Initial Access

Bishop Fox
  • 0.0 (0)
  • Technology
  • Updated Weekly

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

  1. 5 days ago

    ShinyHunters PeopleSoft WAF Bypass, Arrests, And OpenAI Astra News

    In this episode, we break down four security stories:  A ShinyHunters PeopleSoft WAF bypass that hinges on one URL-encoded character The arrest of an alleged ShinyHunters leader days before the group's FBI claim Nearly 400,000 DC Medicaid records left readable behind a public report OpenAI scrapping GPT-6.1 Astra over scope, authorization, and honesty We also cover Bishop Fox research on three practical risk questions: unauthenticated root RCE in Check Point management, Kubernetes namespace takeover in Zilliz Attu, and why an 85 percent jump in CVE disclosures does not automatically mean an 85 percent jump in real-world risk.  Security Headlines:  Google Warns of ShinyHunters' Fresh Oracle PeopleSoft Campaign, SecurityWeek Dutch police arrest suspected member of group that claimed FBI hack, BBC DC Health Agency Exposes 400,000 Beneficiary Records, SecurityWeek OpenAI scraps rollout of new AI model over safety concerns, BBC Also mentioned:    Workshop: Weaponizing CloudFormation (available in English and Spanish)   Events: SecureWorld Dallas 2026, VetsinTech NatSec + Space Innovation Summit 2026 Blog: One Port to Root: Weaponizing Check Point Management CVE-2026-93616  Blog: Zilliz / Attu | 2.6.5 Blog: Separating Signal from Slop: Triaging CVEs in the Age of AI Security Research Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

  2. 26 Sept

    Zero-Click Exchange RCE, $25 AI Intrusions, and the ShinyHunters FBI Claim

    This episode breaks down: A zero-click Exchange Server RCE triggered by a Visio attachmentAI agents compromising online retailers for about $25 a targetShinyHunters' unverified claim that it breached the FBIOpenAI's six new misalignment disclosuresPlus, we sit-down with Bishop Fox's Emilio Gallegos on MikroTick, a RouterOS exploit chain attackers used before defenders knew it existed. Security Headlines: Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days, Security WeekAutonomous AI Agents are breaking into hundreds of Online Retailers for $25 a target in an ongoing campaign, Gambit SecurityFBI investigating claim hackers have stolen details of all its agents, BBCOpenAI Discloses Six New Incidents of ‘Concerning’ A.I. Behavior, The New York TimesAlso mentioned:   Workshop: Weaponizing CloudFormation (available in English and Spanish)  Virtual Session: AI & Cybersecurity Priorities for 2027: Executive ChatEvents: BSides Cleveland 2026, Ekoparty 2026, No Hat 2026, Wild West Hackin' Fest Deadwood 2026Blog: MikroTrick: Inside the RouteOS Takeover Chain Blog: Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI ApplicationsBlog: Master Key Included: Detecting SolarWinds ARM CVE-2026-28326Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

  3. 18 Sept

    Ten-Hour Breaches, MikroTik Backdoors, Router Takeovers & the NetScaler Root Cause

    This episode covers an AI agent fleet that compressed two weeks of red team work into ten hours, a two-CVE chain giving attackers full admin on MikroTik routers, and a fraudulent government request that walked Revolut's verification checks straight out the door, plus a sit-down with Bishop Fox's Jon Williams on a critical NetScaler auth bypass and the detection tool built to prove you're patched.  Security Headlines:  An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation, Unit 42 Your MikroTik Router May Already Be Compromised: Look for SSH User "-2", Security Affairs Revolut Confirms Customer Data Breach Through Fake Government Requests, TechCrunch    Also mentioned:   Workshop: Weaponizing CloudFormation (available in English and Spanish)  Virtual Session: AI & Cybersecurity Priorities for 2027: Executive Chat Event: BSides Cleveland 2026  Blog: Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490 Blog: MikroTrick: Inside the RouteOS Takeover Chain   Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

  4. 11 Sept

    Patch Tuesday Overload, Broken Threat Feeds & the Scoping Problem

    Bishop Fox's Managed Security Services team returns with Sergio Villegas, Richard Brown, and Kendrick Urbaniak covering patch volume that no longer fits a normal cycle, threat intelligence with no real prioritization standard, and how to actually scope a vulnerability and intel program.    Also mentioned:   Workshop: Weaponizing CloudFormation Blog: Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490  Blog: CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory Join the conversation in the Bishop Fox Discord server and in the Bishop Fox subreddit.

  5. 4 Sept

    IDScan Leak, Vished Hospitals, Berlin's Ransom Refusal & a Grid Under Fire

    This episode covers a dark web marketplace selling 150+ million driver's license scans traced to one identity-verification vendor, McKesson's breach after a ShinyHunters vishing attack into Snowflake and Salesforce, Berlin's refusal to pay a ransomware group, and a suspected Iran-linked attack that knocked a UK power plant offline for days.      Security Headlines:  FBI Probes Service Selling 153M+ Drivers Licenses, KrebsOnSecurity McKesson discloses breach after ShinyHunters claims patient data theft, BleepingComputer Berlin says it won't pay ransom after hackers steal government data, The Record Suspected Iran-linked attack knocked UK power plant offline for days, Help Net Security    Also mentioned:   Event: FIIAC 2026  Event: PwnedCR 2026  Workshop: Weaponizing CloudFormation Advisory: Traefik Version Through 3.7.11  Blog: Signature Optional: Analysis of CVE-2026-28323   Join the conversation in the Bishop Fox Discord server and in the new Bishop Fox subreddit.

  6. 28 Aug

    Audio Fingerprinting, AI-Assisted ICS Attacks & the Zombie Card Bypass

    This episode covers an inaudible browser script fingerprinting AliExpress shoppers, AI-generated exploit scripts lowering the bar on Siemens PLC attacks, and researchers reviving an expired Visa card by rewriting one unsigned field, plus a Black Hat sit-down with InfoLock's Kraig Faulkner on why AI is forcing organizations to understand their own data.    Security Headlines:  AliExpress was silently running audio in your browser to fingerprint and track your device, TechSpot US warns of AI-powered attacks on Siemens PLCs in critical infrastructure, BleepingComputer Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments, The Hacker News    Also mentioned:   Blog: A GUID is Not a Credential: Unauthenticated RCE in Veeam Service Provider Console Blog: No Crash Required: Verifying the Citrix NetScaler SAML Patch for CVE-2026-8452   Join the conversation in the Bishop Fox Discord server and in the new Bishop Fox subreddit.

  7. 28 Aug

    Spliced Instructions, Recycled Bugs, Leaked Addresses & Sold Directories

    A malicious MCP server tricks AI coding agents into leaking secrets, a three-year-old GeoServer bug resurfaces as a zero day, a hardware wallet maker's shipping partner exposes thousands of physical addresses, and a threat actor sells Fortune 500 org charts pulled from stolen Azure credentials.    Security Headlines:  Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets, The Hacker News Hackers Exploiting Unpatched GeoServer Zero-Day, SecurityWeek Trezor Discloses Data Breach Affecting Nearly 14,000 Customers, BleepingComputer Hacker Claims 3.6 Million Azure Account Records Stolen From Major Companies, BleepingComputer    Also mentioned:   Virtual Session: Where AI Breaks: Field Notes from GenAI and Agentic Testing    Join the conversation in the Bishop Fox Discord server and in the new Bishop Fox subreddit.

  8. 14 Aug

    Live from DEF CON at RedTail: Red Teaming After AI

    This week's episode is different. No headlines, no CVEs. Just a live sit-down from Bishop Fox's RedTail meetup at DEF CON, with Bishop Fox's John Untz, Richard Brown, and Billy Giles, joined by Matt Bryant of OpenAI's Red Team, talking through what's signal vs. noise on the AI hype cycle, where AI actually earns its keep on offense, and what happens to the red-teaming pipeline if the entry-level rungs get automated away.

See All (37)

About

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

Information

  • Creator
    Bishop Fox
  • Years Active
    2026
  • Episodes
    37
  • Rating
    Clean
  • Copyright
    © 2026 Bishop Fox
  • Show Website
    Initial Access