Resource Center

What does modern healthcare security actually look like? This research-backed guide explores how today's interconnected healthcare environments have changed the way attackers operate and how organizations can use offensive security to evaluate the systems, identities, medical devices, and AI technologies that support patient care.

Explore healthcare security with leaders from Moderna, Holland & Knight, and Bishop Fox as AI, ransomware, and medical device risks reshape readiness.

Security leaders heading into 2027 face faster attacks, more capable AI, and trust relationships that extend beyond their control. Vinnie Liu, Justin Greis, and Evan Wolff compare notes on what's changing, what's being underestimated, and which decisions need to be made now.

Start with limited IAM permissions and learn how to exploit misconfigured CloudFormation roles to escalate privileges and maintain persistence. This hands-on workshop covers iam:PassRole, Custom Resources with Lambda, delegated execution abuse, and how these activities appear in CloudTrail logs.

Start with limited IAM permissions and learn to weaponize misconfigured CloudFormation execution roles for privilege escalation and persistence. This hands-on workshop covers iam:PassRole, Lambda-backed Custom Resources, delegated execution abuse, and how these attacks appear in CloudTrail logs.

Sean McMillan sits down with Kraig Faulkner, Field CTO at Infolock, at Black Hat 2026 to discuss the data security risks hiding beneath the AI hype, why AI bypasses traditional access controls, and why understanding where your data lives is the foundation of any real AI security strategy.

A healthcare technology company moving to SaaS needed to validate its multi-tenant cloud platform, secure connected device provisioning, and maintain visibility across a growing attack surface. Bishop Fox delivered an architecture assessment and continuous testing program to help them build with confidence.

Bishop Fox consultants Derek Rush, Michael Cheng, and Katie Ritchie share what they're seeing in real GenAI assessments and LLM penetration tests. From recurring weak spots to agentic system failures, this session covers where AI security quietly breaks down and what to do about it.

How do you secure millions of connected homes with limited security resources? Explore how a global smart residential technology provider partnered with Bishop Fox to continuously identify real threats, eliminate critical vulnerabilities, and strengthen security across applications, networks, and cloud environments.

AI adoption is moving faster than governance can keep up. Daniel Wallance shares what he's seeing across the U.S., Europe, and the Middle East as organizations shift from experimentation to enterprise-scale deployment, and how security leaders can build programs that balance innovation with responsible AI.

Security teams have more visibility than ever, but knowing what actually matters is harder than ever. Watch Bishop Fox experts as they break down the prioritization problem and how to focus limited resources where they have the greatest impact.

Most social engineering discussions focus on what to say. This workshop focuses on how to build pretexts that hold up when things go sideways. Alethe Denis, DEF CON Black Badge winner, shares the mindset and preparation behind resilient pretexts for physical red team engagements.

A step-by-step look at how Bishop Fox tests connected devices — from threat modeling to exploit validation.

Learn how Laurel, an AI-powered work intelligence platform, partnered with Bishop Fox to validate its security defenses through continuous attack surface monitoring and a sophisticated social engineering assessment—achieving zero clicks across 48 targeted employees and a single low-severity finding over nine months.

¿Qué tan seguros son los dispositivos embebidos e IoT en tu entorno? Este taller práctico cubre fundamentos de hardware hacking, desde identificar componentes clave e interactuar con interfaces de depuración hasta extraer firmware y encontrar vulnerabilidades en dispositivos reales.

How secure are the embedded and IoT devices running in your environment? This hands-on workshop covers hardware hacking fundamentals, from identifying key components and interacting with debug interfaces to extracting firmware and finding vulnerabilities in real devices.

Capable models and meaningful security outcomes are not the same thing. This session brings together leaders who have spent time with Mythos to examine where it fits in the SDLC, what it actually costs at scale, and whether it delivers real value or still requires seasoned expertise to use well.

Awareness training isn't enough. In this session, Alethe Denis shifts the focus from how attackers deceive people to why business systems still allow impact when deception succeeds. Drawing from real red team experience, she breaks down where defenses actually fail and what to do about it.

Get hands-on with cloud penetration testing in this interactive workshop. Using CloudFox, you'll learn core cloud concepts across providers, identify misconfigurations, and walk through vulnerabilities in a safe environment built for practical, skills-focused learning.

Gain firsthand experience in cloud penetration testing with this interactive workshop. Using Cloudfox, you'll learn fundamental cloud concepts, how to identify unsafe configurations, and receive guidance within a secure environment designed to hone your skills.

What does exposed AI infrastructure actually look like in the wild? AIMap creator Aashiq Ramachandran is demoing it live, mapping, fingerprinting, and testing real exposed AI systems in real time. Watch to see how attackers find vulnerabilities in AI infrastructure before your team does.

Security leaders inherit complexity, not clean slates. In this session, Jessica Stinson applies attacker methodology to security leadership, helping you cut through app sprawl, IAM gaps, shadow AI, and noise to focus on what actually matters and drives meaningful risk reduction. Register to join us.

Most enterprises are managing dozens — sometimes hundreds — of applications with the same constrained budgets and headcount. Bishop Fox AI-Powered Application Penetration Testing delivers validated, expert-reviewed findings across your entire portfolio without the noise or overhead.

AI is shrinking the gap between vulnerability discovery and exploitation. As pressure mounts, most security programs aren’t built to keep up. Watch Bishop Fox experts to learn what actually matters and how to stay focused in an increasingly noisy, fast-moving threat landscape.