BC Security

09/28/2026

Part 2 of our Empire C2 series with Rey Bango is live!

In this session, Jake Krasnov and Rey walk through practical Empire C2 techniques directly on Hack Smarter's DarkHaven Range.

🎁 Giveaway Alert: You can also enter for a chance to win a Hack Smarter All-Access Voucher. Full entry details are in the YouTube description.

Watch the full walkthrough and enter here: https://buff.ly/kXCSOPb

I'm joined by Jake Krasnov of BC Security and co-maintainer of the ...

09/18/2026

We’re heading to the finals! 🎉

BC Security has officially been named a Top 10 Finalist in the St. Louis Startup World Cup 2026 Regional Finals!

We can’t wait to get on stage and pitch SIMAPTIC.ai, demonstrating how automated, continuous adversary emulation empowers security teams to stay ahead of real-world threats.

If you’ll be attending the regional finals in St. Louis on Sept. 23rd, come say hello and connect with our team.

Thank you all for the continued support. Stay tuned for updates from competition day!

09/16/2026

Heading to Black Hat Europe 2026? ✈️

Join the BC Security team Dec. 7 & 8 for Advanced Threat Emulation: Evasion (BH Edition), an intensive 2-day hands-on training at .

Modern enterprise defenses are designed in layers, making it tougher than ever for operators to move undetected. To beat modern EDR, AV, and kernel-level visibility, you have to understand how to systematically disrupt Blue's detection cycle.

What we cover across the two days:

🔹 Deconstructing the Defensive Kill Chain: Identify and break Blue's response workflows.

🔹 Active Evasion & Code Obfuscation: Strip high-confidence IOCs, perform API unhooking, execute ETW bypasses, and navigate kernel protections.

🔹 Exploiting the Human Factor: Manage weak indicators to blend into network noise, abuse alert fatigue, and evade SOC triage.

🔹 Weaponizing & Navigating LLMs: Accelerate payload iteration and evade defenses using AIwithout falling into common evasion traps.

🔹 Live Capstone: Put your techniques to the test against an active SOC in a real-time detection range.

Who is this for?
Red teamers refining advanced tradecraft, blue teamers seeking an attacker’s perspective, and researchers exploring Windows internals and obfuscation.

⏳ Early bird registration is officially open. Seats fill up fast, secure your spot today!

🔗 Register here: https://buff.ly/VPjQL0L

Black Hat Europe 2026

09/14/2026

Always great teaming up with Rey!

In his latest video, he and Jake dive into the DarkHaven range using Empire C2—focusing on deliberate tradecraft over quick wins.

Watch the full walkthrough: https://buff.ly/0qV8iwt

I'm joined by Jake Krasnov of BC Security and co-maintainer of the ...

09/10/2026

Effective defense isn't passive. It requires putting your environment through the paces of actual adversary tradecraft so your analysts know what real compromise looks like before an incident happens.

That reality is laid bare in a recent Cybersecurity and Infrastructure Security Agency (CISA) advisory, A Tale of Two SOCs, which details what happened when their red team tested two critical infrastructure organizations.

In the assessment, one SOC lacked the baseline visibility to spot lateral movement after a phishing compromise. The other had actively refined their alerts and processes, forcing the red team into an assumed-breach posture almost immediately.

The findings highlight a critical point: the goal of red teaming isn't just to see if you can break in; it’s about empowering defenders.

That principle drives everything we do at BC Security and inspired how we designed Simaptic.ai to automate continuous offensive validation.

Check out the advisory findings here: https://buff.ly/8eIgMKV

document.querySelectorAll('a.button-class-here').forEach(link => { if (link.innerText.includes('INQUIRE')) { link.href = 'https://keywordacquisitions.com/domain-name-inquiry'; } });

09/09/2026

Empire 7.0 is officially live!

This is one of our biggest releases to date, and we want to thank everyone for their contributions and ongoing support on this project!

Here's what's new in v7.0:
- Full crypto rewrite: PBKDF2, AES-256-GCM, HKDF-SHA256, mTLS
- Multi-tab terminal & dedicated shell sessions
- Pivots supported on every agent
- New Starkiller dashboard
- Interactive Agent Graph
- 75+ new BOFs
Plus dozens of core improvements, performance fixes, and ecosystem updates.

https://github.com/BC-SECURITY/Empire

Empire is a post-exploitation and adversary emulation framework that is used to aid Red Teams and Pe*******on Testers. - BC-SECURITY/Empire

09/08/2026

The BC Security team is heading to Kentucky this Friday, Sept. 11 for the Louisville Metro InfoSec Conference!

🎙️ We will be taking the stage to present:

"AI in the Adversary's Toolkit: From Search Replacement to Autonomous Ops"

Attackers didn't wait for a roadmap before putting AI to work. In this talk, we break down that real-world progression across each phase of adoption, from early recon and automated payload evasion to full autonomous attack chains. With real examples from the field and what each shift means for defenders on the blue side.

Tickets are almost sold out! Grab yours to join us: https://www.louisvilleinfosec.com/

09/03/2026

Next week, the BC Security team is heading to Kentucky for the 19th Annual Louisville Metro InfoSec Conference (Sept. 11th)!

Organized by the Kentuckiana Chapter of ISSA, this is one of the region's best gatherings for offensive and defensive practitioners to connect, level up tradecraft, and talk shop.

If you haven’t grabbed your seat yet, move fast: tickets are almost sold out! https://www.louisvilleinfosec.com/

The Louisville Metro InfoSec Conference is Louisville's longest running information and cyber security conference.

08/31/2026

We’re excited to announce that BC Security is teaching at the first-ever Black Hat India! 🇮🇳

Join us on Oct. 27–30 in Bengaluru for the inaugural event and our brand-new course: Attacking and Defending AI Agents.

🔥 Early Bird pricing is live, but seats are moving fast! Reserve your seat before it fills up:
https://www.blackhat-india.com/training-schedule -and-defending-ai-agents-49915

08/28/2026

A security researcher recently used AI models to automatically probe Google’s vast attack surface—uncovering hidden endpoints, bypassing authorization restrictions, and finding high-value security bugs at scale.

These combined bounties earned him a massive $500,000, a huge payout for a few months of work deploying AI agents against Google’s systems.

When research like this goes public, it's a clear reminder that attackers can leverage the exact same tooling 24/7. Moving forward, continuous automation might be the only way to keep pace.

🔗 Read the full write-up:

What happens when you unleash an AI across all of Google's infrastructure? 1,500 APIs, 3,600 keys, and $500,000 in bounties later, here's what I found.