Featured Blog

Broken Hill: A Productionized Greedy Coordinate Gradient Attack Tool for Use Against Large Language Models

Walkthrough the GCG attack at a high level and be introduced to Broken Hill – Bishop Fox’s newly-released tool that can perform the GCG attack against a variety of popular LLMs.
Read More
Bishop Fox Blog Tools Broken Hill Featured
Illustration blue atom
Tech

Aug 27, 2015

ColdFusion Bomb: A Chain Reaction From XSS to RCE

By Shubham Shah

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Aug 27, 2015

Adobe ColdFusion Reflected Cross-Site Scripting Flaw

By Shubham Shah

Electrical inputs blue cords
Tech

Aug 17, 2015

An Overview of BGP Hijacking

By Zach Julian

Cartoonish hacker hijacking a smart safe via maliciously programmed thumb drives plugged into its exterior USB port.
Tech

Jul 28, 2015

On the "Brink" of a Robbery

By Dan Petro

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Jul 06, 2015

NoScript Bypass

By Matt Bryant

Gauge with medium severity reading for FlowscreenComponents Basepack, Version 3.0.7 Advisory. Mautic Version <=3.2.2 Advisory. eCatcher Desktop, Version 6.6.4 Advisory.
Advisory

Jul 01, 2015

LastPass Site Password-Stealing Clickjacking Vulnerability

By Matt Bryant

Illustration of blue clouds one red with keyhole
Industry

May 20, 2015

ISO 27018: The Long-Awaited Cloud Privacy Standard

By Birgit Thorup Mullen

Iphone screen with home screen apps Rethinking & Repackaging iOS Apps: Part 2
Tech

May 04, 2015

Rethinking & Repackaging iOS Apps: Part 2

By Carl Livitt

Clothing rack full of discounted pants
Industry

Apr 27, 2015

Security Should Be Application-Specific

By Bishop Fox

Up close whole in wall
Tech

Apr 18, 2015

Vulnerable by Design: Understanding Server-Side Request Forgery

By Mike Brooks

Person typing on laptop out of focus cellphone in focus AirDroid: How Much Do Your Apps Know?
Industry

Apr 15, 2015

AirDroid: How Much Do Your Apps Know?

By Matt Bryant

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Apr 15, 2015

AirDroid Web Application Authentication Flaw

By Matt Bryant

Load More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.