Featured Resource
Get the Blueprint: Insights from Ponemon Institute’s 2023 State of Offensive Security Study
Hear from experts Larry Ponemon & Tom Eston, as they reveal our findings from a joint report with the Ponemon Institute on the 'State of Offensive Security' in 2023.
Unredacter Challenge: Alejandro's Solution
Challenge Accepted! We asked the security community to take Unredacter to the next level by decoding our secret blurred message. Watch as Alejandro showcases his solution.
TomNomNom AMA
Tom Hudson (aka TomNomNom) participates in this Discord AMA about the pen testing tools he's created over the years, his cybersecurity journey, and more.
Managing Application Security Risk with Threat Modeling
Fireside Chat: What We Learned from the SolarWinds Attack (and Beyond)
On-demand webcast features security experts discussing recent attacks at SolarWinds, Colonial Pipeline, and more.
Equifax Employs Bishop Fox’s Cosmos (formerly CAST) for Continuous Security Testing
Eyeballer: Automating Security Triage with Machine Learning
This easy-to-follow guide explores the capabilities of Eyeballer, a first-of-its-kind AI-powered pen testing tool.
Using Cyber Offensive Methods to Improve Defense
TAG Cyber provides an unbiased assessment of Bishop Fox’s offensive cybersecurity services and Cosmos platform.
Zoom Secures their Rapidly Expanding Attack Surface with Cosmos (formerly CAST)
Quantifying the Impact of Micro-Segmentation Using Illumio ASP
Bishop Fox developed the industry’s first repeatable testing methodology to quantify the efficacy of micro-segmentation using the Illumio Adaptive Security Platform (ASP).
20 Tips to Make the Most of Your Pen Test
Whether you’ve conducted many pen tests or are about to embark on your first, this eBook contains helpful guidance for companies at every stage of security-program maturity.
13th B-Sides Las Vegas - ICS Security Assessments 101 or How da Fox I Test Dis?
We have seen many ICS attacks both in the news and in several talks at security conferences. They show how ICS protocols are insecure by default and how we can mess with control components so easily. However, from a consulting point of view, are we really asking our ICS clients to let us mess with their critical infrastructure just to show what we already know?
13th BSides Las Vegas - Management Hacking 101
Tom Eston, AVP of Consulting at Bishop Fox, shares his best advice for becoming a successful manager and leader in the security industry.