Expert Analysis of Recent SaaS Attacks That Shocked Global Brands. Watch now

bishopfox-logo-grey
Get Started

Featured Technical

Vulnerability Discovery with LLM-Powered Patch Diffing

Read our most recent research to see how LLMs can assist in scaling patch diffing workflows, saving valuable time in a crucial race against attackers.
Read More
Vulnerability Discovery LLM-Powered Patch Diffing
Arista NextGen Firewall XSS to RCE chain blog graphic showing CVE-2025-6980, CVE-2025-6979, and CVE-2025-6978.
Technical

Dec 04, 2025

Arista NextGen Firewall XSS to RCE Chain

By Jon Williams, Ronan Kervella, Bishop Fox Researchers

Fortinet Fortiweb Authentication Bypass CVE 2025 64446 blog tile with Bishop Fox branding with black and white colors.
Technical

Nov 19, 2025

Fortinet FortiWeb Authentication Bypass – CVE-2025-64446

By Jon Williams, John Untz

YoLink Home Device of How a $20 smart device gave me access to your home tile with computer image in background.
Technical

Oct 02, 2025

How a $20 Smart Device Gave Me Access to Your Home

By Nick Cerne

Blog header image with colorful design elements. Text reads: Demystifying 5G Security – The Registration Protocol. Educational article about 5G mobile network security, authentication, privacy, and protocol protection.
Technical

Sep 04, 2025

Demystifying 5G Security: Understanding the Registration Protocol

By Drew Jones

Black background blog graphic with teal 'BLOG' text and bold white headline reading 'Next-Level Fingerprinting: Tools, Logic, and Tactics,' accented by thin magenta and teal horizontal lines.
Technical

Aug 06, 2025

Next-Level Fingerprinting: Tools, Logic, and Tactics

By Aaron Ringo

AI security blog header image with bold white text on black background: You're Pen Testing AI Wrong, prompt engineering alone is not enough.
Technical

Jul 09, 2025

You’re Pen Testing AI Wrong: Why Prompt Engineering Isn’t Enough

By Brian D.

Subscribe to our blog

Be first to learn about latest tools, advisories, and findings.

Blog banner highlighting critical and high vulnerabilities in Sitecore Experience Platform, featuring CVE-2025-34509, CVE-2025-34510, CVE-2025-34511, and CVE-2025-27218.
Technical

Jun 26, 2025

Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3

By Bishop Fox Researchers

Blog title image featuring the headline 'Sipping from the CVE Firehose: How We Prioritize Emerging Threats for Real-World Impact' — a cybersecurity-focused article on managing and prioritizing critical vulnerabilities (CVEs) in real-world environments.
Technical

Jun 25, 2025

Sipping from the CVE Firehose: How We Prioritize Emerging Threats for Real-World Impact

By Nate Robb

Red Team Tools blog banner featuring bold white text on a black background: "Red Team Tools: Cloud, Identity Exploitation, Evasion & Developer Libraries".
Technical

Jun 18, 2025

2025 Red Team Tools – Cloud & Identity Exploitation, Evasion & Developer Libraries

By Bishop Fox

Red Team Tools blog banner highlighting cybersecurity tools for ethical hacking, including C2 frameworks, Active Directory penetration testing, and network exploitation techniques.
Technical

Jun 04, 2025

2025 Red Team Tools – C2 Frameworks, Active Directory & Network Exploitation

By Bishop Fox

Blog Before you red team: fix these five common mistakes with Bishop Fox branding.
Technical

May 09, 2025

Before You Red Team: Fix These 5 Common Mistakes

By Trevin Edgeworth

Bishop Fox Wild West Hackin Fest Recap for Epic Fails and Heist Tales: A Red Teamer's Journey to Deadwood with Bishop Fox branding.
Technical

Mar 31, 2025

Epic Fails and Heist Tales: A Red Teamer’s Journey to Deadwood

By Alethe Denis

Load More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.