RBLN East 2026 brings together security practitioners, red teamers, and defenders for two days of offensive security content, community, and collaboration in the Washington DC area. The event draws a practitioner-first crowd focused on real-world techniques, threat-informed defense, and the kind of no-fluff conversations that only happen when operators are in the same room.

Bishop Fox will be on-site, and Wes Wright, Sr. Security Consultant, will be presenting on the main stage. Wes draws on extensive real-engagement experience to show what separates a security test that produces a report from one that produces actual defensive improvement. Come find the Bishop Fox team, talk shop, and catch Wes's session while you're there.

For more details, visit: RBLN East 2026

"Getting the Most Out of Security Testing: A Hacker's Perspective""

Speaker: Wes Wright, Sr. Security Consultant, Bishop Fox

Date/Time: Friday, June 12, 2026 | 2:30–3:00 PM ET

Location: Hyatt Regency Reston

Abstract: Offensive security assessments are where defenders get a front-row seat to how real operators hunt, pivot, chain weaknesses, and break assumptions. This isn’t about checking boxes or dumping CVEs into a report; it’s seeing how attackers actually move through an environment once they get a foothold. Which detections fail. Which trust relationships collapse. Which “low-risk” issue quietly turns into domain admin at 2 a.m. And now AI is pouring fuel on both sides of the fight. Recon is faster. Phishing is sharper. Social engineering scales. Exploit development and research cycles are compressing. Attackers are iterating faster than most organizations can triage. Defenders don't just need more visibility; they need to understand attacker tradecraft well enough to anticipate how modern intrusions unfold before the alarms start firing.

In this session, I’ll share lessons learned from over a decade of penetration tests and adversary simulations, breaking down the symmetry between offense and defense through the lens of real attack paths, privilege escalation chains, operational blind spots, AI-enabled abuse cases, and the kinds of mistakes attackers love finding in mature environments. Whether you’re running a SOC, leading a security program, or trying to get more than another PDF out of your next pen test, this talk is about understanding how attackers actually think and how defenders can weaponize that perspective to become harder targets.