Bishop Fox

This is Initial Access.

I'm Sean McMillan, community manager here at Bishop Fox, and joining me this week are Sergio Villegas, senior managing analyst, and Dylan Sparks, senior operator.

Gentlemen, let's, let's get into it.

Let's start with, uh, with this NetScaler business.

You know, the hardest part of any project is just doing it, just starting it.

So that's a great starting point.

And if you're, if you're looking to Red Team or pen test or something like that, join the Bishop Fox one too.

Come on.

Very fast.

Security firms like Bishop Fox and Watchtower reported they were able to reproduce the security flaw via their own honeypots within hours of detecting the initial targeting activity.

Right.

The discovery to exploitation pipeline is incredibly fast here because the underlying mechanics of memory overflows in these specific appliances are, you know, they're well understood by advanced persistent threats.

... just went to Anthropic.

Uh, Bishop Fox, Dan Petro, one of the best offensive hackers, landed at OpenAI.

It's just like they're just like ropes soaking up every bit of talent from externally.

I don't know what will be left outside.

it does happen um it's happened to the best of us overall so um really glad that uh that you're all here today uh let's bring up the chat see what's going on just a uh real quick let me throw this up not with that though that the awesome erica mcduffie and fabulous jack scott 9 30 eastern today they are going to have their next episode of two cyber chicks So make sure you are sticking around after we do the Cyber Career Hotline to check out their episode.

They're going to be chatting with Jessica Weiland of Bishop Fox.

So definitely stick around.

I'll drop the link in there.

Yep.

The security firm Bishop Fox reproduced this complete administrative takeover.

They tested it on vulnerable router OS 7.x builds and proved that the entire device can be compromised remotely, completely bypassing all authentication.

That is game over.

We'll look at a zero-click Exchange vulnerability that immediately jumped to the top of patch priority lists, a campaign where AI agents are autonomously compromising online retailers for about $25 a target, and ShinyHunters claim that it breached the FBI, not for money this time, but apparently for revenge.

And later in the show, I'll sit down with Bishop Fox adversarial operator Emilio Gallegos to unpack his microtrick research, uh, the RouterOS exploit chain that attackers were already using before defenders even knew it existed, and what organizations should be checking for now.

This is Initial Access.

[intro music] I'm Sean McMillan, community manager here at Bishop Fox, and I'm joined today by Kendrick Urbaniak, senior operator exploit developer, and Sergio Villegas, senior managing analyst.

Gentlemen, thanks again for joining.

Hello.

Always a pleasure to be here.

Now, before we jump into today's stories, we have a few things happening around Bishop Fox.

And to the increase of his gains, he had also the bishopric of Durham and the Abbey of St. Albans in commendam.

Howbeit after, when Bishop Fox of Winchester died, he surrendered Durham into the king's hands and in lieu thereof took the bishopric of Winchester.

Then he held also, as it were in farm, both Bath, Worcester, and Hereford, because the incumbents thereof were strangers born out of this realm, continuing always beyond the seas in their own native countries or else at Rome, from whence they were sent by the pope in legation into England to the king.

And for their reward at their departure, the prudent King Harry VII thought it better to reward them with that thing he himself could not keep than to defray or disperse anything of his treasure.

And to the increase of his gains, he had also the bishopric of Durham and the Abbey of St. Albans in commendam.

Howbeit after, when Bishop Fox of Winchester died, he surrendered Durham into the king's hands, and in lieu thereof took the bishopric of Winchester.

Then he held also, as it were in farm, both Bath, Worcester, and Hereford, because the incumbents thereof were strangers born out of this realm, continuing always beyond the seas in their own native countries, or else at Rome, from whence they were sent by the pope in legation into England to the king.

And for their reward at their departure, the prudent King Harry VII thought it better to reward them with that thing he himself could not keep than to defray or disperse anything of his treasure.

And to the increase of his gains, he had also the bishopric of Durham and the abbey of St. Albans in commendam.

Howbeit after, when Bishop Fox of Winchester died, he surrendered Durham into the king's hands, and in lieu thereof took the bishopric of Winchester.

Then he held also, as it were in farm, both Bath, Worcester, and Hereford, because the incumbents thereof were strangers born out of this realm, continuing always beyond the seas in their own native countries, or else at Rome, from whence they were sent by the pope in legation into England to the king.

And for their reward at their departure, the prudent King Harry VII thought it better to reward them with that thing he himself could not keep, than to defray or disperse anything of his treasure.