What Would AI Need to Red Team?
In a previous post, I stated that no: AI could not perform stealth Red Team Operations. I did, however, say that I think it can. Still, it would require more experimentation from individuals with Red Teaming experience. A Red Team operator has a culmination of technical skills and an adversarial mindset that lets them undermine…
Choosing to be a Sitting Duck
Organizations have realized greater profits by doing business online for decades. Doing business online comes with the cost of operating in a landscape where threat actors exist. Those threat actors also keep improving their ability to profit, thrive, and achieve their objectives at your expense. The cost of a data breach has risen in the…
The 2:1 Advantage of AI for Red Teams
Shortly after Artificial Intelligence took over our news feeds, questions arose about how it would affect the speed and skill of attacks. The second question was if defenders could use it to get ahead. Unfortunately, as the story played out, it gave Red Teams (and therefore adversaries) an advantage they didn’t need. Still, it would…
Can AI Red Team?
We’ve already witnessed AI discover 0-day vulnerabilities, perform penetration testing, and drive security testing tooling. AI has proven to be useful as a Red Teamer in research, tool development, and data analysis. The question I think about often (and get asked) is: Can AI Red Team? By Red Teaming, I mean whether AI can autonomously…
A Red Team view of attack surfaces: Internal
In the brief A Red Teamer View of Attack Surfaces, I laid the groundwork for the conversation about attack surfaces. More recently, in the second part of this series of briefs, A Red Team View of Attack Surfaces: Public, I talked about how Red Teams see your public attack surface. Both provide a more adversarial…
Maximizing Impact During a Red Team Readout
You’ve just completed a Red Team Operation. It was a complex undertaking that required research, tool and technique development, and, of course, lots of patience. Now comes the hard work of conveying your results to the organization. You want to have the best results when talking to the teams involved, leadership, and other stakeholders. Everything…
That’s Not Red Teaming!
Over a decade ago, I attended my first conference with the title Red Teamer. I was waiting in line with a coworker who was a bit newer to Red Teaming but still brought valuable experience to the team. Momentarily, I was distracted by another friend when my coworker started getting interrogated by another conference attendee…
The 10x ROI of Red Teams
Red Teamers are some of the most intelligent, technical, and frankly scary people I have worked with in my entire career. I’ve been amazed at their motivation, ingenuity, and drive to meet their objectives. Regardless of this fact, one thing that has remained consistent across all my experiences is that many Security Leaders don’t know…
Should Red Teams Assume Compromise?
In organizations of all sizes, there are usually various forms of Security Testing, such as Penetration Testing, Application Security, and Red Teaming. When this happens, many different teams may be spending time evaluating the Public Attack Surface. I discussed Public Attack Surfaces in my last brief, but I wanted to take a moment to address…
A Red Team view of attack surfaces: Public
In a previous brief, I presented the building blocks for understanding what we mean by “attack surface.” As mentioned previously, the public attack surface is one of the 3 most important (Public, Internal, and Restricted) to understand, as it exposes a constant risk. Because of this characteristic, it can often serve as a starting point…
Something went wrong. Please refresh the page and/or try again.