Is your AI ready for an adversary? IOActive breaks down the most critical AI red teaming techniques organizations need to know in 2026. ioactive.com/ai-red-teaming-…

That's a wrap on September's #hacksoho! Thanks to everyone who joined us in London and helped this community keep growing. Huge thanks to Nick Dunn for a great talk on data-bouncing exfiltration.

Internet-exposed OT. Different threat actors. The same fundamental risk. IOActive examines the NCSC’s latest OT Alert alongside AA26-097A — without conflating attribution — and what CNI operators should prioritise next. ioactive.com/one-exposure-ma… #OTSecurity #ICS #IOActive

We're just a couple of hours from going live with this month's hack::soho. IOActive Senior Security Consultant Nick Dunn will present "A Stealth and Safety Issue: Exfiltration Using Data Bouncing," followed by an open discussion. Tune in live! youtube.com/live/TmDx1q3hTxM

Last call: hack::soho is TOMORROW (24 Sept). Nick Dunn is showing how "data bouncing" lets attackers exfiltrate data under the radar. Great talk, great crowd. Grab your spot! eventbrite.com/e/hacksoho-se… #hacksoho #cybersecurity #infosec #RedTeam

Organizations managing risk reactively are nearly twice as likely to suffer a breach. These benchmarks show what separates mature IT risk management strategies from vulnerable ones. ioactive.com/it-risk-managem…

Check out our upcoming events! ioactive.com/events/ 🌟 Sept. 24 | hack::soho | A Stealth and Safety Issue | Nick Dunn - eventbrite.com/e/hacksoho-se… 🌟 Oct. 1 – 3 | CornCon 2026 - corncon.net/ 🌟 Oct. 29 – 30 | LASCON - lascon.org/

Sun, tapas, and hardware hacking — our Madrid Summer Fiesta had it all. 🎉 Thank you to everyone who came out, and huge props to our team for the great presentations and hosting. Good food, great people, unforgettable day. 🙌 #IOActive #MadridHardwareLab

A UK generator was offline for 4 days after a cyberattack. No confirmed attribution. No disclosed vector. What IS known: attack surface is measurable — and CISA, NCSC, DESNZ and Ofgem are all pointing the same direction. Our breakdown 🧵 ioactive.com/internet-expose…

Hola!! La semana que viene tenemos un pequeño sarao en el lab de Madrid; habra charlas, comida, bebida y networking! No dudéis en apuntaros y compartirlo. Podéis apuntaros aquí: eventbrite.com/e/ioactive-su…

Not all cybersecurity tests ask the same question. Compare the top cybersecurity testing methodologies, from vulnerability assessments to Red Teaming, and find the right fit. ioactive.com/cybersecurity-t…

Check out our upcoming events! info.ioactive.com/acton/fs/b… 🌟 9/17 | IOA Summer Fiesta - eventbrite.com/e/ioactive-su… 🌟 9/17 | OWASP Scotland Chapter Meeting - meetup.com/owasp-scotland-ch… 🌟 9/24 | hack::soho - eventbrite.com/e/hacksoho-se… 🌟 10/1 – 3 | CornCon 2026 - corncon.net/

CISA just confirmed the July water sector cyberattack was 3x bigger than first reported: 100+ systems, 12 states — not ~30 in Minnesota. A second advisory (AA26-231A) flags AI-generated exploit scripts targeting Siemens S7 PLCs across 6 sectors. ioactive.com/worse-than-firs…

hack::soho is back Sept 24 in London 🇬🇧 IOActive's Nick Dunn presents "data bouncing" — a stealthy new DNS-based exfiltration technique flying under most defenses' radar. eventbrite.com/e/hacksoho-se…

Most software vulnerabilities start at design, not deployment. Security leaders use these SDLC practices to embed controls at every phase: threat modeling, code analysis, and supply chain integrity. ioactive.com/secure-software…

REMINDER: Our Madrid Summer Fiesta is right around the corner and taking place next week, 9/17! Invite those in your network in the are for some delicious food and to check out some amazing cybersecurity research! eventbrite.com/e/ioactive-su…

Check out our upcoming events! ioactive.com/events/ 🌟 9/17 | IOA Summer Fiesta - eventbrite.com/e/ioactive-su… 🌟 9/17 | OWASP Scotland Chapter Meeting - meetup.com/owasp-scotland-ch… 🌟 10/1 – 3 | CornCon - corncon.net/ 🌟 10/29 – 30 | LASCON - lascon.org/

IOA Consultant Elvin G. breaks down what SetWindowDisplayAffinity actually stops (PrtSc, casual screen shares) vs. what it doesn't (admin-level process injection, RDP, a phone camera) — 3 tiers of bypass, no exploit dev required for most of them. ioactive.com/the-drm-flag-th…