By Ariz Soriano, Associate Director, Red Team Operations, THEOS Cyber Modern red teaming has a context problem. Every tool speaks a different language, every engagement starts from zero, and AI keeps being sold as the solution without anyone addressing the grounding issue underneath. At THEOS Cyber, this is something we’ve been working on. At .HACK […]
The Context Gap: What AI in Red Teaming Actually Requires Read More »
Bank Negara Malaysia’s (BNM) revised Risk Management in Technology (RMiT) policy document, issued 28 November 2025, introduces the most significant update to Malaysia’s financial sector cybersecurity requirements in years. For banks, insurers, payment operators, and other regulated financial institutions in Malaysia, compliance is not optional: all requirements marked “S” (Standard) carry direct legal force, with
BNM RMiT 2025 Compliance: What Malaysia’s Financial Institutions Must Do Now Read More »
THEOS Cyber helps critical infrastructure operators meet Hong Kong’s new cybersecurity requirements through Managed Threat Detection and Response (MTDR) for continuous monitoring, Digital Forensics and Incident Response (DF/IR) for rapid incident response, and offensive security testing to identify vulnerabilities before threat actors do. Are your capabilities ready? Hong Kong’s Protection of Critical Infrastructures (Computer Systems) Ordinance
Casinos in Southeast Asia are now prime targets for ransomware gangs, APTs, and POS malware groups. This report highlights recent breaches and the actors reshaping the casino cyber threat landscape.
By Ariz Soriano The Purpose of Artificial Intelligence (AI) in Email Pretexting Creating effective email pretexts has always been one of the more challenging aspects of red team operations. It’s more than just writing— It’s crafting a message that feels authentic, resonates with the target, and seamlessly integrates into the scenario you’re building. Achieving the
How Red Teams Use AI to Streamline and Scale Email Pretexting Read More »
By: Felix Mendoza Introduction Red Teaming is often seen as the ultimate test of an organization’s defences. By simulating real-world attacks, red teams uncover vulnerabilities, test detection capabilities, and assess the overall resilience of targets. Yet, amid the tactics, tools, and creativity that define these operations, one critical element is frequently overlooked: log collection. Logs
Logs Don’t Lie: A Data-Driven Red Teaming Read More »
What is OSINT? From a red teamer’s standpoint, OSINT can be a useful tool for gathering information about a target organization or individual from the perspective of a red teamer. Vulnerabilities can be identified, attacks can be planned, and sensitive data can be accessed with this information. Red team members might use OSINT in the
Red Team Operations: Introduction to Open-Source Intelligence Read More »
Introduction In one of the recent engagements conducted by THEOS Red Team, the operators were tasked to simulate an APT scenario in one of our clients. This type of scenario covers the complete kill-chain starting with the reconnaissance of the target client, execution of attacks to gain an initial foothold, and eventually achieving the desired
Red Team Operations: Shortcut File as Initial Access Payload Read More »
Delivering Cyber Resilience
