ASSUMED BREACH: THE EVOLUTION OF OFFENSIVE SECURITY TESTING

Summary from the TLDR InfoSec newsletter

TrustedSec elaborates on its new approach to red teaming and pentesting, which focuses on scenario-based breaches, as opposed to traditional internal pen tests, which focus mostly on physical intrusion-based scenarios whereby attackers plant a rogue device in the network. TrustedSec tests seven scenarios: SSO compromise, network pivot, endpoint compromise, perimeter compromise, DevOps, workstation compromise, and physical intrusion. The post includes a detailed description of the scenarios and testing methods.