Skip to main content
Discord as a C2 and the cached evidence left behind
  • DFIR
Discord as a C2 and the cached evidence left behind

11 Min Read

Sep 16, 2025
A buyer’s guide to CHECK in 2025
  • Cyber Regulation
  • Security Blog
A buyer’s guide to CHECK in 2025

5 Min Read

Sep 10, 2025
Start hacking Bluetooth Low Energy today! (part 3) 
  • Hardware Hacking
  • How Tos
Start hacking Bluetooth Low Energy today! (part 3) 

11 Min Read

Sep 04, 2025
Android Broadcast Receivers 101 
  • Android
  • How Tos
Android Broadcast Receivers 101 

6 Min Read

Sep 02, 2025
Start hacking Bluetooth Low Energy today! (part 2) 
  • Hardware Hacking
  • How Tos
Start hacking Bluetooth Low Energy today! (part 2) 

9 Min Read

Aug 27, 2025
Start hacking Bluetooth Low Energy today! (part 1)
  • Hardware Hacking
  • How Tos
Start hacking Bluetooth Low Energy today! (part 1)

15 Min Read

Aug 21, 2025
Terraform Cloud token abuse turns speculative plan into remote code execution
  • Cloud Security
Terraform Cloud token abuse turns speculative plan into remote code execution

12 Min Read

Aug 15, 2025
Thumbnail forensics. DFIR techniques for analysing Windows Thumbcache
  • DFIR
Thumbnail forensics. DFIR techniques for analysing Windows Thumbcache

7 Min Read

Aug 08, 2025
How to transfer files in AWS using SSM
  • Cloud Security
  • How Tos
How to transfer files in AWS using SSM

4 Min Read

Aug 05, 2025
DFIR tools and techniques for tracing user footprints through Shellbags 
  • DFIR
DFIR tools and techniques for tracing user footprints through Shellbags 

9 Min Read

Jul 31, 2025
Rethinking cyber insurance questions to find real risk
  • Cyber Liability Insurance
Rethinking cyber insurance questions to find real risk

5 Min Read

Jul 30, 2025
Our capabilities. A story about what we can achieve
  • Shameless Self Promotion
Our capabilities. A story about what we can achieve

11 Min Read

Jul 28, 2025
Android Services 101 
  • Android
  • How Tos
Android Services 101 

9 Min Read

Jul 25, 2025
Leaked data. Continuous glucose monitoring
  • Internet Of Things
Leaked data. Continuous glucose monitoring

5 Min Read

Jul 22, 2025
Using AI Chatbots to examine leaked data 
  • DFIR
Using AI Chatbots to examine leaked data 

4 Min Read

Jul 18, 2025
Framework 13. Press here to pwn 
  • Vulnerability Disclosure
Framework 13. Press here to pwn 

5 Min Read

Jul 16, 2025
Sil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server
  • DFIR
Sil3ncer Deployed – RCE, Porn Diversion, and Ransomware on an SFTP-only Server

7 Min Read

Jul 11, 2025
How to conduct a Password Audit in Active Directory (AD)
  • How Tos
How to conduct a Password Audit in Active Directory (AD)

11 Min Read

Jul 08, 2025
Pet microchip scams and data leaks in the UK
  • Consumer Advice
Pet microchip scams and data leaks in the UK

6 Min Read

Jul 04, 2025
How we turned a real car into a Mario Kart controller by intercepting CAN data
  • Automotive Security
How we turned a real car into a Mario Kart controller by intercepting CAN data

9 Min Read

Jun 26, 2025
CSP directives. Base-ic misconfigurations with big consequences
  • How Tos
CSP directives. Base-ic misconfigurations with big consequences

9 Min Read

Jun 23, 2025
Prepare for the UK Cyber Security and Resilience Bill
  • Cyber Regulation
  • How Tos
Prepare for the UK Cyber Security and Resilience Bill

4 Min Read

Jun 19, 2025
Android AI UX is great until it leaks your data
  • Android
Android AI UX is great until it leaks your data

8 Min Read

Jun 17, 2025
PTP Cyber Fest 2025. More than just another conference
  • Shameless Self Promotion
PTP Cyber Fest 2025. More than just another conference

4 Min Read

Jun 13, 2025
Fire detection system been pwned? You’re not going to sea
  • Vulnerability Advisory
Fire detection system been pwned? You’re not going to sea

10 Min Read

May 30, 2025
How to load unsigned or fake-signed apps on iOS
  • How Tos
How to load unsigned or fake-signed apps on iOS

10 Min Read

May 28, 2025
War stories from the DFIR front line
  • DFIR
  • Shameless Self Promotion
War stories from the DFIR front line

11 Min Read

May 27, 2025
Fully segregated networks? Your dual-homed devices might disagree
  • OT, ICS, IIoT, SCADA
Fully segregated networks? Your dual-homed devices might disagree

9 Min Read

May 22, 2025
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…
  • Red Teaming
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…

17 Min Read

May 20, 2025
VNC. RDP for all to see
  • How Tos
VNC. RDP for all to see

5 Min Read

May 16, 2025
New cybersecurity rules for smart heat pump manufacturers
  • Cyber Regulation
  • Sustainability
New cybersecurity rules for smart heat pump manufacturers

5 Min Read

May 13, 2025
RCEs and more in the KUNBUS GmbH Revolution Pi PLC
  • Vulnerability Advisory
RCEs and more in the KUNBUS GmbH Revolution Pi PLC

15 Min Read

May 08, 2025
Exploiting Copilot AI for SharePoint
  • Red Teaming
Exploiting Copilot AI for SharePoint

10 Min Read

May 07, 2025
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache
  • DFIR
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache

8 Min Read

May 01, 2025
Hiding behind a password
  • Passwords
Hiding behind a password

5 Min Read

Apr 29, 2025
The dangers of web based messaging apps
  • Consumer Advice
The dangers of web based messaging apps

6 Min Read

Apr 25, 2025
Unallocated space analysis
  • DFIR
Unallocated space analysis

5 Min Read

Apr 23, 2025
Not everything in a data leak is real
  • DFIR
Not everything in a data leak is real

3 Min Read

Apr 15, 2025
Don’t use corporate email for your personal life
  • How Tos
Don’t use corporate email for your personal life

5 Min Read

Apr 09, 2025
Preparing for the EU Radio Equipment Directive security requirements
  • Cyber Regulation
  • Internet Of Things
Preparing for the EU Radio Equipment Directive security requirements

3 Min Read

Apr 03, 2025
Backdoor in the Backplane. Doing IPMI security better
  • How Tos
Backdoor in the Backplane. Doing IPMI security better

7 Min Read

Mar 31, 2025
The first 24 hours of a cyber incident. A practical playbook
  • DFIR
The first 24 hours of a cyber incident. A practical playbook

6 Min Read

Mar 24, 2025
Cybersecurity communities. Small hacker groups, big impact
  • Opinions
Cybersecurity communities. Small hacker groups, big impact

5 Min Read

Mar 19, 2025
Take control of Cache-Control and local caching
  • How Tos
Take control of Cache-Control and local caching

4 Min Read

Mar 12, 2025
How I became a Cyber Essentials Plus assessor
  • Consultancy advice
How I became a Cyber Essentials Plus assessor

10 Min Read

Mar 06, 2025
DNSSEC NSEC. The accidental treasure map to your subdomains
  • How Tos
DNSSEC NSEC. The accidental treasure map to your subdomains

9 Min Read

Mar 04, 2025
A dive into the Rockchip Bootloader
  • Hardware Hacking
A dive into the Rockchip Bootloader

8 Min Read

Feb 26, 2025
Pen testing avionics under ED-203a
  • Aviation Cyber Security
Pen testing avionics under ED-203a

3 Min Read

Feb 21, 2025
Watch where you point that cred! Part 1
  • How Tos
Watch where you point that cred! Part 1

8 Min Read

Feb 18, 2025
New mandatory USCG cyber regulations. What you need to know
  • Cyber Regulation
  • Maritime Cyber Security
New mandatory USCG cyber regulations. What you need to know

4 Min Read

Feb 14, 2025
PCI DSS v4.0 Evidence and documentation requirements checklist
  • Consultancy advice
PCI DSS v4.0 Evidence and documentation requirements checklist

6 Min Read

Feb 13, 2025
PCI DSS. Where to start?
  • Consultancy advice
PCI DSS. Where to start?

4 Min Read

Feb 11, 2025
ICS testing best results. Hint: Blend your approach
  • OT, ICS, IIoT, SCADA
ICS testing best results. Hint: Blend your approach

6 Min Read

Feb 07, 2025
A tale of enumeration, and why pen testing can’t be automated
  • How Tos
A tale of enumeration, and why pen testing can’t be automated

7 Min Read

Feb 05, 2025
How Garmin watches reveal your personal data, and what you can do
  • DFIR
How Garmin watches reveal your personal data, and what you can do

8 Min Read

Jan 28, 2025
Cyber security guidance for small fleet operators
  • Maritime Cyber Security
Cyber security guidance for small fleet operators

10 Min Read

Jan 24, 2025
How to secure body-worn cameras and protect footage from cyber threats
  • Hardware Hacking
How to secure body-worn cameras and protect footage from cyber threats

4 Min Read

Jan 21, 2025
Security flaws found in tiny phones promoted to children
  • Consumer Advice
Security flaws found in tiny phones promoted to children

9 Min Read

Jan 15, 2025
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection
  • DFIR
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection

14 Min Read

Jan 13, 2025
The unexpected effects of GPS spoofing on aviation safety
  • Aviation Cyber Security
The unexpected effects of GPS spoofing on aviation safety

8 Min Read

Jan 09, 2025
10 Non-tech things you wish you had done after being breached
  • DFIR
10 Non-tech things you wish you had done after being breached

5 Min Read

Jan 07, 2025
The surprising existence of the erase button on cockpit voice recorders
  • Aviation Cyber Security
The surprising existence of the erase button on cockpit voice recorders

8 Min Read

Jan 03, 2025
Heels on fire. Hacking smart ski socks
  • Internet Of Things
Heels on fire. Hacking smart ski socks

3 Min Read

Dec 23, 2024
Practice being punched in the face. The realities of incident response preparation
  • DFIR
Practice being punched in the face. The realities of incident response preparation

4 Min Read

Dec 20, 2024
How easily access cards can be cloned and why your PACS might be vulnerable
  • Hardware Hacking
How easily access cards can be cloned and why your PACS might be vulnerable

12 Min Read

Dec 11, 2024
Making sure your door access control system is secure: Top 5 things to check
  • Hardware Hacking
Making sure your door access control system is secure: Top 5 things to check

3 Min Read

Dec 09, 2024
Is secure boot on the main application processor enough?
  • Hardware Hacking
Is secure boot on the main application processor enough?

5 Min Read

Dec 05, 2024
6 non tech things you wish you had done before being breached
  • DFIR
6 non tech things you wish you had done before being breached

5 Min Read

Dec 03, 2024
BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365
  • DFIR
BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365

8 Min Read

Nov 27, 2024
How we helped expose a £12 million rental scam
  • Consumer Advice
How we helped expose a £12 million rental scam

8 Min Read

Nov 19, 2024
IACS UR E26 and E27 guidance
  • Cyber Regulation
  • Maritime Cyber Security
IACS UR E26 and E27 guidance

30 Min Read

Nov 14, 2024
Did security gaps at Antwerp port enable drug smuggling operations?
  • Maritime Cyber Security
Did security gaps at Antwerp port enable drug smuggling operations?

5 Min Read

Nov 12, 2024
BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365
  • DFIR
BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365

14 Min Read

Nov 08, 2024
You lost your iPhone, but it’s locked. That’s fine, right?
  • DFIR
You lost your iPhone, but it’s locked. That’s fine, right?

5 Min Read

Nov 06, 2024
What goes into testing a ship?
  • Maritime Cyber Security
What goes into testing a ship?

8 Min Read

Nov 05, 2024
Maritime lawyers assemble!
  • Maritime Cyber Security
Maritime lawyers assemble!

6 Min Read

Nov 05, 2024
Mounting memory with MemProcFS for advanced memory forensics
  • DFIR
Mounting memory with MemProcFS for advanced memory forensics

10 Min Read

Oct 31, 2024
Testing the security of CCTV systems
  • Opinions
Testing the security of CCTV systems

4 Min Read

Oct 30, 2024
Using Volatility for advanced memory forensics
  • Internet Of Things
Using Volatility for advanced memory forensics

13 Min Read

Oct 24, 2024
BEC-ware the phish (part 1). Investigating incidents in M365
  • DFIR
BEC-ware the phish (part 1). Investigating incidents in M365

13 Min Read

Oct 15, 2024
Imposter syndrome in cyber security
  • Opinions
Imposter syndrome in cyber security

6 Min Read

Oct 10, 2024
How to handle vulnerability reports in aviation
  • Aviation Cyber Security
How to handle vulnerability reports in aviation

4 Min Read

Oct 09, 2024
Airbus Navblue Flysmart LPC-NG issues
  • Aviation Cyber Security
Airbus Navblue Flysmart LPC-NG issues

17 Min Read

Oct 01, 2024
How can you protect your data, privacy, and finances if your phone gets lost or stolen?
  • Consultancy advice
How can you protect your data, privacy, and finances if your phone gets lost or stolen?

15 Min Read

Sep 30, 2024
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking
  • Hardware Hacking
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

8 Min Read

Sep 26, 2024
Proroute H685 4G router vulnerabilities
  • Vulnerability Advisory
Proroute H685 4G router vulnerabilities

12 Min Read

Sep 19, 2024
Cyber threats to shipping explained
  • Maritime Cyber Security
Cyber threats to shipping explained

14 Min Read

Sep 18, 2024
Living off the land, GPO style
  • Red Teaming
Living off the land, GPO style

11 Min Read

Sep 12, 2024
Smart home security advice. Ring, SimpliSafe, Swann, and Yale
  • Consultancy advice
Smart home security advice. Ring, SimpliSafe, Swann, and Yale

18 Min Read

Sep 10, 2024
Advanced forensic techniques for recovering hidden data in wearable devices
  • DFIR
Advanced forensic techniques for recovering hidden data in wearable devices

13 Min Read

Sep 04, 2024
How to enhance the security of your social media accounts
  • How Tos
How to enhance the security of your social media accounts

13 Min Read

Aug 30, 2024
How to root an Android device for analysis and vulnerability assessment
  • How Tos
How to root an Android device for analysis and vulnerability assessment

7 Min Read

Aug 23, 2024
Insights and highlights from DEF CON 32
  • Shameless Self Promotion
Insights and highlights from DEF CON 32

8 Min Read

Aug 16, 2024
Living off the land with Bluetooth PAN
  • Red Teaming
Living off the land with Bluetooth PAN

4 Min Read

Aug 12, 2024
Key safe security, or the lack of it
  • Opinions
Key safe security, or the lack of it

3 Min Read

Aug 07, 2024
Fuzzy matching with Ghidra BSim, a guide
  • Hardware Hacking
Fuzzy matching with Ghidra BSim, a guide

10 Min Read

Aug 05, 2024
Bootloaders explained
  • How Tos
Bootloaders explained

4 Min Read

Aug 01, 2024
Leave the World Behind, or don’t
  • Maritime Cyber Security
Leave the World Behind, or don’t

7 Min Read

Jul 24, 2024
Pen testing cruise ships
  • Maritime Cyber Security
  • Security Blog
Pen testing cruise ships

6 Min Read

Jul 08, 2024
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
  • Security Blog
  • Vulnerability Advisory
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)

5 Min Read

Jul 02, 2024
1 2 3 … 10