@bishopfox Regional Director | Gamer, computer cyber sec enthusiast | Mex4’s | @bsidescdmx | Ex- @Lyft | Ex-@Scitum_Mx | @lasalle_mx | Tweets are by my own
Mexico City
Joined January 2009
- Tweets3K
- Following1.8K
- Followers1.1K
- Likes5.4K
Eduardo P. Sánchez retweeted
BSidesCDMX está de vuelta 🇲🇽
[ CONNECTION RESTORED ]
Nueva cuenta de instagram. Misma comunidad.
instagram.com/bsides_cdmx/
Síguenos, comparte y ayúdanos a reconectar 💜
bsidescdmx.org/
Everyone's building with AI.
We're testing how it breaks.
Join Bishop Fox on Aug. 19 for field notes from real GenAI, LLM, and agentic security assessments.
bfx.social/3Uatlwl
Not every CVSS 9.0 vulnerability is equally practical to exploit.
BishopFox latest research walks through the root cause, attack path, layered defenses, and defender takeaways for CVE-2026-11374.
bfx.social/4fEiVxD
Bishop Fox acaba de liberar AIMap, plataforma open-source a nivel masivo para descubrir y probar sistemas de IA expuestos en Internet
bfx.social/4efKe0M
NIST is changing CVE enrichment.
You still get the vulnerabilities.
You just get less context for many of them.
So what does a security team do with this?
Senior Managing Operator Richard Brown breaks it down: bfx.social/4sRNAe4
We’re launching a new open-source tool on March 31: Cirro
To walk through it, we’re hosting a 2-part workshop on:
• Mapping Attack Paths in Azure
• Schemas and Extensible Identity Graphs
Register once for both sessions: bfx.social/4dfaqZ2
strongSwan EAP-TTLS integer underflow allows unauthenticated DoS of VPN servers
• Impacts 15+ years of versions
• Low-effort exploitation
• Sometimes requires just 2 connections
Upgrade to 6.0.5 or disable EAP-TTLS
Details & testing tool: bfx.social/48aqwiY
Eduardo P. Sánchez retweeted
Moving from Electron to frameworks like Tauri doesn’t necessarily eliminate risk, but it does change the mechanics of exploitation.
New Bishop Fox research shows how XSS & permissive configuration can still lead to RCE in desktop apps.
Full scoop: bfx.social/4cHVl1R
AI risk is very different from traditional software risk.
For starters:
No CVE-style ecosystem.
Infinite input space.
Major supply chain blind spots.
@KrisKimmerle of @RealPage from our recent AI & Security Risk cyber leadership panel:
(Full write up: bfx.social/3OyqZoo)
Giving AI control over infrastructure isn’t sci-fi anymore.
Vinnie Liu, Nathan Case (TPO Group), and Zach Moreno on OpenClaw / MoltBot, early-stage AI tooling, and why basic security hygiene still matters especially now.
From this week's Initial Access: bfx.social/3OgckOm
Cloud enumeration can eat up your whole day.
Spend ~60 minutes with us and we’ll fix that.
Live Discord workshop with Mitchell Sperling on CloudFox - Aug 21.
Aug 21 | 2pm EST | bfx.social/45L6vOc
Eduardo P. Sánchez retweeted
¡Gracias por ser parte de esta increíble edición de #BSidesCDMX !
Nos emociona seguir creciendo junto a esta comunidad 💙
🎥 Ya puedes ver las charlas en nuestro YouTube:
youtube.com/@bsidescdmx?si=T…
📸 Y revivir los mejores momentos con las fotos oficiales:
securitybsidescdmx.pixieset.…
Foxes incoming at @defcon 33 this year! Can’t wait to see @hecky and @brandonkovacs doing their thing.
#DEFCON33
bfx.social/4mB68g3
Want a peek into what our red team really uses on engagements?
This breakdown hits on some of the tools we rely on to get the job done stealthily.
Some familiar names, some underrated gems: bfx.social/4lyUoKv bfx.social/3FXi7Vs
How the Busiest People Find Joy
hbr.org/2025/07/how-the-busi… , no hay que olvidarse de pasarla bien en un mundo tan ocupado