4gWmW0

[Red Siege Information Security @RedSiege]

Thank you Kyle Hendrickson for leading this week's discussion on collaborative assumed breach testing.

We'll see y'all next week. 🔗 https://t.co/OGH4LfV2rp

[Red Siege Information Security @RedSiege]

Good morning, world! It is Wednesday and you know that means it's time for the 2nd Best Show on the Internet - The Wednesday Offensive.

Today we have Kyle Hendrickson leading the discussion on assumed breach and what's next.

See you at 130pm ET 🔗 https://t.co/OGH4LfVAgX

[Red Siege Information Security @RedSiege]

Friendly Neighborhood Reminder!

On Tomorrow's Wednesday Offensive we're gonna have Kyle Hendrickson talking about assumed breach and what's next.

Be sure to tune in at 130pm ET 🔗 https://t.co/OGH4LfV2rp

#hacking #infosec #cybersecurity