Resource Center

Sean McMillan sits down with Kraig Faulkner, Field CTO at Infolock, at Black Hat 2026 to discuss the data security risks hiding beneath the AI hype, why AI bypasses traditional access controls, and why understanding where your data lives is the foundation of any real AI security strategy.

A healthcare technology company moving to SaaS needed to validate its multi-tenant cloud platform, secure connected device provisioning, and maintain visibility across a growing attack surface. Bishop Fox delivered an architecture assessment and continuous testing program to help them build with confidence.

Bishop Fox consultants Derek Rush, Michael Cheng, and Katie Ritchie share what they're seeing in real GenAI assessments and LLM penetration tests. From recurring weak spots to agentic system failures, this session covers where AI security quietly breaks down and what to do about it.

How do you secure millions of connected homes with limited security resources? Explore how a global smart residential technology provider partnered with Bishop Fox to continuously identify real threats, eliminate critical vulnerabilities, and strengthen security across applications, networks, and cloud environments.

AI adoption is moving faster than governance can keep up. Daniel Wallance shares what he's seeing across the U.S., Europe, and the Middle East as organizations shift from experimentation to enterprise-scale deployment, and how security leaders can build programs that balance innovation with responsible AI.

Security teams have more visibility than ever, but knowing what actually matters is harder than ever. Watch Bishop Fox experts as they break down the prioritization problem and how to focus limited resources where they have the greatest impact.

Most social engineering discussions focus on what to say. This workshop focuses on how to build pretexts that hold up when things go sideways. Alethe Denis, DEF CON Black Badge winner, shares the mindset and preparation behind resilient pretexts for physical red team engagements.

A step-by-step look at how Bishop Fox tests connected devices — from threat modeling to exploit validation.

Learn how Laurel, an AI-powered work intelligence platform, partnered with Bishop Fox to validate its security defenses through continuous attack surface monitoring and a sophisticated social engineering assessment—achieving zero clicks across 48 targeted employees and a single low-severity finding over nine months.

¿Qué tan seguros son los dispositivos embebidos e IoT en tu entorno? Este taller práctico cubre fundamentos de hardware hacking, desde identificar componentes clave e interactuar con interfaces de depuración hasta extraer firmware y encontrar vulnerabilidades en dispositivos reales.

How secure are the embedded and IoT devices running in your environment? This hands-on workshop covers hardware hacking fundamentals, from identifying key components and interacting with debug interfaces to extracting firmware and finding vulnerabilities in real devices.

Capable models and meaningful security outcomes are not the same thing. This session brings together leaders who have spent time with Mythos to examine where it fits in the SDLC, what it actually costs at scale, and whether it delivers real value or still requires seasoned expertise to use well.

Awareness training isn't enough. In this session, Alethe Denis shifts the focus from how attackers deceive people to why business systems still allow impact when deception succeeds. Drawing from real red team experience, she breaks down where defenses actually fail and what to do about it.

Get hands-on with cloud penetration testing in this interactive workshop. Using CloudFox, you'll learn core cloud concepts across providers, identify misconfigurations, and walk through vulnerabilities in a safe environment built for practical, skills-focused learning.

Gain firsthand experience in cloud penetration testing with this interactive workshop. Using Cloudfox, you'll learn fundamental cloud concepts, how to identify unsafe configurations, and receive guidance within a secure environment designed to hone your skills.

What does exposed AI infrastructure actually look like in the wild? AIMap creator Aashiq Ramachandran is demoing it live, mapping, fingerprinting, and testing real exposed AI systems in real time. Watch to see how attackers find vulnerabilities in AI infrastructure before your team does.

Security leaders inherit complexity, not clean slates. In this session, Jessica Stinson applies attacker methodology to security leadership, helping you cut through app sprawl, IAM gaps, shadow AI, and noise to focus on what actually matters and drives meaningful risk reduction. Register to join us.

Most enterprises are managing dozens — sometimes hundreds — of applications with the same constrained budgets and headcount. Bishop Fox AI-Powered Application Penetration Testing delivers validated, expert-reviewed findings across your entire portfolio without the noise or overhead.

AI is shrinking the gap between vulnerability discovery and exploitation. As pressure mounts, most security programs aren’t built to keep up. Watch Bishop Fox experts to learn what actually matters and how to stay focused in an increasingly noisy, fast-moving threat landscape.

A financial services organization tested Bishop Fox's Cosmos AI platform against a realistic application to answer one question: what does AI-powered penetration testing actually deliver? In 3 hours and 17 minutes, Cosmos AI surfaced 35 candidate findings — including a $1M negative transfer exploit and a race condition that multiplied funds 5× — that conventional scanners cannot test for. After expert triage, the client received 20 confirmed vulnerabilities and zero false positives.

Before releasing AI-developed software, use our recommended security guardrails checklist to learn how to constrain generated code, enforce security controls, and prevent silent risk from prompt to production.

Need a way to model identity risk across evolving cloud environments? This workshop breaks down how Cirro’s extensible design supports consistent analysis as new systems and data sources are added.

Struggling to understand how privilege actually spreads in Azure? This workshop shows how Cirro maps identities and roles into attack paths using graph-based analysis.

Trained people, strong controls, still getting fooled? This session breaks down how modern social engineering exploits trust and urgency, and what actually works to stop it.