Reposted by Empiric SecurityRyan Basden @ryanbasden.com · 17/03/2026Purple team exercises are my favorite work when they go well. Few things burn me out harder than when they're set up to fail and I have to run them anyway. I wrote up the specific failure modes I've seen repeatedly, on both the client side and the consulting side. 🧵 101
Empiric Security @empiricsecurity.bsky.social · 02/03/2026Physical security assessments aren't about stopping Hollywood-style heists—they're about identifying the everyday vulnerabilities that actually lead to breaches. Read our latest blog about it: empiricsecurity.substack.com/p/oceans-ele...empiricsecurity.substack.comOcean's Eleven Heists In a Louvre Four WorldAre physical security assessments a fun novelty? Or are fewer businesses taking them as seriously as they should? 000
Empiric Security @empiricsecurity.bsky.social · 12/02/2026We’ve all seen it: the "compliance-first" mindset that checks every box while leaving the front door wide open, but out of scope. If you’re tired of the theatre and actually want to move the needle, give this a read. empiricsecurity.substack.com/p/how-shadow...empiricsecurity.substack.comHow Shadow Incentives Harm Real SecurityDespite the millions upon millions of dollars thrown at penetration testing ever year, big data breaches are still as common as ever. 021