2023 Virtual Seminar Series - Wolf & Co.

As a penetration tester, I have lots of awkward conversations when a client has misguided assumptions about their security. One of the most awkward is when we complete our testing and have a laundry list of low-hanging fruit that needs to be fixed that previous vendors never brought up. This leads to fear, uncertainty, and doubt, often times resulting in one or more of the following:  • But we let you in. • That’s not a realistic scenario. • Our MSSP would have stopped you. • This report does not adequately reflect our environment. • But we’re tracking that issue. • Our report was clean last year. • Why didn’t the previous vendor find this?  Clearly, whoever was hired to do this last time failed to adequately explain why we do what we do.  Offensive security practitioners need to do a better job at partnering with clients to enable them to make security a part of the business that helps it function better, not a cost center that is seen as a burden. Our job is not to play gotcha, it is to help security teams build trust within their organizations that will holistically create a secure environment for all.

Details coming soon!

Details coming soon!

Details coming soon!

Attack Surface Management (ASM), what does that really mean? Attack surface management is a concept that refers to minimizing the potential avenues of an attack that a hacker can use to exploit a system. In this presentation, I will show you how an attacker would be able to leverage open-source intelligence (OSINT) to divulge sensitive information that may lead to the next data breach, and how a company can reduce and take a hold of your own attack surface. Also, we will look into my own attack surface management (ASM) practice. 

Details coming soon!

Details coming soon!

Details coming soon!