Skip to main content
PTP Cyber Fest 2026. Built for people to get involved 
  • Shameless Self Promotion
PTP Cyber Fest 2026. Built for people to get involved 

6 Min Read

Jun 12, 2026
ClickFix, CrashFix and the growing family of copy and paste attacks 
  • Digital Forensics and Incident Response
ClickFix, CrashFix and the growing family of copy and paste attacks 

13 Min Read

Jun 10, 2026
Shelly Wall Display exposed RPC over Bluetooth 
  • Hardware Hacking
  • Vulnerabilities and Disclosures
Shelly Wall Display exposed RPC over Bluetooth 

4 Min Read

May 26, 2026
OT pen test findings that plant teams can actually use 
  • OT, ICS, IIoT, SCADA
OT pen test findings that plant teams can actually use 

16 Min Read

May 14, 2026
AI can help in DFIR, but it cannot replace investigator judgement
  • Artificial Intelligence
  • Digital Forensics and Incident Response
AI can help in DFIR, but it cannot replace investigator judgement

10 Min Read

Apr 21, 2026
You can pen test OT networks without breaking them 
  • OT, ICS, IIoT, SCADA
You can pen test OT networks without breaking them 

11 Min Read

Apr 09, 2026
Digital Operational Resilience Act (DORA) 
  • Cyber Regulation
  • GRC Consultancy Advice
Digital Operational Resilience Act (DORA) 

9 Min Read

Mar 31, 2026
Insecure IAM is the root of many cloud security failures
  • Cloud Security
Insecure IAM is the root of many cloud security failures

6 Min Read

Mar 24, 2026
Taming the dragon: reverse engineering firmware with Ghidra 
  • Hardware Hacking
  • How Tos
  • Reverse Engineering
Taming the dragon: reverse engineering firmware with Ghidra 

14 Min Read

Mar 12, 2026
Breaking Out of Citrix and other Restricted Desktop Environments
  • How Tos
  • Virtual Environments
Breaking Out of Citrix and other Restricted Desktop Environments

25 Min Read

Mar 02, 2026
EV batteries as grid infrastructure and the security risk that follows 
  • Automotive Security
  • Opinions
EV batteries as grid infrastructure and the security risk that follows 

6 Min Read

Feb 24, 2026
Shelly IoT door controller config fail: leaving your garage, home and security exposed
  • Internet Of Things
  • Vulnerabilities and Disclosures
Shelly IoT door controller config fail: leaving your garage, home and security exposed

8 Min Read

Feb 11, 2026
Covert recording is easy, which is the problem  
  • Social Engineering
Covert recording is easy, which is the problem  

5 Min Read

Feb 03, 2026
Movie breakdown: Hackers (1995) 
  • Opinions
Movie breakdown: Hackers (1995) 

6 Min Read

Jan 30, 2026
Preparing for the EU Cyber Resilience Act (CRA) 
  • Cyber Regulation
Preparing for the EU Cyber Resilience Act (CRA) 

8 Min Read

Jan 22, 2026
Carlsberg… probably not the best cybersecurity in the world
  • Passwords
  • Vulnerabilities and Disclosures
Carlsberg… probably not the best cybersecurity in the world

7 Min Read

Jan 16, 2026
Compromising a multi-cloud environment from a single exposed secret 
  • Cloud Security
Compromising a multi-cloud environment from a single exposed secret 

6 Min Read

Jan 13, 2026
AI noise and the effect it’s having on vulnerability disclosure programs 
  • Artificial Intelligence
  • Vulnerabilities and Disclosures
AI noise and the effect it’s having on vulnerability disclosure programs 

5 Min Read

Jan 09, 2026
2025, the year of the Infostealer 
  • Digital Forensics and Incident Response
2025, the year of the Infostealer 

12 Min Read

Jan 06, 2026
Beyond cloud compliance dashboards, what’s next? 
  • Cloud Security
Beyond cloud compliance dashboards, what’s next? 

6 Min Read

Jan 05, 2026
Eurostar AI vulnerability: when a chatbot goes off the rails
  • Artificial Intelligence
  • Vulnerabilities and Disclosures
Eurostar AI vulnerability: when a chatbot goes off the rails

19 Min Read

Dec 22, 2025
The built-in Windows security features you should be using 
  • Digital Forensics and Incident Response
  • How Tos
The built-in Windows security features you should be using 

6 Min Read

Dec 04, 2025
Android Activities 101
  • Android
Android Activities 101

9 Min Read

Nov 27, 2025
Common Kubernetes misconfigurations and how to avoid them
  • Cloud Security
  • How Tos
Common Kubernetes misconfigurations and how to avoid them

6 Min Read

Nov 18, 2025
Exploiting AgTech connectivity to corner the grain market
  • Internet Of Things
Exploiting AgTech connectivity to corner the grain market

6 Min Read

Nov 13, 2025
Finding your path into DFIR 
  • Digital Forensics and Incident Response
Finding your path into DFIR 

9 Min Read

Nov 11, 2025
What testers need to know about the changes to the CHECK scheme
  • Cyber Regulation
What testers need to know about the changes to the CHECK scheme

4 Min Read

Nov 04, 2025
Security awareness: four pillars for staying safe online 
  • Consumer Advice
  • How Tos
Security awareness: four pillars for staying safe online 

12 Min Read

Oct 30, 2025
Hardening your home lab 
  • How Tos
Hardening your home lab 

16 Min Read

Oct 23, 2025
Stop payroll diversion scams before they start
  • Consumer Advice
  • How Tos
Stop payroll diversion scams before they start

6 Min Read

Oct 21, 2025
The logs you’ll wish you had configured if (when) you are breached… 
  • Digital Forensics and Incident Response
The logs you’ll wish you had configured if (when) you are breached… 

7 Min Read

Oct 17, 2025
Compiling static Nmap binary for jobs in restricted environments
  • How Tos
Compiling static Nmap binary for jobs in restricted environments

8 Min Read

Oct 14, 2025
What Speed 2 gets right and wrong about ship hacking
  • Security Blog
What Speed 2 gets right and wrong about ship hacking

8 Min Read

Oct 08, 2025
Spot trouble early with honeypots and Suricata
  • Digital Forensics and Incident Response
  • Honeypots
Spot trouble early with honeypots and Suricata

12 Min Read

Oct 02, 2025
Discord as a C2 and the cached evidence left behind
  • Digital Forensics and Incident Response
Discord as a C2 and the cached evidence left behind

11 Min Read

Sep 16, 2025
A buyer’s guide to CHECK in 2025
  • Cyber Regulation
  • Security Blog
A buyer’s guide to CHECK in 2025

5 Min Read

Sep 10, 2025
Start hacking Bluetooth Low Energy today! (part 3) 
  • Hardware Hacking
  • How Tos
Start hacking Bluetooth Low Energy today! (part 3) 

11 Min Read

Sep 04, 2025
Android Broadcast Receivers 101 
  • Android
  • How Tos
Android Broadcast Receivers 101 

6 Min Read

Sep 02, 2025
Start hacking Bluetooth Low Energy today! (part 2) 
  • Hardware Hacking
  • How Tos
Start hacking Bluetooth Low Energy today! (part 2) 

9 Min Read

Aug 27, 2025
Start hacking Bluetooth Low Energy today! (part 1)
  • Hardware Hacking
  • How Tos
Start hacking Bluetooth Low Energy today! (part 1)

15 Min Read

Aug 21, 2025
Terraform Cloud token abuse turns speculative plan into remote code execution
  • Cloud Security
Terraform Cloud token abuse turns speculative plan into remote code execution

12 Min Read

Aug 15, 2025
Thumbnail forensics. DFIR techniques for analysing Windows Thumbcache
  • Digital Forensics and Incident Response
Thumbnail forensics. DFIR techniques for analysing Windows Thumbcache

7 Min Read

Aug 08, 2025
How to transfer files in AWS using SSM
  • Cloud Security
  • How Tos
How to transfer files in AWS using SSM

4 Min Read

Aug 05, 2025
DFIR tools and techniques for tracing user footprints through Shellbags 
  • Digital Forensics and Incident Response
DFIR tools and techniques for tracing user footprints through Shellbags 

9 Min Read

Jul 31, 2025
Rethinking cyber insurance questions to find real risk
  • Cyber Liability Insurance
Rethinking cyber insurance questions to find real risk

5 Min Read

Jul 30, 2025
Our capabilities. A story about what we can achieve
  • Shameless Self Promotion
Our capabilities. A story about what we can achieve

15 Min Read

Jul 28, 2025
Android Services 101 
  • Android
  • How Tos
Android Services 101 

9 Min Read

Jul 25, 2025
Leaked data. Continuous glucose monitoring
  • Internet Of Things
Leaked data. Continuous glucose monitoring

5 Min Read

Jul 22, 2025
Using AI Chatbots to examine leaked data 
  • Artificial Intelligence
  • Digital Forensics and Incident Response
Using AI Chatbots to examine leaked data 

4 Min Read

Jul 18, 2025
Framework 13. Press here to pwn 
  • Vulnerabilities and Disclosures
Framework 13. Press here to pwn 

5 Min Read

Jul 16, 2025
Sil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server
  • Digital Forensics and Incident Response
Sil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server

7 Min Read

Jul 11, 2025
How to conduct a Password Audit in Active Directory (AD)
  • How Tos
How to conduct a Password Audit in Active Directory (AD)

11 Min Read

Jul 08, 2025
Pet microchip scams and data leaks in the UK
  • Consumer Advice
Pet microchip scams and data leaks in the UK

6 Min Read

Jul 04, 2025
How we turned a real car into a Mario Kart controller by intercepting CAN data
  • Automotive Security
How we turned a real car into a Mario Kart controller by intercepting CAN data

9 Min Read

Jun 26, 2025
CSP directives. Base-ic misconfigurations with big consequences
  • How Tos
CSP directives. Base-ic misconfigurations with big consequences

9 Min Read

Jun 23, 2025
Prepare for the UK Cyber Security and Resilience Bill
  • Cyber Regulation
  • How Tos
Prepare for the UK Cyber Security and Resilience Bill

4 Min Read

Jun 19, 2025
Android AI UX is great until it leaks your data
  • Android
  • Artificial Intelligence
Android AI UX is great until it leaks your data

8 Min Read

Jun 17, 2025
PTP Cyber Fest 2025. More than just another conference
  • Shameless Self Promotion
PTP Cyber Fest 2025. More than just another conference

4 Min Read

Jun 13, 2025
Fire detection system been pwned? You’re not going to sea
  • Vulnerabilities and Disclosures
Fire detection system been pwned? You’re not going to sea

10 Min Read

May 30, 2025
How to load unsigned or fake-signed apps on iOS
  • How Tos
How to load unsigned or fake-signed apps on iOS

10 Min Read

May 28, 2025
War stories from the DFIR front line
  • Digital Forensics and Incident Response
  • Shameless Self Promotion
War stories from the DFIR front line

11 Min Read

May 27, 2025
Fully segregated networks? Your dual-homed devices might disagree
  • OT, ICS, IIoT, SCADA
Fully segregated networks? Your dual-homed devices might disagree

9 Min Read

May 22, 2025
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…
  • Artificial Intelligence
  • Red Teaming
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…

17 Min Read

May 20, 2025
VNC. RDP for all to see
  • How Tos
VNC. RDP for all to see

5 Min Read

May 16, 2025
New cybersecurity rules for smart heat pump manufacturers
  • Cyber Regulation
  • Sustainability
New cybersecurity rules for smart heat pump manufacturers

5 Min Read

May 13, 2025
RCEs and more in the KUNBUS GmbH Revolution Pi PLC
  • Hardware Hacking
  • Vulnerabilities and Disclosures
RCEs and more in the KUNBUS GmbH Revolution Pi PLC

15 Min Read

May 08, 2025
Exploiting Copilot AI for SharePoint
  • Artificial Intelligence
  • Red Teaming
Exploiting Copilot AI for SharePoint

10 Min Read

May 07, 2025
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache
  • Digital Forensics and Incident Response
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache

8 Min Read

May 01, 2025
Hiding behind a password
  • Passwords
Hiding behind a password

5 Min Read

Apr 29, 2025
The dangers of web based messaging apps
  • Consumer Advice
The dangers of web based messaging apps

6 Min Read

Apr 25, 2025
Unallocated space analysis
  • Digital Forensics and Incident Response
Unallocated space analysis

5 Min Read

Apr 23, 2025
Not everything in a data leak is real
  • Digital Forensics and Incident Response
Not everything in a data leak is real

3 Min Read

Apr 15, 2025
Don’t use corporate email for your personal life
  • How Tos
Don’t use corporate email for your personal life

5 Min Read

Apr 09, 2025
Preparing for the EU Radio Equipment Directive security requirements
  • Cyber Regulation
  • Internet Of Things
Preparing for the EU Radio Equipment Directive security requirements

3 Min Read

Apr 03, 2025
Backdoor in the Backplane. Doing IPMI security better
  • How Tos
Backdoor in the Backplane. Doing IPMI security better

7 Min Read

Mar 31, 2025
The first 24 hours of a cyber incident. A practical playbook
  • Digital Forensics and Incident Response
The first 24 hours of a cyber incident. A practical playbook

6 Min Read

Mar 24, 2025
Cybersecurity communities. Small hacker groups, big impact
  • Opinions
Cybersecurity communities. Small hacker groups, big impact

5 Min Read

Mar 19, 2025
Take control of Cache-Control and local caching
  • How Tos
Take control of Cache-Control and local caching

4 Min Read

Mar 12, 2025
How I became a Cyber Essentials Plus assessor
  • GRC Consultancy Advice
How I became a Cyber Essentials Plus assessor

10 Min Read

Mar 06, 2025
DNSSEC NSEC. The accidental treasure map to your subdomains
  • How Tos
DNSSEC NSEC. The accidental treasure map to your subdomains

9 Min Read

Mar 04, 2025
A dive into the Rockchip Bootloader
  • Hardware Hacking
A dive into the Rockchip Bootloader

8 Min Read

Feb 26, 2025
Pen testing avionics under ED-203a
  • Aviation Cyber Security
Pen testing avionics under ED-203a

3 Min Read

Feb 21, 2025
Watch where you point that cred! Part 1
  • How Tos
Watch where you point that cred! Part 1

8 Min Read

Feb 18, 2025
New mandatory USCG cyber regulations. What you need to know
  • Cyber Regulation
  • Maritime Cyber Security
New mandatory USCG cyber regulations. What you need to know

4 Min Read

Feb 14, 2025
PCI DSS v4.0 Evidence and documentation requirements checklist
  • GRC Consultancy Advice
PCI DSS v4.0 Evidence and documentation requirements checklist

6 Min Read

Feb 13, 2025
PCI DSS. Where to start?
  • GRC Consultancy Advice
PCI DSS. Where to start?

4 Min Read

Feb 11, 2025
ICS testing best results. Hint: Blend your approach
  • OT, ICS, IIoT, SCADA
ICS testing best results. Hint: Blend your approach

6 Min Read

Feb 07, 2025
A tale of enumeration, and why pen testing can’t be automated
  • How Tos
A tale of enumeration, and why pen testing can’t be automated

7 Min Read

Feb 05, 2025
How Garmin watches reveal your personal data, and what you can do
  • Digital Forensics and Incident Response
How Garmin watches reveal your personal data, and what you can do

8 Min Read

Jan 28, 2025
Cyber security guidance for small fleet operators
  • Maritime Cyber Security
Cyber security guidance for small fleet operators

10 Min Read

Jan 24, 2025
How to secure body-worn cameras and protect footage from cyber threats
  • Hardware Hacking
How to secure body-worn cameras and protect footage from cyber threats

4 Min Read

Jan 21, 2025
Security flaws found in tiny phones promoted to children
  • Consumer Advice
Security flaws found in tiny phones promoted to children

9 Min Read

Jan 15, 2025
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection
  • Artificial Intelligence
  • Digital Forensics and Incident Response
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection

14 Min Read

Jan 13, 2025
The unexpected effects of GPS spoofing on aviation safety
  • Aviation Cyber Security
The unexpected effects of GPS spoofing on aviation safety

8 Min Read

Jan 09, 2025
10 Non-tech things you wish you had done after being breached
  • Digital Forensics and Incident Response
10 Non-tech things you wish you had done after being breached

5 Min Read

Jan 07, 2025
The surprising existence of the erase button on cockpit voice recorders
  • Aviation Cyber Security
The surprising existence of the erase button on cockpit voice recorders

8 Min Read

Jan 03, 2025
Heels on fire. Hacking smart ski socks
  • Internet Of Things
Heels on fire. Hacking smart ski socks

3 Min Read

Dec 23, 2024
Practice being punched in the face. The realities of incident response preparation
  • Digital Forensics and Incident Response
Practice being punched in the face. The realities of incident response preparation

4 Min Read

Dec 20, 2024
How easily access cards can be cloned and why your PACS might be vulnerable
  • Hardware Hacking
How easily access cards can be cloned and why your PACS might be vulnerable

12 Min Read

Dec 11, 2024
Making sure your door access control system is secure: Top 5 things to check
  • Hardware Hacking
Making sure your door access control system is secure: Top 5 things to check

3 Min Read

Dec 09, 2024
1 2 3 … 10