Red Siege

After some fantastic KC BBQ at Gates last night, Molly and I are at INTERFACE KC 2025. Great group and I'm thankful for the opportunity to present! If you're here, come stop by the @redsiege.com booth!

A new blog has arrived!

Security Consultant Larry Ellis breaks down the steps he used to overcome input sanitization during a recent web application test 🔗 redsiege.com/breakingclean

#hacking #infosec #cybersecurity

Thanks all for joining today's Wednesday Offensive and thank you @scoubi.bsky.social for taking the time to showcase BloodHound's exciting new feature "OpenGraph". We'll see y'all next week!

#hacking #infosec #cybersecurity

Wake up, it's Wednesday! Today on the Wednesday Offensive we have @scoubi.bsky.social from @specterops.io diving into BloodHound CE 8.0's new feature, OpenGraph!

See you at 130pm ET 🔗 redsiege.com/wedoff

#hacking #infosec #cybersecurity

Over 29,000 Exchange servers unpatched against high-severity flaw Over 29,000 Exchange servers exposed online remain unpatched against a high-severity vulnerability that can let attackers move laterally in Microsoft cloud environments, potentially leading to complet...

Scans performed by the Shadowserver Foundation revealed that over 29,000 Exchange servers remain vulnerable and unpatched against potential CVE-2025-53786 exploits.

via @bleepingcomputer.com

www.bleepingcomputer.com/news/securit...

#hacking #infosec #cybersecurity

Offense for Defense is now On-Demand: Brought to you by CEO @timmedin.bsky.social and Security Consultant Jason Downey 🔗 training.redsiege.com

Your Lab, On Your Time

0️⃣ Zero setup. Total control.
🏰 Built for defenders who want to think like attackers
🖥️ No virtual machines. No VPNs. No downloads.

What all do you need to know about BloodHound CE 8.0 & OpenGraph? @scoubi.bsky.social is joining @redsiege.com's Wednesday Offensive tomorrow to dive into the JSON schema for OpenGraph, how to ingest nodes & edges, best practices, & how to create custom icons.

Join 👉 ghst.ly/46MNltn

Friendly Neighborhood Reminder! On tomorrow's Wednesday Offensive we have Mat Saulnier from SpecterOps discussing BloodHound v8's latest feature "OpenGraph".

Join us at 130pm ET 🔗 redsiege.com/wedoff

#hacking #infosec #cybersecurity

🚨 New Blog Alert 🚨 Security Consultant Stuart Rorer discusses how to leverage redirection in your attacks 🔗 redsiege.com/changingdirections

#hacking #infosec #cybersecurity

For those headed to INTERFACE Kansas City on Aug 14 - catch our CEO @timmedin.bsky.social for his talk "What the Hack is Going On?" 🔗 f2fevents.com/event/kcm25/

#hacking #infosec #cybersecurity

Here's what we have coming up!

#hacking #infosec #cybersecurity

Alright, who did this?! (and how can I get 20 of em)

#hacking #infosec #cybersecurity

Missed the latest SiegeCast? You can find it on our YouTube channel along with hours of the best content in cutting-edge cybersecurity knowledge, expert insights, and practical tips to safeguard your digital assets 🔗 redsiege.com/ytsubscribe

#hacking #infosec #cybersecurity

📰Jump into the new Red Siege newsletter "The Siege Stack" for July 📰 redsiege.com/newsletter

Our monthly collection of all things offensive and cybersecurity!

Get it delivered directly to your inbox every month by going to redsiege.com/signup

#hacking #infosec #cybersecurity

Offense for Defense with Red Siege - Antisyphon Training Welcome to “Offense for Defense,” presented by Red Siege Information Security. A specialized course tailored for information security blue teamers, or defenders, aiming to fortify their skills in offe...

Fresh off of @blackhatevents.bsky.social but we love to bring the training! Our CEO @timmedin.bsky.social will be teaching "Offense for Defense" at the upcoming @antisyphontraining.bsky.social Blue Team Summit on Aug 28

Sign up now 🔗 redsiege.com/btsummit

#hacking #infosec #cybersecurity

Thank you @sk3w.bsky.social for your insights into leveraging creativity and individual strengths in an offensive security team! Next week we have Mat Saulnier from SpecterOps discussing BloodHound's latest feature!

#hacking #infosec #cybersecurity

Wake up, it's Wednesday!

Today on the Wednesday Offensive we have @sk3w.bsky.social, Red Team Lead at Dean Dorton, leading the discussion!

See you at 130pm ET 🔗 redsiege.com/wedoff

#hacking #infosec #cybersecurity

Adobe issues emergency fixes for AEM Forms zero-days after PoCs released Adobe released emergency updates for two zero-day flaws in Adobe Experience Manager (AEM) Forms on JEE after a PoC exploit chain was disclosed that can be used for unauthenticated, remote code executi...

Adobe has issued emergency patches for two critical AEM Forms flaws (CVE-2025-54253, 54254) enabling unauthenticated Remote Code Execution. Admins should update or restrict internet access to vulnerable systems.

Via @bleepingcomputer.com

www.bleepingcomputer.com/news/securit...

New edition of the SiegeStack coming soon! Stay up to date on the latest happenings in cybersecurity, insights from industry professionals, and what we here at RedSiege have in store for you!

Subscribe 🔗 redsiege.com/newsletter

#hacking #infosec #cybersecurity

🔔Friendly neighborhood reminder🔔Tomorrow on The Wednesday Offensive we have @sk3w.bsky.social, Red Team Lead at Dean Dorton, leading the discussion!

Join the conversation at 130pm ET 🔗 redsiege.com/wedoff

#hacking #infosec #cybersecurity

Save the date! New SiegeCast dropping August 26 at 3pm ET. @thekilt.bsky.social and Ian Briley will be bringing you "Leave No Trace" 🔗 redsiege.com/notrace

#hacking #infosec #cybersecurity

Attackers exploit link-wrapping services to steal Microsoft 365 logins A threat actor has been abusing link wrapping services from reputed technology companies to mask malicious links leading to Microsoft 365 phishing pages that collect login credentials.

A threat actor has abused link-wrapping from organizations like Proofpoint and Intermedia to hide phishing links targeting Microsoft 365 logins, using fake Teams and voicemail alerts to steal credentials.

Via @bleepingcomputer.com

www.bleepingcomputer.com/news/securit...

Here is what we have coming up!

#hacking #infosec #cybersecurity

YouTube video by Red Siege RED SIEGE HACKING LOFI VOL 2

🎧 Get into the Red Siege Hacking LOFI Vol II tracks 🎧

For wherever your adventures may lead you this weekend!

youtu.be/inbB8ihzpPY?...

#hacking #infosec #cybersecurity

🚨 Only 2 more sleeps til BlackHat 🚨 Catch @timmedin.bsky.social, Mike Saunders, and Corey Overstreet for "Red Team Tactics" starting this Saturday, August 2nd. Still time to enroll 🔗 redsiege.com/blackhat-rtt

#hacking #infosec #cybersecurity #training

Hackers target Python devs in phishing attacks using fake PyPI site The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website.

The Python Software Foundation warns of phishing emails directing users to a fake PyPI site (pypj. org) to steal credentials. PyPI isn’t hacked, but users are urged to stay alert.

www.bleepingcomputer.com/news/securit...

Via @bleepingcomputer.com

#hacking #infosec #cybersecurity

Super informative Wednesday Offensive today! Thank you Brett Fernicola for sharing all your tools and techniques for securing an environment against the likes of Scattered Spider! Next week we have John Askew! We'll see you there.

#hacking #infosec #cybersecurity