iiinova — where your digital self keeps evolving

Black Hills Information Security @bhinfosecurity.bsky.social · 43m

Our crew is on site turning an empty venue into the place you'll be hanging out soon. See you next week!

Black Hills Information Security @bhinfosecurity.bsky.social · 01/10/2026

Fun fact: ransomware gangs have never once asked to see your SOC 2 report. We build security programs that are audit-ready and attacker-tested! www.blackhillsinfosec.com/contact-us

020

Black Hills Information Security @bhinfosecurity.bsky.social · 30/09/2026

**NEW** BHIS | Blog Want to learn how C2 beaconing really looks on the wire? Threat Hunting Home Lab: Your Personal Playground for Learning Adversary Behavior By: Faan Rossouw Learn more: www.blackhillsinfosec.com/threat-hu…

420

Black Hills Information Security @bhinfosecurity.bsky.social · 29/09/2026

🎃 Something wicked this way enrolls… Learn how ESC17 exploits ADCS certificate templates to compromise your network. Join us! events.zoom.us/ev/AoBG5uExO5UXb1QHJ…

000

Black Hills Information Security @bhinfosecurity.bsky.social · 28/09/2026

Google just admitted Gemini "hacked" 3 companies during a security test. Was it a mistake... or a marketing ploy? Our founder John Strand isn't convinced it's an accident. informationsecuritybuzz.com/gemini-…

020

Black Hills Information Security @bhinfosecurity.bsky.social · 27/09/2026

News on Monday, better pentest reports on Wednesday, and some spooky ADCS abuse just in time for October. 🎃 See you in the chat! events.zoom.us/eo/AqZceUFfoY13HGSXu…

000

Black Hills Information Security @bhinfosecurity.bsky.social · 26/09/2026

Red light: don't panic. Yellow light: don't pull the plug yet. Green light: now you can say "I told you so."

010

Black Hills Information Security @bhinfosecurity.bsky.social · 23/09/2026

**NEW** BHIS | Blog Forensic Data: How To Acquire and Retain Vital Evidence By: Ronald A Mays Jr Published: 9/23/2026 www.blackhillsinfosec.com/forensic-… /

000

Black Hills Information Security @bhinfosecurity.bsky.social · 21/09/2026

A fake verification page loads. 41 seconds later your user pastes a command into the Run dialog and runs it. Four chains, five months, one provider none of them gave up. Pull your egress for AS202412. Then read this. activesoc.blackhillsinfosec.com/blo…

032

Black Hills Information Security @bhinfosecurity.bsky.social · 20/09/2026

This week's lineup: news, Azure, and incident response. See you there 🫵😉 events.zoom.us/eo/AqZceUFfoY13HGSXu…

000

Black Hills Information Security @bhinfosecurity.bsky.social · 19/09/2026

Embrace the suck. It's the fastest way through it.

160

Black Hills Information Security @bhinfosecurity.bsky.social · 16/09/2026

**NEW** BHIS | Blog Want to learn how adversaries leave tracks the moment they touch a system — and how to find them before they dig in? Threat Hunting on the Endpoint: Hunting Adversaries Where They Live By: Faan Rossouw Learn more: www.blackhillsinfosec.com/threat-hu…

031

Black Hills Information Security @bhinfosecurity.bsky.social · 15/09/2026

Hunting CVE-2026-85706 in GitLab logs? A 400 saying "branch is required" is not a failed attempt. It means the file was read. We proved it by planting files with known contents and watching the error change. activesoc.blackhillsinfosec.com/blo…

050

Black Hills Information Security @bhinfosecurity.bsky.social · 14/09/2026

AI agents hijacked a wiki. Humans blew up substations. Our own Ashley Knowles weighs in on what should actually worry us more right now. www.machine.news/system-shocks-rogu…

000

Black Hills Information Security @bhinfosecurity.bsky.social · 10/09/2026

Your users are getting 3,000 real newsletter confirmations, then a Teams chat from "IT Service Desk" offering to fix it. Every one of those emails is legitimate. The Teams account is a free trial tenant someone spun up this morning. Then read this. activesoc.blackhillsinfosec.com/blog/free-te...

activesoc.blackhillsinfosec.com

Free Tenants, Fake Help Desks

Over eight weeks we watched one email-bombing operator get their domains burned repeatedly and adapt — ending up on free Microsoft 365 tenants that carry no registration record, no WHOIS, and no reput...

032

Black Hills Information Security @bhinfosecurity.bsky.social · 27/08/2026

Hunting Log4j by version? This one has no ceiling. Apache won't classify the allowlist bypass as a vulnerability, so current releases still carry it — and a "latest patched" filter marks those hosts clean. Read more: activesoc.blackhillsinfosec.com/blog/detecti...

030

Black Hills Information Security @bhinfosecurity.bsky.social · 20/07/2026

Join us for this week's infosec-news stories with the Black Hills Infosec team live at 4:30pm ET on Mondays -- www.youtube.com/watch?v=7wI-...