HiSolutions<p>🔐 IT-Sicherheitskonferenz 2025 – Save the Date!</p><p>📅 30.09.–02.10. | 📍 Hochschule Stralsund | 💻 Hybrid (Präsenz & Livestream)</p><p>Zum 14. Mal treffen sich IT-Profis, Entscheider:innen und Interessierte zum Austausch über aktuelle Trends, spannende Vorträge und Networking in der IT-Security-Welt.</p><p>🎤 Highlight: Unser Kollege Marcel Heisel erklärt in seinem Vortrag die Unterschiede zwischen Red-Teaming, Penetrationstests und technischen Audits – und wann was sinnvoll ist.</p><p>👉 Infos und Anmeldung: <a href="https://www.it-sicherheitskonferenz.de/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="">it-sicherheitskonferenz.de/</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/ITSK2025" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ITSK2025</span></a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CyberSecurity</span></a> <a href="https://infosec.exchange/tags/RedTeam" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>RedTeam</span></a> <a href="https://infosec.exchange/tags/PenTest" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PenTest</span></a> <a href="https://infosec.exchange/tags/Networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Networking</span></a> <a href="https://infosec.exchange/tags/Stralsund" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Stralsund</span></a> <a href="https://infosec.exchange/tags/ITKonferenz" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ITKonferenz</span></a> <a href="https://infosec.exchange/tags/ITSicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ITSicherheit</span></a> <a href="https://infosec.exchange/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ITSecurity</span></a> <a href="https://infosec.exchange/tags/Redteaming" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Redteaming</span></a> <a href="https://infosec.exchange/tags/ITSicherheitskonferenz" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ITSicherheitskonferenz</span></a></p>
#RedTeaming
0 posts0 participants0 posts today
Neu im Research-Blog: Red-Team Glossar
Begriffe wie #RedTeaming #Penetrationstest oder Adversary Simulation begegnen uns immer wieder – doch was bedeuten sie wirklich? Unser Glossar bündelt die wichtigsten Fachbegriffe aus der Welt der offensiven #Cybersicherheit an einem Ort.
Klar strukturiert und verständlich von unseren Experten Marcel Heisel und Rouven Koslowski erklärt, hilft es dabei, die oft missverständlich oder inflationär genutzten Begriffe richtig einzuordnen und besser zu verstehen.
Jetzt aufschlauen 
https://research.hisolutions.com/2025/08/red-team-glossar/
#ResearchBlog #Resilienz #Pentest
Red-Teaming: Mehr als nur ein Penetrationstest!
Sie wollen wissen, wie gut Ihre Sicherheitsmaßnahmen wirklich sind? Dann ist ein echtes Red-Team-Assessment genau das Richtige!
In unserem neuen Website-Artikel erklären wir die Unterschiede zu einem klassischen Pentest oder Schwachstellenscan, zeigen typische Missverständnisse auf und geben einen praxisnahen Leitfaden zur Auswahl der richtigen Methodik: https://www.hisolutions.com/detail/redteam
Sie wollen direkt loslegen? Unser Beratungsbudget für Red- und Purple-Teaming bietet maximale Flexibilität und volle Kostenkontrolle – ideal für gezielte Tests und Tabletop-Übungen: https://www.hisolutions.com/detail/redteam-beratungsbudget
Gemeinsam analysieren wir Ihre IT-Umgebung, simulieren realistische Angriffe und helfen Ihre Resilienz zu steigern, bevor es echte Angreifende tun.
A Practical Guide to Building a Red Teaming Strategy for AI – Source: securityboulevard.com https://ciso2ciso.com/a-practical-guide-to-building-a-red-teaming-strategy-for-ai-source-securityboulevard-com/ #AIandMachineLearninginSecurity #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #CyberSecurityNews #SecurityAwareness #SecurityBoulevard #SocialFacebook #SocialLinkedIn #Cybersecurity #AIsecurity #RedTeaming #SocialX
CISO2CISO.COM & CYBER SECURITY GROUP · A Practical Guide to Building a Red Teaming Strategy for AI – Source: securityboulevard.comSource: securityboulevard.com - Author: Sailesh Mishra
Start your red teaming journey with intent, not ambition. Designate a lead with both AI literacy and
test your skills by joining @bsidesfra's fun and challenging covert access vault, sponsored by NVISO. who knows, you may be the lucky winner
#BSidesFRA #BSidesFrankfurt #RedTeaming #PhysicalSecurity #CyberSecurity #InfoSec #HandsOn #NVISO
Infosec ExchangeBSidesFrankfurt (@bsidesfra@infosec.exchange)Attached: 4 images
We aim to impress you more every year-this time with hands-on physical attack challenges! Test your skills on NVISO's amazing covert access vault. Don't fear AI taking your job; become a physical red teamer (or burglar)!
#BSidesFRA #BSidesFrankfurt #RedTeaming #PhysicalSecurity #CyberSecurity #InfoSec #HandsOn #NVISO
Red Teaming AI: The Build Vs Buy Debate https://www.securityweek.com/red-teaming-ai-the-build-vs-buy-debate/ #ArtificialIntelligence #generativeAI #RedTeaming #RedTeam #AI
Red Teaming AI: The Build Vs Buy Debate https://www.securityweek.com/red-teaming-ai-the-build-vs-buy-debate/ #ArtificialIntelligence #generativeAI #RedTeaming #RedTeam #AI
Realitätsnahe Angriffssimulation als Service
#Angriffssimulation @Bugcrowd #CrowdsourcedCybersecurity #Cybersecurity #RedTeam #RedTeamasaService #RedTeaming #RTaaS #Security @BugcrowdHunter
https://netzpalaver.de/2025/04/29/realitaetsnahe-angriffssimulation-als-service/
Sapphire Ticket Attack: Abusing Kerberos Trust - The broad usage of Active Directory has made Kerberos attack the bread and butter ... https://www.hackingarticles.in/sapphire-ticket-attack-abusing-kerberos-trust/ #redteaming
Hacking Articles · Sapphire Ticket Attack: Abusing Kerberos Trust - Hacking ArticlesThe broad usage of Active Directory has made Kerberos attack the bread and butter of many hackers. Researchers have discovered the following new attacks techniques
AD Certificate Exploitation: ESC1 - The AD CS (Active Directory Certificate Services) certificate template is a predef... https://www.hackingarticles.in/ad-certificate-exploitation-esc1/ #redteaming
Hacking Articles · AD Certificate Exploitation: ESC1 - Hacking ArticlesThe AD CS (Active Directory Certificate Services) certificate template is a predefined configuration in Microsoft AD CS that defines the type of certificate a user,
Credential Dumping: GMSA - ReadGMSAPassword Attack is a technique where attackers abuse misconfigured Group M... https://www.hackingarticles.in/credential-dumping-gmsa/ #redteaming
Hacking Articles · Credential Dumping: GMSA - Hacking ArticlesReadGMSAPassword Attack is a technique where attackers abuse misconfigured Group Managed Service Accounts (gMSA) to retrieve their passwords. In Active Directory, only specific computers or
Which Top Cybersecurity Role of 2024 Was Featured in 64,000+ Job Postings? – Source: www.techrepublic.com https://ciso2ciso.com/which-top-cybersecurity-role-of-2024-was-featured-in-64000-job-postings-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #ArtificialIntelligence #SecurityonTechRepublic #SecurityTechRepublic #securityengineering #CyberSecurityNews #securityanalysts #Cybersecurity #TechIndustry #jobseeking #RedTeaming #Security #techjobs #hiring #News
CISO2CISO.COM & CYBER SECURITY GROUP · Which Top Cybersecurity Role of 2024 Was Featured in 64,000+ Job Postings? – Source: www.techrepublic.comSource: www.techrepublic.com - Author: Megan Crouse Security engineer was the most common title in cybersecurity job listings in 2024, according to se
Shadow Credentials Attack - In this post, we explore the exploitation technique known as the Shadow Credential... https://www.hackingarticles.in/shadow-credentials-attack/ #redteaming
Hacking Articles · Shadow Credentials Attack - Hacking ArticlesIn this post, we explore the exploitation technique known as the Shadow Credentials attack. This attack leverages the mismanagement or exploitation of Active Directory Certificate
"#AI #redteaming is #Bullshit"
Conference's inaugural "Hackers' Almanack" report
https://harris.uchicago.edu/sites/default/files/the_def_con_32_hackers_almanack.pdf
Period.
Abusing AD Weak Permission Pre2K Compatibility - Pre2K (short for “Pre-Windows 2000”) Active Directory misconfigurations often stem... https://www.hackingarticles.in/abusing-ad-weak-permission-pre2k-compatibility/ #redteaming
Hacking Articles · Abusing AD Weak Permission Pre2K Compatibility - Hacking ArticlesPre2K (short for “Pre-Windows 2000”) Active Directory misconfigurations often stem from overlooked legacy settings in Windows environments. Common issues include enabling NTLM or SMBv1 for
AD Recon: Kerberos Username Bruteforce - In this post, we explore the exploitation technique known as the Kerberos pre-auth... https://www.hackingarticles.in/ad-recon-kerberos-username-bruteforce/ #redteaming
Hacking Articles · AD Recon: Kerberos Username Bruteforce - Hacking ArticlesIn this post, we explore the exploitation technique known as the Kerberos pre-authentication brute-force attack. This attack takes advantage of Kerberos authentication responses to determine
Credential Dumping: AD User Comment - In this article, we shall explore different tools & techniques that help us en... https://www.hackingarticles.in/credential-dumping-ad-user-comment/ #redteaming
Hacking Articles · Credential Dumping: AD User Comment - Hacking ArticlesIn this article, we shall explore different tools & techniques that help us enumerate Active Directory (AD) users’ passwords using which an attacker can expand
Diamond Ticket Attack: Abusing kerberos Trust - The Diamond Ticket attack represents a sophisticated escalation in Active Director... https://www.hackingarticles.in/diamond-ticket-attack-abusing-kerberos-trust/ #redteaming
Hacking Articles · Diamond Ticket Attack: Abusing kerberos Trust - Hacking ArticlesThe Diamond Ticket attack represents a sophisticated escalation in Active Directory (AD) exploitation methods, leveraging intricate flaws in Kerberos authentication and authorization mechanisms. This article
"Lessons From Red Teaming 100 Generative AI Products"
#ai #redteaming #cybersecurity
https://arxiv.org/abs/2501.07238
arXiv.orgLessons From Red Teaming 100 Generative AI ProductsIn recent years, AI red teaming has emerged as a practice for probing the safety and security of generative AI systems. Due to the nascency of the field, there are many open questions about how red teaming operations should be conducted. Based on our experience red teaming over 100 generative AI products at Microsoft, we present our internal threat model ontology and eight main lessons we have learned:
1. Understand what the system can do and where it is applied
2. You don't have to compute gradients to break an AI system
3. AI red teaming is not safety benchmarking
4. Automation can help cover more of the risk landscape
5. The human element of AI red teaming is crucial
6. Responsible AI harms are pervasive but difficult to measure
7. LLMs amplify existing security risks and introduce new ones
8. The work of securing AI systems will never be complete
By sharing these insights alongside case studies from our operations, we offer practical recommendations aimed at aligning red teaming efforts with real world risks. We also highlight aspects of AI red teaming that we believe are often misunderstood and discuss open questions for the field to consider.