ATE: Active Directory, is at #BHUSA! Come learn all the nuances behind delegation attacks, forest trusts, certificate abuse, & more! AD is one of the largest attack surfaces in modern environments, so upgrade those skills today. Prices go up May 22nd! blackhat.com/us-26/traini...

Had a great time on the panel @HackRedCon today. Lots of interesting disucssion and the most debated one was: "Do we expect to see auditors for things like SOC 2 start accepting AI-executed security assessments in the near future?" The panel was evenly split. What are your thoughts on it?

New to offensive security & not sure where to start? Or part of the blue team looking for a broad overview of C2? Check out our new 1-day course at Black Hat, RTE: Foundations of C2. Learn the ins & outs of the core technology that attackers use. Prices go up May 22nd! blackhat.com/us-26/traini...

Back by popular demand, we will be teaching ATE: Active Directory again at #BHUSA this year! One of our most popular classes every year. Prices go up at the end of May, don't miss out! blackhat.com/us-26/traini...

BlackHat 2026 is offering 1-day courses for the first time & we are rolling out a brand new course! RTE: Introduction to Ransomware Simulation. Come learn the workflows behind ransomware & the intricacies of crypto-theft. Taught by Hubbl3 Prices go up on May 22nd! blackhat.com/us-26/traini...

Empire v6.5 is live! - 8 new modules across BOF/C#/PS/Python - New C stager + PIC shellcode compiler for stage0 agent injection - Patchless AMSI & ETW bypasses - New Jobs tab on the agent page for managing background jobs - Python 3.14 support github.com/BC-SECURITY/...

Introducing Starkiller Assistant! Our new AI-powered helper for Empire operators. It's like Clippy, but for C2. After months of R&D, early testers describe it as "confidently wrong" and "worse than no help at all." We're so proud.

According to the SBA 60% of small businesses close within 6 months of a cyber breach, yet enterprise security testing often leaves organizations priced out. That Gap shouldn't exist so we built SIMAPTIC! A fully automated internal network testing tool built on Empire.

Empire 6.4 is now public! Here are just a few updates: - Added C# spawn module - Auto-install for plugin marketplace - New task display with parameters - Added "Rerun Task" to Agents and Plugins - Added customizable table headers - Added Debian 13 support

Cyber on the rise: In 2025, Taiwan experienced an average of 2.6 million daily cyberattacks on critical infrastructure, from hospitals to energy systems, up from the previous year. Many of these incidents were tied to broader military and political pressure. www.reuters.com/world/china/...

New year, new site, new tool! We’ve refreshed the BC Security website and introduced SIMAPTIC, our continuous threat-exposure and validation platform that simulates multi-stage attacks and provides teams with real signals they can act on. simaptic.ai Also, check out the new website! bcsecurity.io

Happy Holidays from all of us at BC Security! As the year winds down, we just want to say thanks to our clients, partners, and the awesome community around us. Your support means everything, and it’s what keeps us building, learning, and doing what we love. Thank you to everyone!

Empire v6.3.0 released!!!! Bringing major upgrades like Starkiller v3.2.0, mTLS support, ChaCha20-Poly1305 encryption, expanded PSExec agent options, and flexible env-based configuration — making Empire more secure and operator-friendly than ever. github.com/BC-SECURITY/...

Empire v6.3.0 is out! • mTLS agents & listeners • ChaCha20-Poly1305 encryption + DH key exchange • HTTPS host reuse across HTTP & malleable listeners • Customizable C# obfuscation via EmpireCompiler • Major dependency upgrades & stability fixes github.com/BC-SECURITY/...

Cyber Monday Deal: Level Up Your Cyber Skills! One of our flagship cyber courses is going on sale, for a limited time. If you’ve been waiting to jump into hands-on, operator-level training, now’s your moment. training.bc-security.org/courses/empi...

AI-driven cyber-espionage is now real. Anthropic reports autonomous agents running full intrusion chains with minimal human input. Defense has to move at machine speed now. Full report: www.anthropic.com/news/disrupt...

Cybersecurity Awareness Month! Cyber Tip: Segment your administrative network and separate privileged access. Keep domain controllers, jump servers, and management systems separate from user workstations. Isolation limits lateral movement and protects privileged credentials.

Cybersecurity Awareness Month! Cyber Tip: Patch your third-party software. Attackers don’t always need zero-days, just an old plug-in or unpatched tool. Centralize patching, remove legacy apps, and stay current. Every unpatched tool is a potential entry point.

Cybersecurity Awareness Month!! Cyber Tip: Rotate service account passwords often. These high-privilege accounts are prime targets for attackers. Regular rotation limits damage and reduces risk.

Cybersecurity Awareness Month! Cyber Tip: Microsoft has officially ended support for Windows 10. Without ongoing security updates, these systems are now vulnerable to new exploits and malware. If you’re still running Windows 10, upgrade as soon as possible to stay secure and compliant.

Cybersecurity Awareness Month!!! Cyber Tip: Close what you don’t use. Unused ports and services expand your attack surface and invite scanning or exploitation. Disabling them keeps your network lean, secure, and harder to breach. #Cyberaware #CybersecurityAwarenessMonth #Cybersecurity

Cybersecurity Awareness Month! Cyber Tip: Keep an eye on outbound traffic. Attackers often use it to exfiltrate data or maintain control of compromised systems. Reviewing outbound connections helps you detect and contain threats before sensitive data leaves your network.

Cybersecurity Awareness Month!!! Cyber Tip: Review your PowerShell logs regularly. Attackers often abuse built-in tools like PowerShell to run commands, move laterally, and hide activity. Detailed logging helps spot unusual scripts or commands that may signal an intrusion before it spreads.

Cybersecurity Awareness Month!!! Cyber Tip: Check file hashes before installing or running downloads. Verifying the SHA256 or MD5 ensures the file hasn’t been tampered with and matches the official source. This quick step helps prevent malware from slipping in through fake or modified installers.

Cybersecurity Awareness Month!!! Cyber Tip: Use DNS filtering to block malicious domains before they reach your network. Even if someone clicks a bad link, DNS filters can stop the connection, prevent data theft, and reduce overall risk. #Cybersecurity

Cybersecurity Awareness Month! Cyber Tip: Never enable macros on documents from unknown or untrusted sources. Attackers often send Word/Excel files that trick you into clicking “Enable Content” to launch malware. If you weren’t expecting the file, don’t trust it.

Happy Cybersecurity Awareness Month!! We believe awareness is the first line of defense. This month, we’ll share tips and insights from our experts to help protect what matters most. Tip: Scammers use urgent language to create panic. Don’t rush, pause & verify before acting.

One of our Black Hat instructors analyzes a real phishing email, how it works, the red flags, and how to stay safe. youtu.be/IFy_96Dg__E?... #Phishing #SecurityAwareness #Infosec

PyPI is warning about a new phishing scam hitting package maintainers. Fake “account verification” emails are floating around, pointing to pypi-mirror[.]org, a fake site built to steal your login. www.bleepingcomputer.com/news/securit...

“When ‘working as intended’ means leaking sensitive data” Our analyst Andrew, discovered unauthenticated access to thousands of files and faced roadblocks trying to report it. His blog breaks down what happened and why design flaws matter as much as exploits. bc-security.org/when-intende...

Hot dogs, cold drinks, and… popping shells? This Labor Day, we’re serving up a special Empire Ops 1 Discount. Attackers don’t take holidays, and neither should your defenses. training.bc-security.org/courses/empi... #Cybersecurity #RedTeam

@Micrososft highlights top PRC tactics: cloud account abuse (impossible travel, new principals), LOTL lateral movement with psexec/WMI/remote PowerShell, and persistence via web shells on IIS, SharePoint, VPNs, and firewalls. Defenses: MFA, block legacy protocols, hardened configs.

We are honored to be at #DAFITC this year and catch the keynote from Huntress’ CEO. A powerful discussion on how cybercriminals are abusing tools like ScreenConnect and why defenders must stay vigilant. Great insights for everyone in cyber defense. #CyberSecurity

AMA starts in a few hours! Jake Krasnov (BC Security) is hosting a LIVE AMA on r/SolarDIY at 12 PM ET — only a few hours from now! Bring your cyber questions here: reddit.com/r/SolarDIY

Solar powers your home. Cybersecurity keeps it safe. This Friday (Aug 22) @ 12 PM ET, Jake Krasnov (BC Security) goes LIVE for an AMA on r/SolarDIY! Bring your questions! www.reddit.com/r/SolarDIY/

We want to give a huge thank you to everyone who reached out about the CVEs from our Solar Research! Your feedback, stories, and collaboration mean a great deal to our team, and it has been incredible to see the community come together around this work. Please keep reaching out!

What a great #DefCon!!! We spent almost 2 weeks in Vegas between #BlackHat and #Defcon. We would like to thank everyone who attended our classes, demo labs, workshops, and our mainstage talk. If you didn't have a chance to talk to us, you can always reach out to us on our website or social media!

The first day of #DEFCON is in the books. We had great attendance in both the Empire 6.0 Demo Lab and Obfuscation Reloaded! Check out our main stage talk: Rebadged, Relabeled, and Rooted: Pwnage via the Solar Supply Chain Today at 14:00 (2PM Vegas time) Exhibit Hall West 3 - Track 2

Today is the day! The first day of #DefCon is here! We have workshops and a lab today. Then the mainstage talk tomorrow! Come Check out Obfuscation Reloaded: Modern Techniques for Evading Detection / Empire 6.0!

We are stoked to be out and about @blackhatevents.bsky.social!!! Come say hey if you see us! We are always down to chat and meet new people!

So amazing to see the diversity of students we've had at @blackhatevents.bsky.social this year! We would like to thank everyone who traveled from all parts of the world to attend our classes. Now it's time for #Blackhat2025 briefings!

Day 3 of @blackhatevents.bsky.social We finished class with our first set of students yesterday, and today we start with new students. Don’t forget that we offer training throughout the year. Visit www.training.bc-security.org for a list of our available training options. #blackhat2025

Mark your calendars for our mainstage talk at DEF CON: Rebadged, Relabeled, and Rooted: Pwnage via the Solar Supply Chain Aug 9. Saturday @ 14:00 (2 PM PT) Exhibit Hall West 3 – Track 2 If you see any of us out and about, feel free to say hi!

Day 1 complete and Day 2 underway at @blackhatevents.bsky.social We kicked things off strong! There’s still time to join our Advanced Threat Emulation: Active Directory / Advanced Threat Emulation: Evasion classes tomorrow. www.blackhat.com/us-25/traini... www.blackhat.com/us-25/traini...

Anthony & Jake are finishing up the documentation on the 14 CVEs they will be releasing at DEF CON next week & can't wait to share it with y'all! Don't miss their Rebadged, Relabeled, & Rooted: Pwnage via the Solar Supply Chain talk on Aug 9 at 2 pm PST

Advanced Threat Emulation: Active Directory is the best way to improve your AD skills at Black Hat. Learn about reflection attacks, resource-based constrained delegation, & more. By the end, you will be equipped with the latest TTPs & ready for your next engagement www.blackhat.com/us-25/traini...

Hacker summer camp is quickly approaching, but there is still time to sign up for training at Black Hat! Kick things off right with our Advanced Threat Emulation: Evasion course. Learn the ins & outs of modern EDR evasion and the art behind code obfuscation www.blackhat.com/us-25/traini...

Hacker Summer Camp starts in one week! What's everyone most excited about? We Hubble can't wait to give his DEF CON talk on residential solar hacking. (Even if he is a little nervous for his first mainstage talk)

Active Directory is more important than ever in red teaming. Come learn from Kevin Clark as he shares 5 years of tradecraft experience. This hands-on training covers everything from SMB to LDAP to cross-forest attacks. Don't miss out! www.blackhat.com/us-25/traini...

Hacker Summer Camp is just over a week away! Start it off right with our updated Evasion course at Black Hat. Learn all about modern techniques for evading EDR, including API & kernel hooking, Sys Calls & code obfuscation. Upgrade your skills today! www.blackhat.com/us-25/traini...