Executive brief on how PCI DSS 4.0 affects offensive security practices, penetration testing, and segmentation testing. Watch Now

Virtual and In-Person Events

Let's connect at an upcoming event!

We actively contribute to and participate in the cybersecurity community. Come see us at an upcoming industry event or tune into one of our speaking gigs, past or present!

Security Consultant Jon Williams video thumbnail.
Technical Briefing

Past Event:

Tomcat CVE-2025-24813: What You Need to Know

A breakdown of CVE-2025-24813 in Apache Tomcat—what it is, who’s actually at risk, and why most users likely aren’t affected. Keep calm and patch your servers.

Learn More
District Con event logo
Technical Briefing

Past Event: February 21-22, 2022

Tearing Down (Sonic)Walls: Reverse-Engineering SonicOSX Firmware Encryption

Researchers walk through cracking SonicOSX: extracting keys, decrypting firmware, and analyzing its architecture at DistrictCon 2025.

Learn More
Bishop Fox Video Card Sonic Wall CVE202453704
Technical Briefing

Past Event: February 11, 2025

SonicWall-CVE2024-53704: Exploit Details

Security researcher Jon Williams reveals how attackers can silently compromise enterprise networks by hijacking legitimate VPN sessions on vulnerable SonicWall firewalls—no credentials required.…

Learn More
Technical Brief #1 title with polygon fox head.
Technical Briefing

Past Event: Thursday, December 12, 2024

Technical Brief on PAN-OS Vulnerability & SonicWall SWI Firmware Decryption

Bishop Fox client briefing: Insights into PAN-OS vulnerability (CVE-2024-0012) with Q&A and advanced threat detection strategies.

Learn More
Webcast on how to prepare for ransomware with real-world playbooks featuring the headshots of Bishop Fox security experts, Tom Eston and Trevin Edgeworth.
Technical Briefing

Past Event: On-Demand Webcast

Ready or Not? Test Your Ransomware Defenses Against Real-World Playbooks

Join Bishop Fox experts Tom Eston, AVP of Consulting and Trevin Edgeworth, Red Team Practice Director as they breakdown why ransomware emulations are the best way to test your defenses.

Learn More
Application Security webcast with Dan Petro headshot
Technical Briefing

Past Event: On-Demand Webcast

Application Security: Getting the Most Out of Your Penetration Tests

Learn how to make the most of your application pen test and implement steps for repetitive secure application design in the future. 

Learn More

Subscribe to our blog and advisories

Be first to learn about latest tools, advisories, and findings.

GigaOm Special Webcast on Attack Surface Management solution featuring analyst Chris Ray with headshot
Technical Briefing

Past Event: On-Demand Webcast

2022 GigaOm Analyst Webcast: Everything You Need to Know About Attack Surface Management

Tune into our webcast to learn more about Attack Surface Management and tips for evaluating solutions. GigaOm analyst Chris Ray joins us to share his insights!

Learn More
Tool Talk Episode 6: Debugging Ruby Exploits
Technical Briefing

Past Event: On-Demand Webcast

Tool Talks: Debugging Ruby Exploits

In our sixth edition of the Tool Talk series, we explore a new test harness for discovering and crafting Ruby exploits.

Learn More
Webcast title in Futuristic Neon lettering: Achieving Warp Speed to Continuous Penetration Testing: How to Calculate ROI for your Organization.
Technical Briefing

Past Event: On-Demand Webcast

Achieving Warp Speed to Continuous Testing: How to Calculate ROI for your Business

Uncover your organization’s unique cost savings and risk mitigation strategy for a continuous offensive testing solution with our customized ROI calculation. 

Learn More

Ready to Get Started? Let's Connect.

Get Started

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.