Riots are spreading around (and even beyond) Europe. How would you advise your clients to protect themselves, their properties, and their livelihoods? Share your thoughts in the comments. 👇
Hear what Brian has to say about it: youtu.be/Jath_pb5JyQ?si=nYoO…
Federal investigators suspect a cybersecurity executive helped ShinyHunters run its extortion infrastructure.
The FBI says the group collected $70M+ in 2026. Were ransomware negotiators involved?
Read more: covertaccessteam.substack.co…
#Cybersecurity #Ransomware
A University of Wyoming researcher allegedly poisoned a coworker to steal his cancer research before returning to China.
Security footage reportedly caught her accessing his workspace after midnight.
Another disturbing insider threat case.
covertaccessteam.substack.co…
Want to break into physical penetration testing? Start with audits.
They're a great way to gain experience and build a client base, while giving clients a faster, cheaper way to identify security flaws.
🎓 PACT Training | Nov 21–22
covertaccessteam.com/physica…
🚨 You can now get infected with spyware just by viewing an online ad. No clicks required.
Researchers uncovered "AdFection," a zero-click attack involving 75,000+ apps and 120,000+ websites.
Read now: covertaccessteam.substack.co… | #CyberSecurity #Spyware
For $20–$40, you can buy a miniature listening device with an 18-hour battery, voice activation, and 16GB of storage.
But how useful are these devices during an actual physical penetration test?
Let's take a closer listen:
covertaccessteam.substack.co…
The EU spent €1.4 BILLION on a cyber early warning system.
But, not ONE member state has reported a "large-scale" incident since 2016.
WannaCry? Nope. CrowdStrike? Nope. Airport ransomware? Nope.
So what exactly is this system warning anyone about? youtu.be/jQ91Fq72KJE?si=H50A…
Three recent insider threat cases involving Berkeley, the University of Wyoming, and OpenAI highlight a serious problem with how organizations approach physical security.
Let's break down these three cases: youtu.be/VFg2DIx4Gg8?si=TXSH…
🚨 A cyber incident at Albert Heijn disrupted food deliveries and emptied shelves. Now the Dutch government is considering emergency food reserves.
Read the full story: covertaccessteam.substack.co…
Your next social engineering skill upgrade starts this weekend.
There’s still time to join us October 24–25 for our Elicitation Toolbox Training (ETT) course! Learn more and register: covertaccessteam.com/elicita…
#SocialEngineering #Elicitation #SecurityTraining #Pentesting
🔐 Your front door lock might look solid, but a few millimeters of exposed Eurocylinder can make it vulnerable to snapping.
Even worse, an attacker could potentially replace the lock without you noticing.
Do you know how secure your locks really are?
▶️ youtu.be/ljEb0FZFOGQ?si=xy7_…
Locks, cameras, action! 🎬 If your next physical penetration test had a soundtrack, this would be the opening track.
Because having security measures in place doesn't necessarily mean you're secure.
Listen: youtu.be/m1FV_JWkHAU?si=_qv4…
An OpenAI engineer allegedly bugged an executive conference room, concealing the recording device with... toilet paper. 🧻
Would a wad of toilet paper behind your conference room TV raise suspicion?
Read now: covertaccessteam.substack.co…
Hackers reportedly raised refrigeration temperatures to 50°C across hundreds of French supermarkets, destroying food remotely.
As Europe connects more critical infrastructure to the Internet, are we creating more opportunities for attacks like this?
covertaccessteam.substack.co…
What if the insider threat is targeting YOU, not your organization?
A California engineer suffered repeated illnesses before a hidden camera caught her coworker contaminating her water: covertaccessteam.substack.co…
Being trusted by an organization doesn't make someone trustworthy.
Could AI be making you more vulnerable to social engineering?
Getting frustrated with ChatGPT might seem harmless, but could those emotional habits carry over into real conversations, making you easier to manipulate?
▶️ covertaccessteam.substack.co…
Airports spend millions keeping threats OUT. But what if the threat is already in the cockpit?
A Flydubai co-pilot allegedly tried to seize control mid-flight, exposing a critical weakness in security: trusted insiders.
Read more: covertaccessteam.substack.co…
Another successful Covert Access Training in the books!
Five days of hands-on training in physical security, access control, social engineering, recon, and more—ending with students putting their skills to the test.
Next courses: covertaccessteam.com/covert-…
Rules for black teams: don’t be stupid, don’t get caught.
Getting caught by the client can be part of the test. Getting caught by everyone else—especially when it provides the client no useful information—is another story: covertaccessteam.substack.co…
How can you access a client’s building AND server room—and still fail the engagement?
Because breaking in wasn’t the only objective.
This article looks at how a successful physical pentest can still fail to address the client’s actual security concerns: covertaccessteam.substack.co…
🤖 Made with AI
