Resources

Downloadable PDFs

Lares Continuous Defensive Improvement Through Adversarial Simulation and Collaboration corporate profile (image)

News & Events

Blog

Hunting Azure Admins for Vertical Escalation 2048 1402 Lee Kagan

Hunting Azure Admins for Vertical Escalation

In this post, we will look at a rather simple, but important procedure when attacking organizations that leverage cloud providers such as Microsoft Azure. There is a lot of excellent public research on attacking Azure, however, most research tends to focus on tactics that assume you have first obtained some form of access, such as…

read more
Mark Arnold – Week 1 at Lares 2048 1365 Mark Arnold

Mark Arnold – Week 1 at Lares

Week 1. Lares. Some months back, when Andrew Hay decided to join forces with Lares founders Chris Nickerson and Eric Smith, the security community cheered the move from the sidelines, myself included. I regarded their ‘teaming up’ as strategically epic for our industry. Now, I am a part of this talented team, which I could…

read more
Lares at the 2020 CU Cybersecurity Summit and CU Leadership Convention 806 689 Andrew Hay

Lares at the 2020 CU Cybersecurity Summit and CU Leadership Convention

Join Lares at the 2020 CU Cybersecurity Summit and CU Leadership Convention to learn about the 5 Hot Spots Every CU Must Know to Ensure Compliance, presented by Lares COO Andrew Hay. Register by March 25, 2020 with the code CX2020 and save $250 per person.

read more
Lares Continues Global Expansion to Meet Growing International Demand for Trusted Cybersecurity Solutions 400 208 Andrew Hay

Lares Continues Global Expansion to Meet Growing International Demand for Trusted Cybersecurity Solutions

FOR IMMEDIATE RELEASE DENVER, CO and TORONTO, ON – February 17, 2020 – Lares, a global leader in security assessment, red teaming, penetration testing, application security and security program development, today announced the launch of its new Canadian subsidiary, named Lares Canada. Based in Toronto, ON, Lares Canada provides the company’s existing Canadian financial services,…

read more
NCUA Cites Cybersecurity as a 2020 Supervisory Priority 1732 1154 Andrew Hay

NCUA Cites Cybersecurity as a 2020 Supervisory Priority

On January 7, 2020 the National Credit Union Administration issued its yearly supervisory priorities and Information Systems and Assurance (Cybersecurity) received some renewed focus. According to the National Association of Federally-Insured Credit Unions (NAFCU) blog post, cybersecurity has also been a supervisory priority for many years and will likely continue to remain so. NCUA will…

read more
(ISC)² Congress 2019 Wrap Up 2048 1536 Andrew Hay

(ISC)² Congress 2019 Wrap Up

Lares had the pleasure of supporting the 2019 (ISC)² Congress as a Silver Sponsor in Orlando, FL last week. We had a number of great conversations with people wanting to learn more about Lares as well as the differences between penetration, red team, and purple team testing. It also helped that we had delicious security-themed…

read more
Hay and Nickerson Named to Influential Cyber Security Bloggers and Speakers List 578 775 Andrew Hay

Hay and Nickerson Named to Influential Cyber Security Bloggers and Speakers List

Popular knowledge-sharing community Peerlyst today released a community eBook compiled by moderator Basheer Ahmed Khan. According to Kahn, the 52 Influential Cyber Security Bloggers and Speakers mentioned in the eBook “have influenced the lives of millions through their writings and speeches. All these people hold a certain powerful place in their area of expertise. And…

read more
Baking the Best ACET Pie for Your Credit Union 800 588 Andrew Hay

Baking the Best ACET Pie for Your Credit Union

At the recent CUNA Technology Council and CUNA Operations and Member Experience Council Conferences in Chicago earlier this month, CUNA Chief Compliance Officer Jared Ihrig emphasized that cybersecurity is among the organization’s top examination priorities in 2019 and beyond. “Security, confidentiality, and integrity of member information remains a key supervisory priority for NCUA,” said Ihrig.…

read more
Tribe of Hackers: Red Team Edition 353 499 Christopher Nickerson

Tribe of Hackers: Red Team Edition

At the beginning of the year, I was approached by the infamous Marcus J Carey (@marcusjcarey) to help create content for a Red Team focused book. The format was something new to me but quite fun to contribute to. Marcus had a series of questions asked to a group of all star red teamers —…

read more
Use-After-Free (UAF) Vulnerability CVE-2019-1199 in Microsoft Outlook 2048 1536 Andrew Hay

Use-After-Free (UAF) Vulnerability CVE-2019-1199 in Microsoft Outlook

Overview R.J. McDown (@BeetleChunks) of the Lares® Research and Development Team discovered a Critical Remote Code Execution vulnerability in the latest version of Microsoft Outlook. R.J. and the Lares R&D team immediately submitted a report to Microsoft detailing this issue. The vulnerability, now designated CVE-2019-1199, was validated against Microsoft Outlook Slow Ring Build Version 1902…

read more

Webcasts

Videos

Where There is Unity, There is Victory

[Ubi concordia, ibi victoria]

– Publius Syrus

Contact Lares Consulting logo (image)

Continuous defensive improvement through adversarial simulation and collaboration.

Email Us

©2024 Lares, a Damovo Company | All rights reserved.

Error: Contact form not found.

Error: Contact form not found.

Privacy Preferences

When you visit our website, it may store information through your browser from specific services, usually in the form of cookies. Some types of cookies may impact your experience on our website and the services we are able to offer. It may disable certain pages or features entirely. If you do not agree to the storage or tracking of your data and activities, you should leave the site now.

Our website uses cookies, many to support third-party services, such as Google Analytics. Click now to agree to our use of cookies or you may leave the site now.