https://bsky.app/profile/volkis.auhttps://bsky.app/profile/volkis.au/post/3mub5czthlp2vHappy Birthday to our Senior Security Consultant, Nathan! 🥳 Whether he’s performing network and web app pentests or running security reviews, Nathan brings incredible skill and genuine kindness to everything he does at Volkis.30 Aug 2026 00:32 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mub5czthlp2vhttps://bsky.app/profile/volkis.au/post/3mtzeawtjns2wWallpapers, T-shirt designs, and other bits with the Volkis wolf on them. We put it all in one spot. 🐺👇26 Aug 2026 22:15 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mtzeawtjns2whttps://bsky.app/profile/volkis.au/post/3mtsbpeoo4j2kHow mature is your Essential 8 actually? Not what the checklist says but what an attacker would find.24 Aug 2026 02:41 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mtsbpeoo4j2khttps://bsky.app/profile/volkis.au/post/3mswgztxvvn2cWhere does "Volkis" come from? True story. Matt and Alexei were brainstorming names while Alexei was in Europe. Matt suggested "Volk," after Alexei's dog. Close, but not quite.13 Aug 2026 01:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mswgztxvvn2chttps://bsky.app/profile/volkis.au/post/3msovnortfj2nWe are honest and transparent with ourselves, our clients, and the wider community. A philosophy at Volkis is to be "open but secure". We make information public by default unless its under NDA, or could be damaging.10 Aug 2026 01:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3msovnortfj2nhttps://bsky.app/profile/volkis.au/post/3msetr4m3vt2eWe're hearing a lot about how AI-generated pentest reports and hallucinated findings are plaguing our industry. What do we bring? Trust! The words in our reports are our own. Putting our name on it means we stand by every word and present something you can trust.06 Aug 2026 01:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3msetr4m3vt2ehttps://bsky.app/profile/volkis.au/post/3msc7yuuzbz2fHappy Birthday to the big boss, Alexei! 🐺 As one of the two founders who made Volkis possible, thank you for inspiring and leading us with kindness and genuine curiosity to give the best of ourselves05 Aug 2026 00:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3msc7yuuzbz2fhttps://bsky.app/profile/volkis.au/post/3ms55bikuf42xWe are Volkis. A group of hackers, Australian, independent from the big players, all local. We are dedicated to offensive security. We love it and we do it well.02 Aug 2026 23:30 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3ms55bikuf42xhttps://bsky.app/profile/volkis.au/post/3mrvqypy6ck2eAnyone else's brain switch on the second the sun goes down?31 Jul 2026 01:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mrvqypy6ck2ehttps://bsky.app/profile/volkis.au/post/3mrtaiolcko2oMeet the operator, Nathan Jarvie, our Senior Security Consultant. He's a hacker with deep hands-on experience, and he's chasing every certification he can get his hands on. 13 certifications in cybersecurity so far, with more on the way.30 Jul 2026 01:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mrtaiolcko2ohttps://bsky.app/profile/volkis.au/post/3mre5p7qwie2mAvoid this happening. Reach out today 👇24 Jul 2026 01:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mre5p7qwie2mhttps://bsky.app/profile/volkis.au/post/3mqzyip246l2fThere was a time when companies proudly talked about what they actually stood for. Then "values" just became corporate posters gathering dust in boardroom hallways.20 Jul 2026 00:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mqzyip246l2fhttps://bsky.app/profile/volkis.au/post/3mqt3akq3pi2rWe just moved the Volkis Handbook from v1 to v2. It still publishes everything we do that isn't confidential: methodologies, sample reports, internal policies, hiring guidelines, our AI usage rules. Open but secure since day one.17 Jul 2026 06:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mqt3akq3pi2rhttps://bsky.app/profile/volkis.au/post/3mqpyabkwfl2xWe put *.volkis.com.au and *.volk.is in scope for anyone who wants to try.16 Jul 2026 00:30 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mqpyabkwfl2xhttps://bsky.app/profile/volkis.au/post/3mql7qkmvdd2aLook, we could hit you with the usual corporate jargon about "synergistic paradigm-shifting cyber resilience", but honestly, we’d rather just do the job properly.14 Jul 2026 03:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mql7qkmvdd2ahttps://bsky.app/profile/volkis.au/post/3mq6de5lo3m2q22% of assessed Australian government entities hit Maturity Level 2 across the Essential Eight, and the board reads it as progress.  ML2 measures if the control exists, but not whether they can stop a real attack.09 Jul 2026 00:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mq6de5lo3m2qhttps://bsky.app/profile/volkis.au/post/3mq3pljlywd24Meet Matthew Strahan, Co-Founder and Managing Director at Volkis. At Volkis, “people first” shows up in the details: how we talks about clients, hiring, learning, remote work, culture, and even security itself.07 Jul 2026 23:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mq3pljlywd24https://bsky.app/profile/volkis.au/post/3mow7ccnua62qMeet Alexei Doudkine, Co-Founder and Offensive Director at Volkis. Alexei is one of the reasons the Volkis voice is so direct. The job is to think like a hacker, explain what matters, and help the client get to a better place.23 Jun 2026 01:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mow7ccnua62qhttps://bsky.app/profile/volkis.au/post/3moti62abtk2586,644 Fortinet firewalls across 194 countries, compromised with verified working credentials. Banks, hospitals, telecoms, government agencies.21 Jun 2026 23:03 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3moti62abtk25https://bsky.app/profile/volkis.au/post/3mojmy3wjga2lPeople are your strongest cybersecurity asset. The most powerful security move you can make is to build a culture that normalises good security. Make it normal to question someone's presence in the office, forward a suspicious email to security, lock your screen, etc.18 Jun 2026 01:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mojmy3wjga2lhttps://bsky.app/profile/volkis.au/post/3mnybxrv6ii2jOnce an attacker has obtained Domain Admin on a network, DCShadow (aka Rogue Domain Controller) is a neat technique for dumping more information and persisting access.11 Jun 2026 03:30 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mnybxrv6ii2jhttps://bsky.app/profile/volkis.au/post/3mntefsruhh2wHere are a few examples of how attackers make phishing domains look convincing. Would you be fooled?09 Jun 2026 04:30 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mntefsruhh2whttps://bsky.app/profile/volkis.au/post/3mngbchk3oy2tVaronis Threat Labs disclosed "GhostTree", a cool new technique that weaponises NTFS junctions for EDR evasion. By pointing a junction back at its own parent, an attacker creates a directory loop that yields effectively infinite paths: C:\Parent\Child1\Child2\Child1\Child2\...03 Jun 2026 23:30 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mngbchk3oy2thttps://bsky.app/profile/volkis.au/post/3mnedddkgx22jThere are thousands of wordlists available on the internet, but downloading them all blindly is a quick way to run out of storage and waste time.03 Jun 2026 05:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mnedddkgx22jhttps://bsky.app/profile/volkis.au/post/3mmxgwtqi7b2bWe published our internal AI usage guidelines. It covers: 🤖 When you should (and shouldn't) use AI with client data 🤖 The acceptable way to use AI for reporting 🤖 Why you shouldn't use AI to communicate with your coworkers https://handbook.volkis.com.au/operations/ai-guidelines/29 May 2026 02:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mmxgwtqi7b2bhttps://bsky.app/profile/volkis.au/post/3mmrvalulko27Using AI for hacking is like a using the pokies. You pay tokens for an output, and hope that the output is good. The thing is, if you don't have solid knowledge of hacking, then you don't know whether the output is good. So you still need humans who are good at hacking.26 May 2026 21:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mmrvalulko27https://bsky.app/profile/volkis.au/post/3mmnf33gun62uWe took our recent Associate Security Consultant hire to shadow an internal pentest earlier this year, and it was the best. Alissa's training paid off on real network! It was pure joy. It brought back to the incredible rush of hacking. I never want to lose the love of hacking. Thanks Alissa!25 May 2026 02:01 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mmnf33gun62uhttps://bsky.app/profile/volkis.au/post/3mltzre4lbg2nBack in 2018, when a CVE was released, it took 2.3 years to exploit. 2024: 56 days. Now: 1 day. End of 2026? 1 hour. Reactive approaches to security are no longer effective. If you want expert guidance for the new era, get in touch. https://www.volkis.com.au/contact/15 May 2026 00:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mltzre4lbg2nhttps://bsky.app/profile/volkis.au/post/3mk2cfhqpxx2y🧪 Volkis Lab Challenge: Command Execution   Drop your payload 🐺22 Apr 2026 01:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mk2cfhqpxx2yhttps://bsky.app/profile/volkis.au/post/3mjvotql7sv2u🧪 Volkis Lab: Privilege Escalation   You don’t need exploits when the system hands you the right tool. 🐺 Can you spot it?20 Apr 2026 05:02 +0000at://did:plc:wvxtdntdfl2dinbo5t7dwmnp/app.bsky.feed.post/3mjvotql7sv2u