Pinned Tweet
Offense for Defense is now On-Demand: Brought to you by CEO @TimMedin and Security Consultant Jason Downey 🔗 training.redsiege.com
Your Lab, On Your Time
0️⃣ Zero setup. Total control.
🏰 Built for defenders who want to think like attackers
Your Lab, On Your Time
0️⃣ Zero setup. Total control.
🏰 Built for defenders who want to think like attackers
2
2
10
2,517
Huge thanks to Andy Pettit for joining us on the WedOff and walking us through xdr-cli, showing off its capabilities, and digging into some of the ways attackers could abuse Microsoft Defender's Live Response feature!
See y'all next week!
See y'all next week!
0
0
1
218
Did someone say tricks, treats, and attack techniques?
It's Wednesday! And on today's WedOff we've got Andy Pettit talkin about his new xdr-cli tool and some attacker uses of Microsoft Defender.
See you at 130pm ET 🔗 redsiege.com/wedoff 🥸🎃👻
It's Wednesday! And on today's WedOff we've got Andy Pettit talkin about his new xdr-cli tool and some attacker uses of Microsoft Defender.
See you at 130pm ET 🔗 redsiege.com/wedoff 🥸🎃👻
1
0
0
245
Your next cybersecurity training doesn't have to wait for the next conference.
⚔️ Offense for Defense
⚔️ Penetration Testing: Beyond the Basics
⚔️ Modern Shellcode Obfuscation
Real-world skills. Hands-on training. On your schedule. On-demand.
🔗 training.redsiege.com
⚔️ Offense for Defense
⚔️ Penetration Testing: Beyond the Basics
⚔️ Modern Shellcode Obfuscation
Real-world skills. Hands-on training. On your schedule. On-demand.
🔗 training.redsiege.com
0
1
2
307
Friendly neighborhood reminder!
Tomorrow on The Wednesday Offensive we'll have Andy Pettit leading the discussion on his new xdr-cli tool and some of the attacker uses of Microsoft Defender.
Join the conversation at 130pm ET 🔗 redsiege.com/wedoff 👻🎃🥸
Tomorrow on The Wednesday Offensive we'll have Andy Pettit leading the discussion on his new xdr-cli tool and some of the attacker uses of Microsoft Defender.
Join the conversation at 130pm ET 🔗 redsiege.com/wedoff 👻🎃🥸
0
0
2
267
Sr. Security Consultant Justin Palk continues his Windows domain lab series by walking through how to install and configure Sysmon, integrate it with Elastic, and use the resulting logs to better understand what defenders may see when testing attacks, payloads, and tooling. 🔗👇
1
2
31
1,164
PHP2Shell is officially being exploited in the wild. Researchers confirmed successful remote code execution through two critical PHP vulnerabilities, with emergency patches now available.
via @BleepinComputer
🔗 bleepingcomputer.com/news/security/…
via @BleepinComputer
🔗 bleepingcomputer.com/news/security/…
0
0
2
342
Here's what we've got coming up this week!
Join us for The Wednesday Offensive, every Wednesday at 130pm ET. This week Andy Pettit will be talking about his xdr-cli tool released at WWHF and some of the attacker uses of Microsoft Defender.
🔗 redsiege.com/wedoff
Join us for The Wednesday Offensive, every Wednesday at 130pm ET. This week Andy Pettit will be talking about his xdr-cli tool released at WWHF and some of the attacker uses of Microsoft Defender.
🔗 redsiege.com/wedoff
0
1
1
227
Think Content Security Policies are just another security header?
Listen in as Red Siege Security Consultants Douglas and Stuart discuss Cross-Site Scripting (XSS), and hear Douglas explain why CSPs are far more powerful than most people realize.
Listen in as Red Siege Security Consultants Douglas and Stuart discuss Cross-Site Scripting (XSS), and hear Douglas explain why CSPs are far more powerful than most people realize.
0
0
6
536
Red Siege Information Security retweeted
For years this will be a case study on internal phishing gone wrong.
I’d bet they weren’t going to give rings, but because of this mess up, they have to (good?).
Tests like this gauge the effectiveness of the ruse, not the effectiveness of the staff. See my @WWHackinFest talk.
I’d bet they weren’t going to give rings, but because of this mess up, they have to (good?).
Tests like this gauge the effectiveness of the ruse, not the effectiveness of the staff. See my @WWHackinFest talk.
MSG employees thought they were getting a Knicks championship ring. They got cybersecurity training instead 🤨
A dummy email from the Knicks with two ring options was sent to employees, but clicking on a selection resulted in receiving a mandatory course on how to avoid eAthletic.
1
1
5
623
Reports are in. Vibes are loading... 🎧
youtu.be/6xzwT9ueSwM?si…
#hacking #infosec #cybersecurity #lofi
youtu.be/6xzwT9ueSwM?si…
#hacking #infosec #cybersecurity #lofi
0
0
0
234
Huge thanks to Brian Halbach for joining the WedOff to talk about life on both sides of cybersecurity consulting, vulnerability management, and the challenges of getting security findings fixed.
See y'all next week! ⚔️
🔗 redsiege.com/wedoff
See y'all next week! ⚔️
🔗 redsiege.com/wedoff
0
1
7
365
It's time for the 2nd Best Show on the Internet: The Wednesday Offensive!
Today we have Brian Halbach talkin about vulnerability management, its connection to offensive security, and the challenges of keeping up with an endless flood of CVEs.
See you at 130pm ET 🔗👇
Today we have Brian Halbach talkin about vulnerability management, its connection to offensive security, and the challenges of keeping up with an endless flood of CVEs.
See you at 130pm ET 🔗👇
0
0
0
185
Friendly Neighborhood Reminder!
Tomorrow on The WedOff, Brian Halbach joins us to talk vulnerability management, offensive security, and the never-ending flood of CVEs.
Join us at 130pmET 🔗 redsiege.com/wedoff
Tomorrow on The WedOff, Brian Halbach joins us to talk vulnerability management, offensive security, and the never-ending flood of CVEs.
Join us at 130pmET 🔗 redsiege.com/wedoff
0
0
0
191
Senior Security Consultant Justin Palk expands on his original Windows AD lab series with new capabilities designed to make your lab more realistic and versatile.
The first installment shows you how to deploy Elastic Defend EDR 🔗 redsiege.com/elastic-defend
The first installment shows you how to deploy Elastic Defend EDR 🔗 redsiege.com/elastic-defend
0
0
5
323
ConnectWise suspends Cloud Backup and other services after attackers compromise app identities to access Microsoft 365 tenants. Backups and restores remain unavailable.
via @TheHackersNews
thehackernews.com/2026/10/connec…
via @TheHackersNews
thehackernews.com/2026/10/connec…
0
0
0
265
Here's what we've got coming up this week!
This week on The Wedoff Brian Halbach will be talking about the transition from cybersecurity consulting to cybersecurity in the Fortune 500 world, and vice-versa.
🔗 redsiege.com/wedoff
This week on The Wedoff Brian Halbach will be talking about the transition from cybersecurity consulting to cybersecurity in the Fortune 500 world, and vice-versa.
🔗 redsiege.com/wedoff
0
0
1
235
Red Siege Senior Security Consultant Justin Palk continues his series on expanding a Windows AD lab, this time walking through how to add Microsoft SQL Server Express to Windows Server 2022 Server Core Edition. 🔗 redsiege.com/ms-sql-server
#hacking #infosec #cybersecurity
#hacking #infosec #cybersecurity
0
4
7
504
Seeing where @TimMedin stickers end up is my favorite part of any con. Spotted this bad boy last week at @WWHackinFest!
Drop your best Tiny Tim photos below. (Trust me, he won't find out, I'm pretty sure he doesn't know how the internet works.)
Drop your best Tiny Tim photos below. (Trust me, he won't find out, I'm pretty sure he doesn't know how the internet works.)
1
0
4
355
