OffSec

🚀 SYSTEM REBOOT: OffSec Melbourne is BACK! 🚀 After an 8-month hiatus, we are thrilled to announce the official return of the OffSec Melbourne Community Chapter! We are kicking off this new chapter with a bang, led by our newly appointed Chapter Ambassador, Bo G. To celebrate our return, we have put together an incredible lineup diving into some of the most pressing topics in modern cybersecurity. Here is what we have on the agenda: 💥 LLM Supply Chain Attacks (Live Demo) | Bo Gan Watch a live, technical walkthrough of how threat actors exploit supply chain vulnerabilities to poison and compromise AI models from the inside out. 🕵️♂️ The Dark Web: Myths, Realities & Implications | Kenneth Yu Our guest speaker Kenneth Yu will cut through the media hype to explore the genuine mechanics, threat intelligence value, and real-world risks of today's underground marketplaces. (Note: No laptops required for this one! Just sit back, take notes, and enjoy the live presentations.) 📅 Event Details: Date: Thursday, 11th June 2026 Time: 6:00 PM - 8:00 PM Location: Boyd Community Hub | 207 City Rd, Southbank VIC 3006 Food: Free pizza provided! 🍕 Whether you are a long-time member or completely new to the community, this is the perfect opportunity to learn, network, and grab a slice. Space is limited, so make sure to secure your spot! #Cybersecurity #Melbourne #CommunityEngagement

🌍 OffSec Chapters Update: Three continents, massive meetups, and the leaders driving the movement. 🔥 Building a local cybersecurity community is about stepping up and lifting others. Here is the raw impact from the frontlines last weekend: 🇲🇾 Malaysia: Seeing Ambassador Ts. Wan Amirul Hakim bin Wan Yuhainis grinding through the LLM Red Teaming learning path and presenting it live was awesome! Alongside a stellar OT/IoT Pentesting session by Nigel Ng , the community successfully mapped out "how to hack AI." Huge shoutout to Sunway Quantum Sdn Bhd for the support and an awesome venue to host the meet up. 🇯🇴 Jordan: The first "Day Zero" meetup in Amman, Jordan was a huge success, and it was all about building a strong community. A big thank you to our amazing ambassadors, Omar Hussein and Ahmad Aljundi , who put their hearts into making this event happen. Thank you Al Hussein Technical University (HTU) for hosting the meetup and supporting the chapter efforts. This meetup was just the beginning, and we're excited to see the Jordan hub grow and thrive. It's amazing to see people come together and share their ideas and experiences, and we can't wait to see what the future holds for this community. With the help of our dedicated team and supporters, we're confident that the Jordan hub will become a vibrant and active part of our network. 🇺🇸 USA's Maine: In Portland, Maine, Ambassador Michel Chamberland led the team to actively exploit AI vulnerabilities. Using the OffSec Learning Library, they successfully extracted system prompts directly from an LLM! Huge thanks to IntegSec , Chloe Chamberland CISSP, OSCP, OSWE , and Ben S. (Newly Minted Ambassador) for making it a successful meetup. Huge thanks to Jay-Ann Ypil for all the hard work in keeping everything running smoothly. Next we will be passing the baton to Indonesia Chapter's meetup led by Carlos Budiman & France Chapter's meetup led by Pierre Le Maistre , Samuel Gaudemer and Amro Esseroukh - For this weekend meetup 🥰 #Cybersecurity #Malaysia #Jordan #USA #CommunityEngagement

AI is everywhere right now, but here’s the part that should actually concern security teams:: 👉 The risk isn’t AI adoption, it’s AI usage happening outside your line of sight. We’re seeing a massive rise in shadow AI. Employees (and frankly, leaders too) are: 🔴 Pasting sensitive data into AI prompts 🔴 Using unapproved tools for real work 🔴 Integrating AI into workflows without security review And most organizations have no visibility into it. This isn’t shadow IT 2.0. It’s worse. With shadow IT, data was stored somewhere it shouldn’t be. With shadow AI? 👉 Data is being shared, learned from, and potentially exposed in ways you can’t control. Some numbers that should get your attention: ➡️ Over 80% of workers are using unapproved AI tools ➡️ 1 in 5 organizations has already had a breach tied to this ➡️ Most teams still can’t see where their data is going Here’s the real takeaway: 💡 You can’t ban your way out of this problem. 💡 People will keep using AI, the productivity gains are too big. So the real question becomes: 👉 Can your team actually identify and defend against how AI is being used, and abused, inside your environment? What I’m seeing work: 🟢 Clear governance (what’s allowed vs not) 🟢 Monitoring (what’s actually happening) 🟢 And most importantly…Testing your environment like an attacker would Because attackers won’t follow your AI policy. They’ll go straight for: -> Unmonitored integrations -> Exposed prompts -> Misconfigured agents The organizations that win here won’t have the best policies. They’ll have teams that can: 👉 Find what they can’t see 👉 Break it safely 👉 Fix it before someone else does Curious, are you seeing shadow AI show up in your environment yet? https://lnkd.in/guj_Ggpb #OffSec #OSAI #CyberSecurity #AISecurity #ShadowAI #Infosec #CyberRisk #CISO #SecurityLeaders #DataSecurity #ThreatDetection

🚨 The OffSec France Chapter is back! We're excited to announce our upcoming Internal Pentest Masterclass and Active Directory Workshop - join us to take your skills to the next level! 🚨 Ever wondered how to effectively structure an internal pentest mission, spot common attack vectors, and exploit typical vulnerabilities in an information system? We're thrilled to announce our upcoming meetup, which will feature a detailed masterclass led by Pierre Le Maistre , with the support of Amro Esseroukh and Samuel Gaudemer . This session is perfect for anyone looking to learn about Pentesting. You can expect a lot of hands-on techniques and real-life examples, making it a great opportunity to learn and grow. 📅 Event Details Date: Saturday, April 25, 2026 Time: 3.00 PM - 6.00 PM The location is at Satellite - Campus Cyber, which can be found at 5–7 Rue Bellini, 92800 Puteaux. 🎯 What's on the Agenda? (1) Intro to Internal Pentesting: Setting the stage for internal network assessments. (2) The Pentester's Playbook: A look into the day-to-day methodology and organization. (3) Intrusion Techniques: Moving laterally and vertically in internal environments. (4) Active Directory (AD) Workshop: Practical strategies for managing AD environments. (5) Real-Life Examples & Success Stories: Connecting the dots between ideas and action. (6) OffSec Wi-Fi Demo: Exploring wireless attack vectors. (7) Q&A Session: Bring your questions! Don't miss out - spots are limited, so make sure to reserve yours now. 🔗 Register via the QR code on the poster or the link in the comment. Look forward in having you as part of the upcoming OffSec meetup. Know someone who wants to find out more about pentesting? Tag them below! 👇 #Cybersecurity #France #CommunityEngagement

🚨 OffSec Indonesia Chapter is back! 🚨 Have you ever wondered what it takes to turn hacking into a full-time career? We are bringing together some of the brightest minds in the Indonesian cybersecurity scene for our next meetup! Come and be a part of our special panel discussion, where we talk about "Breaking Things for a Living" - this is all about Indonesia's best bug hunters and CTF players sharing their stories. We have a great lineup of top bug hunters, people who have won CTF championships, and professionals from the industry, who together have earned over $140,000 from finding bugs. They will share how they do their work, some amazing stories, and tips on how to be really good at offensive security. 🎤 The Lineup: (1) Yudistira Arya (2) Bill Elim (3) Farras Givari (4) M Indra (5) zeeagil 🎙️ Moderated by: Carlos Budiman (OffSec Ambassador) If you're someone who's really into testing security systems, or you're just starting out and want to learn how to find bugs, or even if you're just looking to get into the field, you'll definitely want to check out what we have to say. 📅 Event Details: Date: April 25th 2026 Time: 09:00 AM - 12:00 PM The event will take place at the Trainocate Indonesia Office, which is situated on the 11th floor, unit G, of the Treasury Tower. This building is located in District 8, on Lot 28 of the SCBD, and can be found on Jl. Jenderal Sudirman Kav 52-53, in the Jakarta Selatan area. Don't miss out - spots are filling up fast! Come and connect with the top people in the community, it's a great chance to meet and learn from them. #CyberSecurity #Indonesia #CommunityEngagement