Security Blog
Opinions
The Pen Test Partners Security Blog brings you the latest news and trends in penetration testing and the internet security industry.
More about our security blog »
For the best user experience please upgrade your browser
Testing the security of CCTV systems
30 Oct 2024
Imposter syndrome in cyber security
10 Oct 2024
Key safe security, or the lack of it
07 Aug 2024
Navigating the perilous waters of conference invitations
14 Mar 2024
Listening in at Latimer House. RF emissions and more
09 Jan 2024
2021. The age of the super vulnerability?
26 Apr 2021
A cyber warning light. The canary in the mine
11 Jun 2020
Why we shouldn’t use sequential booking references
19 Jun 2019
Business banking fraud. Keep your eggs in TWO baskets. Here’s why…
26 Mar 2019
Hacking the Bitfi Part 5: MITM transactions
14 Aug 2018
Bitfi research receives Pwnie Award for ‘lamest vendor response’
09 Aug 2018
Tamper proofing review: the iZettle card payment terminal
08 Aug 2018
Hacking the Bitfi Part 3: The device with no storage
03 Aug 2018
Hacking the Bitfi. Part 2: John McAfee’s video
02 Aug 2018
Hacking the Bitfi. Part 1
31 Jul 2018
“Unhackable” Bitfi crypto wallet. What’s all the fuss about?
30 Jul 2018
VTech strikes again
18 Jan 2018
Petya/NotPetya. What you need to know
28 Jun 2017
Cyber Mum Vs Cyber Daughter
28 Jun 2017
IN THE NEWS: Samsung’s S8 Iris and biometric revocation
24 May 2017
WannaCry ransomware. It’s not all bad news
15 May 2017
You can have your cookie and eat it!
03 Mar 2017
PTP brief UK Government on Cyber Security and call for IoT legislation
23 Feb 2017
Can Linux really be owned by holding the Enter key?
16 Nov 2016
BLN’s IoT Forum. What went down
10 Mar 2016
Pwning CCTV cameras: Update
23 Feb 2016
Cisco ASA Remote Code Execution – Buffer Overflow in IKE code
16 Feb 2016
When VTech meets the GDPR
11 Feb 2016
Pwning CCTV cameras
10 Feb 2016
Why I think that U.S. house is hounded by phone trackers
25 Jan 2016
After the BBC contacted us for comment on this story I thought it’d be useful and interesting to share the details that were omitted, as well as the reasoning behind some of my assumptions (none of which involve the Bermuda triangle BTW).
Wi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?
05 Jan 2016
VTech Innotab Max: it’s getting even worse! Apps run in debug mode
03 Dec 2015
The IoT: Innovation or Exploitation?
18 Nov 2015
What if your fridge said “no”? What if indeed?
11 Nov 2015
Concerned about KeeFarce? Don’t be. Why you should still use a password vault
09 Nov 2015
The TalkTalk breach, Ken Munro will be on the BBC later…
23 Oct 2015
Tonight’s CSI Cyber: implausible Marla talking doll hack. Fiction stranger than truth for once
06 Oct 2015
AirDrop and Cyber Flashing, what’s the deal?
13 Aug 2015
The tiniest PHP system shell ever?
07 Jul 2015
Oracle wants you to run vulnerable Java to remove vulnerable versions of Java
03 Jul 2015
CVSSv3. What’s changed? …or why even bother?
12 Jun 2015
Thought you had seen FUD? Now see this: a rock can protect your computer from viruses
22 May 2015
Why I hate named vulnerabilities
22 May 2015
Zero-code platforms? More like zero-clue platforms
07 May 2015
Ryanair. A timely reminder why Europeans need First Party Cyber Liability Insurance
01 May 2015
MS15-034. What you need to know
16 Apr 2015
Move over SHA-1, SHA-2 is coming. Here’s the why and the how
09 Apr 2015
Protecting yourself from your customers
31 Mar 2015
EAP-TLS: Where Mac security is worse than Windows
19 Mar 2015
Samsung TV voice encryption UPDATE: Fixed, but not quite…
06 Mar 2015
The lowdown on the SKIP-TLS and FREAK flaws UPDATE
06 Mar 2015
The lowdown on the SKIP-TLS and FREAK flaws
05 Mar 2015
Biometric revocation not an option
04 Mar 2015
Is your Samsung TV listening to you? – UPDATE
27 Feb 2015
Fight! Fight! Hello Barbie vs My Friend Cayla
18 Feb 2015
Is your Samsung TV listening to you?
16 Feb 2015
RC4 cipher considered harmful?
22 Jan 2015
Are your smart weighing scales lying to you? Quite possibly (part 2)
09 Jan 2015
Are your smart weighing scales lying to you? Quite possibly (part 1)
06 Jan 2015
The internet of toys, and why we’re holding back this Xmas
23 Dec 2014
Google’s No CAPTCHA reCAPTCHA, what we think
15 Dec 2014
Data tethering on mobile devices – what are the risks?
09 Dec 2014
Protocol vs Implementation. Why MS14-066 and SChannel got my goat
12 Nov 2014
Patch management, it’s sexy, here’s why
11 Nov 2014
App creep: Facebook security issues
10 Nov 2014
First Hudl2 Teardown?
08 Oct 2014
Today’s BBC Article: Securing your nudie selfies
02 Sep 2014
BBC Article: Tracking smartphones using Wi-Fi emissions
26 Aug 2014
New Rockchip firmware being released, but who is going to flash my grandma’s tablet?
22 Aug 2014
Shiny New Pen Test Report! So What…
29 Jul 2014
Sketchy BIS Report Data, FUD, and Why You Need Cyber Liability Insurance
11 Jul 2014
BMW i3 password issues
28 May 2014
The truth behind vulnerabilities, a missive from the trenches
23 May 2014
Defeating corporate anti-virus
20 May 2014
SayNoTo0870.com SayYesToCreditCardFraud.co.uk..?
25 Apr 2014
Wildcard SSL certificates, not good value any more, my Heartbleeds
15 Apr 2014
Heartbleed in the wild, the call of duty
14 Apr 2014
Why you might want to rethink providing free wi-fi
07 Apr 2014
Top Tips For Internet Privacy
04 Apr 2014
Create a honeynet, dupe your attackers, build threat intelligence
24 Mar 2014
Hacking Computer Games
20 Mar 2014
Connected cars, signals systems, mischief and European drivers. These scare me.
14 Mar 2014
8 ways to be great at password management, and protect your customers
13 Mar 2014
Really? A notebook to write down your passwords in, sold by Amazon?
10 Mar 2014
Webcam Security: I can SEE you!
04 Mar 2014
Keylogging domain creds; who needs a hash? Lock the victim’s workstation to order and snarf them immediately
03 Mar 2014
Threat Intelligence: Log File Hacking
26 Feb 2014
Password re-use: the game is changing, SO USE A PASSWORD VAULT!
21 Feb 2014
Can you really wipe a mobile device remotely?
20 Feb 2014
Analysis of reported Tesco account and password data
14 Feb 2014
It’s Safer Internet Day and we’ve got six tips to help you stay out of trouble
11 Feb 2014
Cyber liability insurance, you need it, and here’s why…
11 Feb 2014
There are “pen tests” and then there are “PEN TESTS”…
28 Jan 2014
Encryption and cloud based storage
27 Jan 2014
Passwords, passwords, passwords (repeat)
24 Jan 2014
Belt AND Braces: Web apps and mod_security
22 Jan 2014
Test early, test often: 6 things you should know about application security testing
17 Jan 2014
Hackey Phishmas!
16 Dec 2013
Cyber security kite mark being touted, but for what exactly? People? Passwords? Patches?
12 Dec 2013
What we can learn from Meerkats?
03 Dec 2013
The Coming Revolution: Hardware attacks and the internet of things
26 Nov 2013
Is that a bug in your pocket or are you just happy to see me?
05 Nov 2013
Clickjacking explained, in detail
17 Oct 2013
DRM – The conundrum for protecting intellectual property
09 Oct 2013
Duplicate Passwords: Why IT Support Needs a Wake Up Call
08 Oct 2013
Why porn is an effective malware distribution mechanism
13 Sep 2013
DefCon21 Ruminations
04 Aug 2013
Suffered a Security breach?
Mobile Security
Social Engineering
Web application testing
Security Consuting
