Recently, as part of our ANTISOC Continuous Penetration Testing (CPT) service, I had an opportunity to investigate how attackers can leverage Slack in cyber-attacks, similar to how we frequently use […]
The post Introducing SlackEnum: A User Enumeration Tool for Slack appeared first on Black Hills Information Security.
The post Webcast: How to Burn Out in Infosec (and what to do next) w/ Corey Ham and Others appeared first on Black Hills Information Security.
How to make sure your antivirus is working without any malware Michael Allen // Recently, a customer asked me if there was a way they could generate alerts from the new antivirus product they deployed without executing any actual […]
The post Is This Thing On? appeared first on Black Hills Information Security.
During remote red team exercises, it can be difficult to keep from leaking information to the target organization’s security team. Every interaction with the target’s website, every email sent, and […]
The post Webcast: OPSEC Fundamentals for Remote Red Teams appeared first on Black Hills Information Security.
Michael Allen // Every year around the holidays I end up having a conversation with at least one friend or family member about the importance of choosing unique passwords for […]
The post The Paper Password Manager appeared first on Black Hills Information Security.
Michael Allen // A couple of years ago, I had a YubiKey that was affected by a security vulnerability, and to fix the issue, Yubico sent me a brand new […]
The post How to Weaponize the Yubikey appeared first on Black Hills Information Security.