Black Teamers: How often do you encounter flat physical networks?
We wouldn't give every employee admin privileges in cyber. So why do we give them access to nearly every room in a building?
Let's segmentation & privilege escalation for black teams: covertaccessteam.substack.co…
How vulnerable is our power infrastructure?
⚡ In our podcast, electrical safety expert Marcin Rutta discusses grid failures, critical vulnerabilities, and the risks of prolonged blackouts.
🎙️ Listen now: covertaccessteam.substack.co… | #CriticalInfrastructure #EnergySecurity
Security looks different from an attacker's perspective.
Learn to spot physical security weaknesses in our final PACT course of 2026!
📅 Nov 21–22 | Virtual
Secure your spot: covertaccessteam.com/physica…
#PhysicalSecurity
Japan has reported 500+ cyberattacks in 2026, including a breach affecting 6.6M accounts.
Attackers are reverse-engineering mobile apps to exploit backend APIs, but who's behind the attacks remains unknown.
Read more: covertaccessteam.substack.co…
#Cybersecurity #Japan
300 schools across Northern Ireland received emails threatening to blow up their buildings and kill students. Police assessed the threats as a hoax, with no explosive devices discovered at the time.
But how seriously should threats like these be taken? youtu.be/T5LZkJ3sIhs?si=duOG…
Tor is designed to protect your anonymity. Unfortunately, that doesn't mean your credentials are safe.
Attackers modified 342 Tor relays to enable SSH interception and password theft.
Read more about the attack: covertaccessteam.substack.co… | #Cybersecurity #Tor #SSH
Have you taken our Physical Audit Certification Training course? Share your thoughts about your experience in the comments. 👇
There’s still time to join our November 21-22 PACT course–just enough time to roll out physical auditing as a service in 2027: covertaccessteam.com/physica…
Riots are spreading around (and even beyond) Europe. How would you advise your clients to protect themselves, their properties, and their livelihoods? Share your thoughts in the comments. 👇
Hear what Brian has to say about it: youtu.be/Jath_pb5JyQ?si=nYoO…
Federal investigators suspect a cybersecurity executive helped ShinyHunters run its extortion infrastructure.
The FBI says the group collected $70M+ in 2026. Were ransomware negotiators involved?
Read more: covertaccessteam.substack.co…
#Cybersecurity #Ransomware
A University of Wyoming researcher allegedly poisoned a coworker to steal his cancer research before returning to China.
Security footage reportedly caught her accessing his workspace after midnight.
Another disturbing insider threat case.
covertaccessteam.substack.co…
Want to break into physical penetration testing? Start with audits.
They're a great way to gain experience and build a client base, while giving clients a faster, cheaper way to identify security flaws.
🎓 PACT Training | Nov 21–22
covertaccessteam.com/physica…
🚨 You can now get infected with spyware just by viewing an online ad. No clicks required.
Researchers uncovered "AdFection," a zero-click attack involving 75,000+ apps and 120,000+ websites.
Read now: covertaccessteam.substack.co… | #CyberSecurity #Spyware
For $20–$40, you can buy a miniature listening device with an 18-hour battery, voice activation, and 16GB of storage.
But how useful are these devices during an actual physical penetration test?
Let's take a closer listen:
covertaccessteam.substack.co…
The EU spent €1.4 BILLION on a cyber early warning system.
But, not ONE member state has reported a "large-scale" incident since 2016.
WannaCry? Nope. CrowdStrike? Nope. Airport ransomware? Nope.
So what exactly is this system warning anyone about? youtu.be/jQ91Fq72KJE?si=H50A…
Three recent insider threat cases involving Berkeley, the University of Wyoming, and OpenAI highlight a serious problem with how organizations approach physical security.
Let's break down these three cases: youtu.be/VFg2DIx4Gg8?si=TXSH…
🚨 A cyber incident at Albert Heijn disrupted food deliveries and emptied shelves. Now the Dutch government is considering emergency food reserves.
Read the full story: covertaccessteam.substack.co…
Your next social engineering skill upgrade starts this weekend.
There’s still time to join us October 24–25 for our Elicitation Toolbox Training (ETT) course! Learn more and register: covertaccessteam.com/elicita…
#SocialEngineering #Elicitation #SecurityTraining #Pentesting
🔐 Your front door lock might look solid, but a few millimeters of exposed Eurocylinder can make it vulnerable to snapping.
Even worse, an attacker could potentially replace the lock without you noticing.
Do you know how secure your locks really are?
▶️ youtu.be/ljEb0FZFOGQ?si=xy7_…
Locks, cameras, action! 🎬 If your next physical penetration test had a soundtrack, this would be the opening track.
Because having security measures in place doesn't necessarily mean you're secure.
Listen: youtu.be/m1FV_JWkHAU?si=_qv4…
An OpenAI engineer allegedly bugged an executive conference room, concealing the recording device with... toilet paper. 🧻
Would a wad of toilet paper behind your conference room TV raise suspicion?
Read now: covertaccessteam.substack.co…
