Altered Security

Slides and video for “The Trojan Pull Request” at AltSecCON 2026 are now available.

Take a closer look at how trust in CI/CD workflows and GitHub Actions can create attack paths from an untrusted fork to cloud administrator access.

Slides:
…5-4665-b161-30113ba1b7e4.usrfiles.com/ugd/16cdd7_5ad…

Video:
youtu.be/-VMWAXWYtxM?si…

#AltSecCON2026 #CloudSecurity #RedTeam #AlteredSecurity

One identity. Multiple attack paths. How far can you go in Azure AD?

Explore Red Labs with 25 FREE hands-on Azure AD challenges covering dynamic membership rules, administrative unit privileges, credential harvesting, owned application abuse, and more.

Explore for free: redlabs.enterprisesecurity.io

#RedLabs #AzureSecurity #AzureAD #RedTeaming #CyberSecurity

Slides and video for “Poisoning Copilot CoWork: Reworking Trust in AI Agents” at AltSecCON 2026 are now available.

The session explores how poisoned skills and trusted connectors can be abused to manipulate AI agents and trigger unauthorized actions.

Slides:
…5-4665-b161-30113ba1b7e4.usrfiles.com/ugd/16cdd7_124…

Video:
youtu.be/2no-gZFl74s?si…

#AltSecCON2026 #AIRedTeaming #MicrosoftCopilot #AlteredSecurity

Student Love ❤ | CARTP Edition
Microsoft Entra ID enumeration, cloud attack techniques, and hands-on Azure Red Teaming, another CARTP success!

Explore CARTP: alteredsecurity.com/cartp

#CARTP #AzureSecurity #EntraID #CloudSecurity #RedTeam #AlteredSecurity

The AltSec CAIRTP Bootcamp starts 20 November 2026.

Explore AI Red Teaming across M365, Copilot and Enterprise AI through hands-on attacks, agent exploitation and real-world scenarios.

4 Weeks | Live Labs | CAIRTP Certification

Enroll now: alteredsecurity.com/cairtp-bootcamp

#CAIRTP #AIRedTeaming #RedTeam #EnterpriseAI #CyberSecurity