The Palo Alto Networks firewall Master Key is p1a2l3o4a5l6t7o8 and it is well past time you changed it!

In PAN-OS 12.2.2 Palo Alto Networks added a new feature called PAN-OS Shield to protect GlobalProtect. It’s a virtual firewall with a subset of threat sigs for GlobalProtect exploits. They are literally putting a firewall in front of a firewall! docs.paloaltonetworks.com/ngfw/adminis...

I had a great time presenting to the @bsidesmelbourne.bsky.social crowd on the weekend. Thanks to the crew and volunteers for running such a welcoming, vibrant conference, with a great selection of talks! Big ❤️ to Edwina Richards for the photos! #BSidesMelb2026 #WontSomebodyPleaseEatTheFruit

I'm excited to announce I'll be taking the stage at @bsidesmelbourne.bsky.social 16-17 May 2026 at SEEK HQ in Cremorne. I'll be presenting Panning for Gold: A Hacker's Guide to Next Generation Firewalls on how attackers can exploit FW features and weaknesses to increase the impact of a compromise.

What do you do when you find yourself the new owner of Kubernetes config during a pentest? Find out the answer, and more with Finn Foulds-Cook during his talk on Saturday - "Help I got a k8s config?"

Our friends @cybliminal.com l have been ongoing supporters and with just over a week left, we wanted to throw another thank you their way. Big hugs to Matthew Flanagan and the Cybliminal crew for supporting our con!

Hey hey Women of CrikeyCon! Get your tickets for the networking event here: events.humanitix.com/women-of-cri...

Women of CrikeyCon 11 networking event

Get tickets on Humanitix - Women of CrikeyCon 11 networking event. Venue provided after registering for a ticket!. Thursday 19th March 2026. Find event information.

events.humanitix.com

Come join Alex Tilley on stage as we're brought through lived experiences in "Real world management in the world of Bad Days". We're stoked to hear this one as no one wants to deal with, but everyone should be prepped to get through, a massively bad day.

First up on 21st March we have @ellearmageddon.bsky.social taking the stage. Elle's joining us with their talk "nothing we do matters (so it can’t hurt to try!)". Join us to see them at the RNA showgrounds, and get some much needed hope in these times!

We’ll be there again this year supporting these wonderful people ❤️‍🔥 I’m looking forward to seeing Elle Armageddon’s keynote. If you spot us say Hi…we might just have some @cybergoodies.run t-shirts to give away.

CrikeyCon@crikeycon.bsky.social · 7mo ago

We're two weeks and counting so we wanted to give another shout out to @cybliminal.com. Thank you so much for their sponsorship, providing us support to host CrikeyCon 11!

Our schedule is up, and we're excited to announce our speaker @snyff.pentesterlab.com is joining us on stage with I DON'T LIKE THIS CODE!!! Get ready to walk through a series of real-world inspired code snippets with one minute to figure it out. Only question, will there be jeopardy music?

Thanks Crikey crew! It’s a great bunch of speaker you’ve got lined up this year. Can’t wait to see the! 😍

CrikeyCon@crikeycon.bsky.social · 7mo ago

We're two weeks and counting so we wanted to give another shout out to @cybliminal.com. Thank you so much for their sponsorship, providing us support to host CrikeyCon 11!

Wow! We’re over 2/3 of the way through the tickets now, we’ll keep on selling til capacity or the day before, but merchandise pre-sales will end on Sunday as we have to finalise the order! There will be some for sale on the day too but no guarantees on sizes.... Head to www.crikeycon.com

CFP and CFE has officially closed. We had a huge turnout, thank you so much for your time and effort to submit your ideas. Droppy & the Sleuth are busily reviewing and looking to get a response to everyone that submitted latest by the 21st. Reach out if you have any questions! Droppy & the Sleuth

New BSides Canberra IX look unlocked. Blue tones, laser lines, and energy straight out of the grid. Website updated, more to come.

Sunday when CFP and CFE closes, get your ideas in now! CFP: docs.google.com/forms/d/e/1F... CFE: docs.google.com/forms/d/e/1F...

CrikeyCon 11 (2026) Call for Presentations

*** CFE CLOSES February 1 2026 *** Saturday March 21 2026 Royal International Convention Centre, Bowen Hills, Brisbane, QLD CrikeyCon is a community-led conference targeting those with an interest i...

docs.google.com

We have had some awesome submissions already, but if you've got that talk up your sleeve or a great idea for a workshop or longer presentation then we're all ears. Put your paw up to be part of the show!!

CrikeyCon@crikeycon.bsky.social · 9mo ago

Sunday when CFP and CFE closes, get your ideas in now! CFP: docs.google.com/forms/d/e/1F... CFE: docs.google.com/forms/d/e/1F...

Happy New Year! CrikeyCon 11 is three months away. Come join us in Brisbane on 21st of March for informal, welcoming, real knowledge sharing — from hard-won lessons, to clever demos and challenges, or testing fresh ideas. Grab your ticket: events.humanitix.com/crikeycon-11

CrikeyCon 11

Brisbane hacker conference, run by the community for the community.

events.humanitix.com

Huge thanks to @infosectcbr.bsky.social who have returned as Gold Sponsors! Their contribution to the communities around us make us so proud to get their support and sponsorship. Many hugs, Droppy & The Sleuth

@_dirkjan and my joint talk at #TROOPERS25 is now available on YouTube. "Finding Entra ID CA Bypasses - the structured way" @wearetroopers.bsky.social youtu.be/yYQBeDFEkps

TROOPERS25: Finding Entra ID CA Bypasses - The Structured Way

YouTube video by TROOPERS IT Security Conference

youtu.be

If you missed my talk at BSides Canberra you can catch up on it now on YouTube

BSides Canberra@bsidescbr.bsky.social · 11mo ago

New BSides Canberra 2025 talk by Matthew Flanagan is now live: “Panning for Gold - A Hacker’s Guide to Next Generation Firewalls.” Watch here: youtu.be/2PF4aSY1gVo

Big shout out to @cybliminal.com our first silver sponsor this year! Massive hugs for the returning support; can't wait to see you out at the showgrounds.

Lots of DMs asking for BSides Canberra 2025 talks — they’ll be on YouTube in a month+ 🎥 Speakers are reviewing their sessions first, so stay tuned! 👉 youtube.com/@bsidescanbe...

BSides Canberra

youtube.com

Celebrating 10 years of amazing artwork for BSides Canberra! 🎨 Huge thanks to Sydney-based Aussie Glenno for bringing our logos to life. Real artists > AI every time. www.instagram.com/glennoart?ig...

Thanks again to @bsidescbr.bsky.social for inviting me to present my research on living off the land on Palo Alto Networks firewalls as well as sharing new tools I’ve developed to creatively misuse 😜 firewall features for credential harvesting and port scanning. Some great questions too!

Thanks again to @bsidescbr.bsky.social for inviting me to present my research on living off the land on Palo Alto Networks firewalls as well as sharing new tools I’ve developed to creatively misuse 😜 firewall features for credential harvesting and port scanning. Some great questions too!

CTF early registration is now open! 🕹️ Get set up ahead of time so you’re ready to go when the CTF kicks off this Friday at BSides Canberra. Register here: ctf.sk8boarding.dog

Just one week to go until I present the research from my “Panning for Gold: A Hacker’s Guide to Next Generation Firewalls” paper. Come along and listen to it at @bsidescbr.bsky.social if you’d like to up your post-exploitation game or learn how to better defend your environment.

Matthew Flanagan@mattimustang.com · last yr.

I’m incredibly excited to be accepted by @bsidescbr.bsky.social to present my research on Next Gen Firewalls. I can’t wait to get up there for the first time to share it with you all!

For the record, Expel silently updated their blog post to replace bypass with downgrade for this attack

Catalin Cimpanu@campuscodi.risky.biz · last yr.

-New phishing technique bypasses FIDO keys -Surveillance vendor deploys new SS7 exploit -South Korea's largest insurance provider gets ransomed -Europol take down NoName057 servers -Australia to create a cyber reserves force Podcast: risky.biz/RBNEWS453/ Newsletter: news.risky.biz/risky-bullet...

This year at BSidesCbr, both the Main Track and the Off-Main Track will run across all three days. Main Track brings the big research, big ideas, and big names. Off-Main features beginner-friendly talks, deep dives, and unexpected gems—streamed to four theatrettes.