Initial Access

Bishop Fox

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

  1. 20 июл.

    Attribution and OpSec at Scale

    This week's episode is different. Bishop Fox Red Teamers Brandon Kovacs, Thomas Wilson, and Rob Antonucci talk through what attribution actually looks like when device-level telemetry breaks anonymity, what young attackers with real skills but zero tradecraft have in common, and how one credential reset becomes the master key to everything downstream.    Security Headlines:  Tracking Peter Stokes and The Com: Allison Nixon and Her Work Unmasking Cybercriminals, Zero Day ShinyHunters Raids Nottingham Uni for Student, Alumni Data, The Register   Join the conversation in the Bishop Fox Discord server and in the new Bishop Fox subreddit.

  2. 13 июл.

    Old Backdoors, Ghost Phishing, and Borrowed AI

    This episode breaks down a Tenda router backdoor that turns out to be three years old, a phishing kit called EvilTokens that hides until a victim's browser builds it, and CISA turning Anthropic's Mythos model on the government's own code, plus a sit-down with IoT researcher Matt Evans on why Tenda keeps getting away with it. Security Headlines: · CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware, The Hacker News · New Ghost Phishing Wave Is Breaking Traditional Email Security, The Hacker News · CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws, Security Week   Also mentioned: · Blog: Matt ‘uturn’ Evans · Event: Boston Security Meetup 2026 · Workshop: Social Engineering: How to Build Pressure-Proof Pretexts · Virtual Session: The Prioritization Problem: Why More Findings Don’t Mean Less Risk   Join the conversation in the Bishop Fox Discord server and in the new Bishop Fox subreddit.

  3. 6 июл.

    Cisco Root Access, FortiBleed Credentials, Sparkplug Fuzzing, AI Arms Race

    This episode breaks down a Cisco flaw exploited within 24 hours of disclosure, a credential-harvesting campaign that hit 430,000+ FortiGate firewalls, and what Fable's restricted return and China's Tulongfeng mean for controlling offensive AI. Plus, a sit-down with Bishop Fox's Shad Malloy on building the first open-source Sparkplug B fuzzer for ICS environments. Security Headlines:  In Less Than 24 Hours, Attackers Weaponize Cisco CUCM Flaw, Dark Reading FortiBleed campaign steals 110M credentials from FortiGate targets, SC Media Buckle Up: The Bad Guys Now Have A Model As Powerful As Mythos, Forbes    Also Mentioned:   Research: On Favicons: From Browser Icons to Attack Surface Intelligence Event: Summercon 2026    Event: San Diego Comic-Con 2026   Join the conversation in the Bishop Fox Discord Server.

  4. 29 июн.

    FIFA Takeover, FFMpeg RCE, Klue Breach, Hardware Hacking

    This episode breaks down a public FIFA signup form wired straight to World Cup broadcast controls, an FFmpeg RCE buried in half your media apps, a SaaS breach cascading through delegated OAuth, and home routers conscripted into proxy infrastructure, plus a sit-down with Bishop Fox's Marco Sanchez on hardware hacking.  Security Headlines: I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID, BobDaHacker FFmpeg fixes PixelSmash flaw in widely used video decoder, BleepingComputer Klue hack results in data breach at several cybersecurity firms, TechCrunch How Hackers Found a Back Door Into the American Living Room, The Wall Street Journal  Also Mentioned:  Workshop: Debug to Root: A Friendly Introduction to Hardware Hacking (available in English and Spanish) Virtual Session: Beyond the Hype: What Mythos Actually Means for Security Teams Event: SummerCon 2026 XKCD Comic: Dependency Join the conversation in the Bishop Fox Discord Server.

  5. 22 июн.

    Pokémon GO, ServiceNow Auth Flaw, and the Anthropic Model Pulldown

    This episode explores what happens when the systems people trust quietly extend into domains they never agreed to. A Pokémon GO AR dataset trained a Visual Positioning System now adjacent to military drone navigation. A ServiceNow authentication flaw handed attackers read access to the operational core of enterprise IT. And the US government pulled two frontier AI models off the market over a jailbreak, with no established framework to bring them back.

  6. 15 июн.

    Linux NFTables Root Exploit, Gemini Prompt Injection, and Cisco SD-WAN Zero-Day

    This episode explores how the attack surface keeps expanding at every layer — from a single inverted kernel character enabling unauthenticated root, to AI assistants weaponized as system-wide IPC through notification injection, a Cisco SD-WAN zero-day giving attackers control of enterprise routing fabric, and the week's unavoidable elephant: whether Claude Fable V's guardrails actually hold.

  7. 9 июн.

    Forged VPN Sessions, Autonomous AI Worm, and Hotel Reservation Hijacking

    This episode explores how attackers live in the gap between what a system can verify and what it settles for from forged GlobalProtect VPN sessions to an autonomous AI worm, a social-engineered Meta support bot, voice-phished Salesforce access, and hotel reservation hijacking.

  8. 1 июн.

    Custom Payload Evasion, Chained Network-to-Physical Breach, and Satellite Hacking

    This episode goes inside the Bishop Fox Red Team — exploring how AI accelerates custom payload evasion and social engineering at scale, what a chained network-to-physical breach looks like in practice, and why satellites and gas pumps are reachable from the public internet right now.

См. все (26)

Оценки и отзывы

5
из 5
Оценок: 2

Об этом подкасте

Bishop Fox offensive security researchers, experts, and hackers take a real look at the latest cybersecurity news headlines and have a straight take on them. The goal is simple: do you actually need to care about this, or is it just another variation of the same fundamental security problems we've been dealing with for years?

Информация

  • Автор
    Bishop Fox
  • Годы выхода
    2026
  • Выпуски
    26
  • Ограничения
    С ненормативной лексикой
  • Авторские права
    © 2026 Bishop Fox
  • Сайт подкаста
    Initial Access

Вам может также понравиться