Resource Center

When a new threat hits the headlines, you need to know fast whether it affects your environment. Bishop Fox Emerging Threat Testing delivers a per-environment verdict, including a real all-clear when you are not impacted.

Internet-facing exposure is attackers’ number one way in, and most security teams cannot see all of theirs. Bishop Fox Attack Surface Discovery continuously finds, validates, and attributes your perimeter assets so you work from an inventory you can trust.

Threat actors probe your perimeter constantly, and a point-in-time test shows only where you stood on one day. Bishop Fox Attack Surface Testing delivers continuous penetration testing of your external attack surface, with every finding proven by an expert.

Your attackers do not wait for your next scheduled test, and neither should your security program. Bishop Fox Continuous Security Testing gives you an always-on, validated view of your attack surface, exploitable vulnerabilities, and emerging threats.

What does modern healthcare security actually look like? This research-backed guide explores how today's interconnected healthcare environments have changed the way attackers operate and how organizations can use offensive security to evaluate the systems, identities, medical devices, and AI technologies that support patient care.

Explore healthcare security with leaders from Moderna, Holland & Knight, and Bishop Fox as AI, ransomware, and medical device risks reshape readiness.

Security leaders heading into 2027 face faster attacks, more capable AI, and trust relationships that extend beyond their control. Vinnie Liu, Justin Greis, and Evan Wolff compare notes on what's changing, what's being underestimated, and which decisions need to be made now.

Start with limited IAM permissions and learn how to exploit misconfigured CloudFormation roles to escalate privileges and maintain persistence. This workshop covers iam:PassRole, Custom Resources with Lambda, delegated execution abuse, and how these activities appear in CloudTrail logs.

Start with limited IAM permissions and learn to weaponize misconfigured CloudFormation execution roles for privilege escalation and persistence. This workshop covers iam:PassRole, Lambda-backed Custom Resources, delegated execution abuse, and how these attacks appear in CloudTrail logs.

Sean McMillan sits down with Kraig Faulkner, Field CTO at Infolock, at Black Hat 2026 to discuss the data security risks hiding beneath the AI hype, why AI bypasses traditional access controls, and why understanding where your data lives is the foundation of any real AI security strategy.

A healthcare technology company moving to SaaS needed to validate its multi-tenant cloud platform, secure connected device provisioning, and maintain visibility across a growing attack surface. Bishop Fox delivered an architecture assessment and continuous testing program to help them build with confidence.

Bishop Fox consultants Derek Rush, Michael Cheng, and Katie Ritchie share what they're seeing in real GenAI assessments and LLM penetration tests. From recurring weak spots to agentic system failures, this session covers where AI security quietly breaks down and what to do about it.

How do you secure millions of connected homes with limited security resources? Explore how a global smart residential technology provider partnered with Bishop Fox to continuously identify real threats, eliminate critical vulnerabilities, and strengthen security across applications, networks, and cloud environments.

AI adoption is moving faster than governance can keep up. Daniel Wallance shares what he's seeing across the U.S., Europe, and the Middle East as organizations shift from experimentation to enterprise-scale deployment, and how security leaders can build programs that balance innovation with responsible AI.

Security teams have more visibility than ever, but knowing what actually matters is harder than ever. Watch Bishop Fox experts as they break down the prioritization problem and how to focus limited resources where they have the greatest impact.

Most social engineering discussions focus on what to say. This workshop focuses on how to build pretexts that hold up when things go sideways. Alethe Denis, DEF CON Black Badge winner, shares the mindset and preparation behind resilient pretexts for physical red team engagements.

A step-by-step look at how Bishop Fox tests connected devices — from threat modeling to exploit validation.

Learn how Laurel, an AI-powered work intelligence platform, partnered with Bishop Fox to validate its security defenses through continuous attack surface monitoring and a sophisticated social engineering assessment—achieving zero clicks across 48 targeted employees and a single low-severity finding over nine months.

¿Qué tan seguros son los dispositivos embebidos e IoT en tu entorno? Este taller práctico cubre fundamentos de hardware hacking, desde identificar componentes clave e interactuar con interfaces de depuración hasta extraer firmware y encontrar vulnerabilidades en dispositivos reales.

How secure are the embedded and IoT devices running in your environment? This hands-on workshop covers hardware hacking fundamentals, from identifying key components and interacting with debug interfaces to extracting firmware and finding vulnerabilities in real devices.

Capable models and meaningful security outcomes are not the same thing. This session brings together leaders who have spent time with Mythos to examine where it fits in the SDLC, what it actually costs at scale, and whether it delivers real value or still requires seasoned expertise to use well.

Awareness training isn't enough. In this session, Alethe Denis shifts the focus from how attackers deceive people to why business systems still allow impact when deception succeeds. Drawing from real red team experience, she breaks down where defenses actually fail and what to do about it.

Get hands-on with cloud penetration testing in this interactive workshop. Using CloudFox, you'll learn core cloud concepts across providers, identify misconfigurations, and walk through vulnerabilities in a safe environment built for practical, skills-focused learning.

Gain firsthand experience in cloud penetration testing with this interactive workshop. Using Cloudfox, you'll learn fundamental cloud concepts, how to identify unsafe configurations, and receive guidance within a secure environment designed to hone your skills.