Red Siege

Offense for Defense is now On-Demand: Brought to you by CEO @timmedin.bsky.social and Security Consultant Jason Downey 🔗 training.redsiege.com Your Lab, On Your Time 0️⃣ Zero setup. Total control. 🏰 Built for defenders who want to think like attackers 🖥️ No virtual machines. No VPNs. No downloads.

Senior Security Consultant Justin Palk continues his Windows domain lab series by walking through how to install and configure Sysmon, integrate it with Elastic, and use the resulting logs to better understand what defenders may see when testing attacks, payloads, and tooling. 🔗 redsiege.com/sysmon

PHP2Shell is officially being exploited in the wild. Researchers confirmed successful remote code execution through two critical PHP vulnerabilities, with emergency patches now available. via @bleepingcomputer.com 🔗 www.bleepingcomputer.com/news/securit...

Here's what we've got coming up this week! Join us for The Wednesday Offensive, every Wednesday at 130pm ET. This week Andy Pettit will be talking about his xdr-cli tool released at WWHF and some of the attacker uses of Microsoft Defender. 🔗 redsiege.com/wedoff

Think Content Security Policies are just another security header? Listen in as Red Siege Security Consultants Douglas and Stuart discuss Cross-Site Scripting (XSS), and hear Douglas explain why CSPs are far more powerful than most people realize. #hacking #infosec #cybersecurity

Reports are in. Vibes are loading... 🎧 youtu.be/6xzwT9ueSwM?... #hacking #infosec #cybersecurity #lofi

Huge thanks to Brian Halbach for joining WedOff to talk about life on both sides of cybersecurity consulting, vulnerability management, and the challenges of getting security findings fixed. See y'all next week! ⚔️ 🔗 redsiege.com/wedoff

It's time for the 2nd Best Show on the Internet: The Wednesday Offensive! Today we have Brian Halbach talkin about vulnerability management, its connection to offensive security, and the challenges of keeping up with an endless flood of CVEs. See you at 130pm ET 🔗 redsiege.com/wedoff

Friendly Neighborhood Reminder! Tomorrow on The WedOff, Brian Halbach joins us to talk vulnerability management, offensive security, and the never-ending flood of CVEs. Join us at 130pm ET 🔗 redsiege.com/wedoff

Senior Security Consultant Justin Palk expands on his original Windows AD lab series with new capabilities designed to make your lab more realistic and versatile. The first installment shows you how to deploy Elastic Defend EDR 🔗 redsiege.com/elastic-defend #hacking #infosec #cybersecurity

ConnectWise suspends Cloud Backup and other services after attackers compromise app identities to access Microsoft 365 tenants. Backups and restores remain unavailable. via @thehackernews.bsky.social thehackernews.com/2026/10/conn...

Here's what we've got coming up this week! This week on The Wedoff Brian Halbach will be talking about the transition from cybersecurity consulting to cybersecurity in the Fortune 500 world, and vice-versa. 🔗 redsiege.com/wedoff

Red Siege Senior Security Consultant Justin Palk continues his series on expanding a Windows AD lab, this time walking through how to add Microsoft SQL Server Express to Windows Server 2022 Server Core Edition. 🔗 redsiege.com/ms-sql-server #hacking #infosec #cybersecurity

AWS ReadOnlyAccess can reveal more than you think. In his latest blog, Principal Security Consultant Mike Saunders breaks down how this policy can expose sensitive information, including passwords, secrets, container data, Lambda code, and more. 🔗 redsiege.com/access-policy

Do you really know what's inside your mobile app? In this blog, Security Consultant Stuart Rorer breaks down how unexpected TLS pinning, third-party code, and AI-generated code can create security risks and waste valuable testing time. 🔗 redsiege.com/trust

Thank you Kyle Hendrickson for leading this week's discussion on collaborative assumed breach testing. We'll see y'all next week. 🔗 redsiege.com/wedoff

Friendly Neighborhood Reminder! On Tomorrow's Wednesday Offensive we're gonna have Kyle Hendrickson talking about assumed breach and what's next. Be sure to tune in at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

@wildwesthackinfest.bsky.social 🤝 Red Siege Vishing CTF Congrats to all the winners, and thank you to everyone that participated! ☎️⚔️ #hacking #infosec #cybersecurity #wwhf #vishing #ctf

It's Tuesday and we're still recovering from @wildwesthackinfest.bsky.social Worth it. ⚔️ 2 trainings 🛠️ 2 workshops 🎤 1 talk 📞 12 Vishing CTF winners 😎 100s of swag giveaways 🤝 Countless new friends 😴 1 tired Red Siege crew Huge thanks to the WWHF crew and everyone who joined us!

GitLab is urging users to patch a critical vulnerability (CVE-2026-97229) that could allow unauthenticated attackers to remotely execute code. Fixes are available for affected versions. via @bleepingcomputer.com www.bleepingcomputer.com/news/securit...

Here's what we've got coming up this week! Join The Wednesday Offensive, every Wednesday at 130pm ET 🔗 redsiege.com/wedoff #hacking #infosec #cybersecurity

We're happy to be here at Wild West Hackin Fest! Come stop by the Red Siege booth to meet the team and get some swag!

Having fun with @redsiege.com at #wwhf ( @wildwesthackinfest.bsky.social ) on Deadwood this year

Livin it up in Deadwood! @redsiege.com

Sponsor Stampede at Wild West Hackin'​ Fest is kicking off! Come find the Red Siege Squad at Wild Bill Bar for some offensive shenanigans #hacking #infosec #cybersecurity #wwhf

Here's what we've got coming up! Check out our full guide on where to find the Red Siege squad in Deadwood 🔗 redsiege.com/deadwood-guide26 Join the Wednesday Offensive 🔗 redsiege.com/wedoff

Our YouTube is packed with hours of expert-driven content covering cutting-edge attack techniques, real-world threats, and practical security insights you can actually use. Whether you're deep in the field or sharpening your edge, there’s something here for you. 🔗 redsiege.com/ytsubscribe

Enhance you skills. Expand your knowledge. Fortify your expertise. Red Siege Training delivers cutting-edge courses for both offensive and defensive security professionals. Built by practitioners doing the work every day. 🔗 redsiege.com/training #hacking #infosec #cybersecurity #training

Somewhere between initial access and weekend access. 🎧 🔊 #hacking #infosec #cybersecurity

Turns out, ReadOnlyAccess can read quite a bit. In his latest blog, Principal Security Consultant Mike Saunders digs into AWS ReadOnlyAccess and how it can expose passwords, secrets, container data, Lambda code, and more. 🔗 redsiege.com/access-policy

PRIVILEGES ELEVATED 🔓 Jason Downey has officially been promoted to Senior Security Consultant! For six years, Jason has been breaking things, finding ways in, and making Red Siege better. When we say we’re offensive, Jason leads the way. ⚔️ MASSIVE congrats, Jason! 🎉

THAT’S A WRAP! 🎬 Jason Downey’s September WedOff takeover is officially in the books! We closed it out with assumed breach testing, ADCS, LAPS, delegation attacks & more. Big thanks to everyone who joined us all month. See y’all next week! 🔗 redsiege.com/wedoff

How it started: “Wild West Hackin'​ Fest Deadwood will be here before we know it.” How it’s going: IT’S NEXT WEEK. Trainings. Talks. Offensiveness. A whole lot of Red Siegers in one place. See what we’re getting up to 🔗 redsiege.com/deadwood-gui... #wwhf #hacking #infosec #cybersecurity

🔔 Friendly Neighborhood Reminder 🔔 Tomorrow is the FINAL week of Security Consultant Jason Downey’s WedOff takeover! Join us at 130pm ET as Jason brings it home with a discussion on privilege escalation & lateral movement. One last WedOff with Jason. Be there. 🔗 redsiege.com/wedoff

Your shellcode worked. Then AV said: 🚨 Learn why common payloads get detected and explore practical obfuscation techniques in "Modern Shellcode Obfuscation" with Principal Security Consultant Mike Saunders. Hide the Payload. Expand the Toolkit. 🔗 redsiege.com/modsho

THE FINAL WEEK HAS ARRIVED! Security Consultant Jason Downey’s month-long WedOff takeover is coming to a close. Join us this Wednesday at 130pm ET as Jason wraps things up with privilege escalation & lateral movement. Let’s put a ribbon on this thing 🔗 redsiege.com/wedoff

JadePuffer is using AI-driven attacks to target Microsoft Azure, stealing credentials and destroying cloud resources. In observed attacks, the group deleted over 100 storage accounts. via @bleepingcomputer.com www.bleepingcomputer.com/news/securit...

Here's what we've got coming up! Join the Wednesday Offensive 🔗 redsiege.com/wedoff Check out our full guide to @wildwesthackinfest.bsky.social 🔗 redsiege.com/deadwood-gui...

Listen in as Security Consultant Stuart Rorer explains how he tackles SSL pinning in mobile apps and puts Frida to work during real-world engagements: #hacking #infosec #cybersecurity

The machine may be virtual, but our feelings about it are very real. 🔊 Sweet Release (The VMs Song) redsiege.com/vm-music-video #hacking #infosec #cybersecurity

Red Siege is heading back to @wildwesthackinfest.bsky.social Deadwood! Training. Talks. Workshops. Vishing CTF. Swag. And a whole crew of Red Siegers. See everything we’ve got planned for WWHF 🔗 redsiege.com/deadwood-guide26

Loading... The Siege Stack [▰▰▰▰▰▰▰▱] 90% We’re stacking up the latest cybersecurity news, industry insights, and everything happening at Red Siege and sending it straight to your inbox. Get on the list before the next edition drops 🔗 redsiege.com/signup

Huge thanks to Jason Downey for leading this week’s WedOff on payload delivery and C2. See you next time for the final week of Jason's takeover 🔗 redsiege.com/wedoff