Altered Security

The best red team skills are built through hands-on practice.

AltSecCON 2026 brings together immersive training in Active Directory, Azure, Enterprise AI, and Red Team Operations, followed by a practitioner conference focused on real-world tradecraft and offensive security.

Take advantage of the Super Early Bird Full Access Pass and save ₹13,000.

📅 24-27 October 2026
📍 Hilton EGL, Bengaluru

Learn more: www.alteredsecurity.com/altseccon

Get Ready for Hacker Summer 2026

This July, is bringing together the global Red Team community for a month of technical learning, research, and exclusive opportunities.

Here's a preview of what's coming:

• Free Red Team webinars
• Exclusive offers and community giveaways
• Community CFP opportunities
• Red Team blogs and technical insights
• Special announcements and much more throughout the month

Whether you're exploring Active Directory, Azure Red Teaming, AI Red Teaming, or enterprise attack techniques, Hacker Summer 2026 is designed to help you learn, connect, and grow.

📅 1 July - 31 July 2026

Register today and be among the first to receive exclusive updates and offers:
www.alteredsecurity.com/hacker-summer

We have recently introduced a new Azure Automation Account challenge category to the RedLabs Platform. These challenges focus on identifying and abusing common misconfigurations in Azure Automation Accounts, including Runbooks, Managed Identities, Credentials, Variables, Connections, Job Outputs, Webhooks, and integrations with other Azure services. They are designed to provide hands-on experience with real-world attack paths and privilege escalation scenarios in Azure environments.

New Blog Post: Reading and Decrypting Key Vault with Runbook MI

In this blog, we walk through a challenge where a Runbook's Managed Identity has access to a Key Vault. The blog demonstrates how to enumerate the Managed Identity's permissions, identify access to Key Vault secrets and keys, and leverage those permissions to read and decrypt sensitive data.

Read the full blog: www.alteredsecurity.com/post/reading-and-decrypting-key-vault-with-runbook-mi

Red Labs & Challenges Platform: https://redlabs.enterprisesecurity.io

Altered Security Global leader in hands-on learning for enterprise and cloud security education. Join 10000+ infosec professionals from 130+ countries

Day 2 at 2026 comes to a close.

Thank you to everyone who stopped by Booth B1, joined the conversations, participated in our giveaways, and connected with the Altered Security team.

We appreciate the enthusiasm and look forward to seeing you again soon.

The final giveaway at Vulncon 2026 is complete.

Congratulations to the winners, and thank you to everyone who stopped by Booth B1 and participated.

Great energy, engaging conversations, and an incredible response from the community throughout the event.

Day 2 at VULNCON 2026 is in full swing.

Great discussions, strong participation in our giveaway, and excellent engagement from the community.

Visit Booth No. B1 to connect with the team, join the conversations, and grab some cool swag & goodies.

Day 2 at 2026.

We're back at Booth No. B1 for more insightful talks, engaging discussions, giveaways, and swag.

Stop by to meet the team, participate in today's giveaway, and grab some cool goodies.

Booth No. B1 is set and ready. The Altered Security team is gearing up for another day of insightful talks, meaningful conversations, and today's giveaway.

If you're attending, stop by to meet the team, grab some cool swag & goodies, and take part in the giveaway.

See you at Booth B1.

Can Azure's Global ARM APIs expose source control resources across tenants?

Our latest blog demonstrates how ARM API abuse can lead to source control enumeration and potential repository takeover scenarios.

https://www.alteredsecurity.com/post/global-arm-api-abuse-source-control-takeover

Altered Security Global leader in hands-on learning for enterprise and cloud security education. Join 10000+ infosec professionals from 130+ countries