HackRedCon brings the next generation of cybersecurity to Louisville for a day built around the people doing the work. Red teamers, blue teamers, CTF players, and newcomers come together for technical talks and honest conversations about careers, education, and the state of the field.
Billy Giles leads Bishop Fox’s presence on the agenda with “Attacking the Modern Perimeter.” Billy specializes in red/purple teaming and network penetration testing, and his session tracks how the enterprise edge has moved into cloud, SaaS, identity, API, and AI environments. It also covers how to adapt proven offensive techniques to reach it.
Whether you scope tight pen tests or run objective-driven red team operations, this one is worth a seat.
For more details, visit: HackRedCon 2026
"Attacking the Modern Perimeter"
Speaker: Billy Giles, Managing Senior Consultant I, Bishop Fox
Date/Time: Friday, December 4, 2026
Abstract: The perimeter isn't dead. It's just not where we left it.
Not long ago, attacking an organization's perimeter generally meant identifying public IP addresses, enumerating exposed services, discovering vulnerabilities, and finding a way in. Those techniques remain essential, but the environments we're attacking have changed.
Today's organizations operate across cloud infrastructure, SaaS platforms, federated identity providers, interconnected APIs, and increasingly, AI-enabled applications. These technologies have expanded the attack surface beyond traditional network boundaries, introducing new entry points, trust relationships, and opportunities for exploitation.
So how should we attack the modern perimeter?
This presentation takes attendees on a brief journey through the evolution of the enterprise perimeter before exploring a practical approach to testing today's externally accessible attack surface. We'll examine how to adapt familiar offensive techniques for reconnaissance, asset discovery, enumeration, vulnerability analysis, and exploitation across traditional infrastructure and modern cloud, SaaS, identity, API, and AI environments.
Through technical examples and representative attack paths, we'll explore how these technologies interact, where vulnerabilities emerge, and how attackers can move beyond an initial point of exposure. We'll also discuss how engagement objectives, authorization, and rules of engagement influence what can be discovered, tested, and exploited during penetration tests versus red team operations.
Whether you're conducting a tightly scoped penetration test or pursuing an objective-driven red team engagement, the fundamentals of offensive security still apply. The challenge is understanding where the modern perimeter exists, how its components interact, and which attack paths are worth pursuing.
The perimeter is still alive and well. We just need to think differently about how we attack it.
