Skip to main content
Cyber threats to shipping explained
  • Maritime Cyber Security
Cyber threats to shipping explained

14 Min Read

Sep 18, 2024
Living off the land, GPO style
  • Red Teaming
Living off the land, GPO style

11 Min Read

Sep 12, 2024
Smart home security advice. Ring, SimpliSafe, Swann, and Yale
  • Consultancy advice
Smart home security advice. Ring, SimpliSafe, Swann, and Yale

18 Min Read

Sep 10, 2024
Advanced forensic techniques for recovering hidden data in wearable devices
  • DFIR
Advanced forensic techniques for recovering hidden data in wearable devices

13 Min Read

Sep 04, 2024
How to enhance the security of your social media accounts
  • How Tos
How to enhance the security of your social media accounts

13 Min Read

Aug 30, 2024
How to root an Android device for analysis and vulnerability assessment
  • How Tos
How to root an Android device for analysis and vulnerability assessment

7 Min Read

Aug 23, 2024
Insights and highlights from DEF CON 32
  • Shameless Self Promotion
Insights and highlights from DEF CON 32

8 Min Read

Aug 16, 2024
Living off the land with Bluetooth PAN
  • Red Teaming
Living off the land with Bluetooth PAN

4 Min Read

Aug 12, 2024
Key safe security, or the lack of it
  • Opinions
Key safe security, or the lack of it

3 Min Read

Aug 07, 2024
Fuzzy matching with Ghidra BSim, a guide
  • Hardware Hacking
Fuzzy matching with Ghidra BSim, a guide

10 Min Read

Aug 05, 2024
Bootloaders explained
  • How Tos
Bootloaders explained

4 Min Read

Aug 01, 2024
Leave the World Behind, or don’t
  • Maritime Cyber Security
Leave the World Behind, or don’t

7 Min Read

Jul 24, 2024
Pen testing cruise ships
  • Maritime Cyber Security
  • Security Blog
Pen testing cruise ships

6 Min Read

Jul 08, 2024
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
  • Security Blog
  • Vulnerability Advisory
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)

5 Min Read

Jul 02, 2024
Glastonbury ticket hijack vulnerability fixed
  • Security Blog
  • Vulnerability Disclosure
Glastonbury ticket hijack vulnerability fixed

4 Min Read

Jun 28, 2024
Dodgy disks. My 32TB SSD Adventure
  • How Tos
  • Security Blog
Dodgy disks. My 32TB SSD Adventure

3 Min Read

Jun 21, 2024
HUMINT in a cyber world
  • OPSEC
  • Security Blog
HUMINT in a cyber world

7 Min Read

Jun 20, 2024
UK PSTI? You’ll need a Vulnerability Disclosure Program! 
  • Security Blog
  • Vulnerability Disclosure
UK PSTI? You’ll need a Vulnerability Disclosure Program! 

5 Min Read

May 24, 2024
Impacts on ICS from the updated Cyber Assessment Framework (CAF)
  • OT, ICS, IIoT, SCADA
  • Security Blog
Impacts on ICS from the updated Cyber Assessment Framework (CAF)

5 Min Read

May 17, 2024
Pipedream ICS malware toolkit is a nightmare
  • DFIR
  • Security Blog
Pipedream ICS malware toolkit is a nightmare

5 Min Read

May 09, 2024
Vulnerabilities that (mostly) aren’t: LUCKY13
  • Vulnerabilities that aren't
Vulnerabilities that (mostly) aren’t: LUCKY13

5 Min Read

May 03, 2024
Bypassing MFA on Microsoft Azure Entra ID
  • How Tos
  • Security Blog
Bypassing MFA on Microsoft Azure Entra ID

7 Min Read

May 01, 2024
Can ships be hacked?
  • Maritime Cyber Security
  • Security Blog
Can ships be hacked?

15 Min Read

Apr 12, 2024
Navigating the perilous waters of conference invitations
  • Opinions
  • Security Blog
Navigating the perilous waters of conference invitations

3 Min Read

Mar 14, 2024
The big play of autonomous vehicles
  • Automotive Security
  • Security Blog
The big play of autonomous vehicles

5 Min Read

Mar 12, 2024
Living off the land with native SSH and split tunnelling
  • Red Teaming
  • Security Blog
Living off the land with native SSH and split tunnelling

5 Min Read

Mar 06, 2024
Advice for manufacturers on the coming PSTI regulation
  • Cyber Regulation
  • Internet Of Things
  • Security Blog
Advice for manufacturers on the coming PSTI regulation

8 Min Read

Feb 23, 2024
No fix KrbRelay VMware style
  • Security Blog
  • Vulnerability Advisory
No fix KrbRelay VMware style

6 Min Read

Feb 21, 2024
Cyber security for Credit Unions 101
  • How Tos
  • Security Blog
Cyber security for Credit Unions 101

4 Min Read

Feb 20, 2024
QR Phishing. Fact or Fiction?
  • Security Blog
  • Social Engineering
QR Phishing. Fact or Fiction?

6 Min Read

Feb 15, 2024
Android Content Providers 101
  • Android
  • Security Blog
Android Content Providers 101

6 Min Read

Feb 13, 2024
Ski & bike helmets protect your head, not location or voice
  • Internet Of Things
  • Security Blog
Ski & bike helmets protect your head, not location or voice

7 Min Read

Feb 07, 2024
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager
  • Aviation Cyber Security
  • Security Blog
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager

6 Min Read

Feb 01, 2024
OSINT in 60 seconds. Mind reading on TV
  • OPSEC
  • Security Blog
OSINT in 60 seconds. Mind reading on TV

7 Min Read

Jan 30, 2024
10 years on from the Target breach. Has building cyber security improved?
  • OT, ICS, IIoT, SCADA
  • Security Blog
10 years on from the Target breach. Has building cyber security improved?

6 Min Read

Jan 24, 2024
Cockpit door lock auto-unlock is no surprise
  • Aviation Cyber Security
  • Security Blog
Cockpit door lock auto-unlock is no surprise

3 Min Read

Jan 10, 2024
Listening in at Latimer House. RF emissions and more
  • Opinions
  • Security Blog
Listening in at Latimer House. RF emissions and more

12 Min Read

Jan 09, 2024
RAID Technology and the importance of disk encryption in data security
  • DFIR
  • Security Blog
RAID Technology and the importance of disk encryption in data security

3 Min Read

Jan 04, 2024
Mobile malware analysis for the BBC
  • Consumer Advice
  • Security Blog
Mobile malware analysis for the BBC

13 Min Read

Jan 02, 2024
  • Consumer Advice
Helping a banking fraud victim

4 Min Read

Jan 02, 2024
Helping a mobile malware fraud victim
  • Consumer Advice
  • Security Blog
Helping a mobile malware fraud victim

5 Min Read

Jan 02, 2024
Socks! Our cyber prediction for 2024
  • Shameless Self Promotion
Socks! Our cyber prediction for 2024

4 Min Read

Dec 22, 2023
Intercepting MFA. Phishing and Adversary in The Middle attacks
  • DFIR
  • Security Blog
Intercepting MFA. Phishing and Adversary in The Middle attacks

12 Min Read

Dec 12, 2023
Navigate FDA 524b to get your medical cyber device to market
  • Medical Device Security
  • Security Blog
Navigate FDA 524b to get your medical cyber device to market

6 Min Read

Dec 07, 2023
OSINT. What can you find from a domain or company name
  • OPSEC
  • Security Blog
OSINT. What can you find from a domain or company name

4 Min Read

Dec 05, 2023
OPSEC failures when threat hunting
  • OPSEC
  • Security Blog
OPSEC failures when threat hunting

5 Min Read

Nov 30, 2023
Are Vehicle to Grid spikes coming?
  • Automotive Security
  • Security Blog
Are Vehicle to Grid spikes coming?

6 Min Read

Nov 27, 2023
Cap Dev. Better red teaming with continuous Capability Development
  • Red Teaming
  • Security Blog
Cap Dev. Better red teaming with continuous Capability Development

4 Min Read

Nov 23, 2023
FujiFilm printer credentials encryption issue fixed
  • Security Blog
  • Vulnerability Disclosure
FujiFilm printer credentials encryption issue fixed

5 Min Read

Oct 31, 2023
FDA medical IoT cyber device compliance. FD&C 524b
  • Medical Device Security
  • Security Blog
FDA medical IoT cyber device compliance. FD&C 524b

5 Min Read

Oct 31, 2023
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting
  • DFIR
  • Security Blog
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting

11 Min Read

Oct 12, 2023
IoT Secure Development Guide
  • Internet Of Things
  • Security Blog
IoT Secure Development Guide

47 Min Read

Oct 10, 2023
The reality of Apple watch pen testing
  • Macs / Apple
  • Security Blog
The reality of Apple watch pen testing

12 Min Read

Oct 09, 2023
Call centres. Outbound call verification
  • How Tos
  • Security Blog
Call centres. Outbound call verification

5 Min Read

Oct 03, 2023
Fastboot Fuzzing
  • Hardware Hacking
  • Security Blog
Fastboot Fuzzing

4 Min Read

Sep 29, 2023
Which security framework? All of them, in the SCF
  • Consultancy advice
  • Security Blog
Which security framework? All of them, in the SCF

6 Min Read

Sep 27, 2023
3yrs of CAA ASSURE assessments. What we’ve learned
  • Consultancy advice
  • Security Blog
3yrs of CAA ASSURE assessments. What we’ve learned

6 Min Read

Sep 20, 2023
PCI v4 is coming. Are you ready?
  • Consultancy advice
  • PCI Advice
  • Security Blog
PCI v4 is coming. Are you ready?

6 Min Read

Sep 14, 2023
Information disclosure through insecure design
  • How Tos
  • Security Blog
Information disclosure through insecure design

3 Min Read

Sep 07, 2023
A broken marriage. Abusing mixed vendor Kerberos stacks
  • Security Blog
  • Vulnerability Disclosure
A broken marriage. Abusing mixed vendor Kerberos stacks

14 Min Read

Aug 25, 2023
The most hated man on the internet. Lessons to learn
  • How Tos
  • Security Blog
The most hated man on the internet. Lessons to learn

3 Min Read

Aug 22, 2023
Scorpion CBS show. Plane hack
  • Aviation Cyber Security
  • Security Blog
Scorpion CBS show. Plane hack

4 Min Read

Aug 14, 2023
Die Hard 2. Or how not to hack airplanes
  • Aviation Cyber Security
  • Security Blog
Die Hard 2. Or how not to hack airplanes

6 Min Read

Aug 14, 2023
Vulnerability disclosure in aviation
  • Aviation Cyber Security
  • Security Blog
Vulnerability disclosure in aviation

6 Min Read

Aug 09, 2023
PTP at DEF CON 31 2023
  • Security Blog
  • Shameless Self Promotion
PTP at DEF CON 31 2023

2 Min Read

Aug 03, 2023
n00b’s guide to DEF CON. Surviving the Matrix of the underground
  • How Tos
  • Security Blog
n00b’s guide to DEF CON. Surviving the Matrix of the underground

11 Min Read

Aug 03, 2023
Have you been compromised?
  • DFIR
  • Security Blog
Have you been compromised?

6 Min Read

Aug 02, 2023
Exposed Gits: 10 Years on
  • How Tos
  • Security Blog
Exposed Gits: 10 Years on

4 Min Read

Jul 19, 2023
Black Basta ransomware
  • DFIR
  • Security Blog
Black Basta ransomware

6 Min Read

Jun 28, 2023
WhosHere Plus. Trilateration vulnerability
  • Security Blog
  • Vulnerability Disclosure
WhosHere Plus. Trilateration vulnerability

5 Min Read

Jun 12, 2023
EFB vulnerability in Lufthansa’s Lido eRouteManual
  • Aviation Cyber Security
  • Security Blog
EFB vulnerability in Lufthansa’s Lido eRouteManual

8 Min Read

May 24, 2023
All your building are belong to us
  • OT, ICS, IIoT, SCADA
  • Security Blog
All your building are belong to us

10 Min Read

May 19, 2023
It’s always DNS, here’s why…
  • How Tos
  • Security Blog
It’s always DNS, here’s why…

10 Min Read

May 16, 2023
Netflix MH370: The plane that wasn’t hacked
  • Aviation Cyber Security
  • Security Blog
Netflix MH370: The plane that wasn’t hacked

8 Min Read

May 12, 2023
Bullied by Bugcrowd over Kape CyberGhost disclosure
  • Security Blog
  • Vulnerability Disclosure
Bullied by Bugcrowd over Kape CyberGhost disclosure

13 Min Read

May 05, 2023
London Councils & pirate books. Google dorking for subdomain takeovers
  • How Tos
  • Security Blog
London Councils & pirate books. Google dorking for subdomain takeovers

13 Min Read

Apr 11, 2023
  • Maritime Cyber Security
Pen testing cargo vessels without putting OT at risk

5 Min Read

Mar 25, 2023
Carbon reduction at PTP
  • Sustainability
Carbon reduction at PTP

6 Min Read

Mar 17, 2023
Monetising hacking by shorting commodity shipments
  • Maritime Cyber Security
  • Security Blog
Monetising hacking by shorting commodity shipments

6 Min Read

Mar 08, 2023
Finding forensics breadcrumbs in Android image storage
  • DFIR
  • Security Blog
Finding forensics breadcrumbs in Android image storage

8 Min Read

Feb 20, 2023
Causing incidents with in-flight entertainment systems
  • Aviation Cyber Security
  • Security Blog
Causing incidents with in-flight entertainment systems

7 Min Read

Feb 07, 2023
OSINT your OT suppliers
  • OT, ICS, IIoT, SCADA
  • Security Blog
OSINT your OT suppliers

6 Min Read

Jan 24, 2023
UK gov website being used to redirect to porn sites
  • Security Blog
  • Vulnerability Disclosure
UK gov website being used to redirect to porn sites

2 Min Read

Jan 09, 2023
RCE on Steam through the Cultist Simulator game
  • Security Blog
  • Vulnerability Disclosure
RCE on Steam through the Cultist Simulator game

5 Min Read

Jan 02, 2023
What’s My Name Again? Reolink camera command injection
  • Security Blog
  • Vulnerability Disclosure
What’s My Name Again? Reolink camera command injection

4 Min Read

Dec 13, 2022
Consumer advice for buying smart IoT devices this Christmas
  • Consumer Advice
  • Security Blog
Consumer advice for buying smart IoT devices this Christmas

4 Min Read

Dec 02, 2022
Hive Ransomware is on the rise. How should you deal with it?
  • DFIR
  • Ransomware
  • Security Blog
Hive Ransomware is on the rise. How should you deal with it?

7 Min Read

Nov 18, 2022
  • Cloud Security
Stories from the cloud: security risks we see in testing 

11 Min Read

Nov 03, 2022
Effecting positive change in the Internet of Things
  • Internet Of Things
  • Security Blog
Effecting positive change in the Internet of Things

5 Min Read

Oct 21, 2022
Social Engineering dos and don’ts
  • Security Blog
  • Social Engineering
Social Engineering dos and don’ts

4 Min Read

Oct 20, 2022
Moto E20 Readback Vulnerability
  • Security Blog
  • Vulnerability Disclosure
Moto E20 Readback Vulnerability

6 Min Read

Oct 19, 2022
MS Enterprise app management service RCE. CVE-2022-35841
  • Security Blog
  • Vulnerability Advisory
MS Enterprise app management service RCE. CVE-2022-35841

8 Min Read

Oct 13, 2022
Living off the Cloud. Cloudy with a Chance of Exfiltration
  • Cloud Security
  • Security Blog
Living off the Cloud. Cloudy with a Chance of Exfiltration

5 Min Read

Oct 11, 2022
Airbus AoA – Angle of Attack sensor issue
  • Aviation Cyber Security
  • Security Blog
Airbus AoA – Angle of Attack sensor issue

5 Min Read

Oct 03, 2022
Attacking Encrypted HTTP Communications
  • How Tos
  • Security Blog
Attacking Encrypted HTTP Communications

11 Min Read

Sep 28, 2022
You can’t stop me. MS Teams session hijacking and bypass
  • Security Blog
  • Vulnerability Advisory
You can’t stop me. MS Teams session hijacking and bypass

5 Min Read

Sep 22, 2022
DEF CON 30. Hacking EFBs. Engine Performance
  • Aviation Cyber Security
  • Security Blog
DEF CON 30. Hacking EFBs. Engine Performance

3 Min Read

Sep 08, 2022
When disclosure goes wrong. People
  • Security Blog
  • Vulnerability Disclosure
When disclosure goes wrong. People

6 Min Read

Sep 02, 2022
Living off the land, AD CS style
  • Red Teaming
  • Security Blog
Living off the land, AD CS style

13 Min Read

Aug 26, 2022
Bluetooth + Electrical switchgear
  • OT, ICS, IIoT, SCADA
Bluetooth + Electrical switchgear

5 Min Read

Aug 25, 2022
1 2 3 4 … 10