Skip to main content
Using Volatility for advanced memory forensics
  • Internet Of Things
Using Volatility for advanced memory forensics

13 Min Read

Oct 24, 2024
BEC-ware the phish (part 1). Investigating incidents in M365
  • Digital Forensics and Incident Response
BEC-ware the phish (part 1). Investigating incidents in M365

13 Min Read

Oct 15, 2024
Imposter syndrome in cyber security
  • Opinions
Imposter syndrome in cyber security

6 Min Read

Oct 10, 2024
How to handle vulnerability reports in aviation
  • Aviation Cyber Security
How to handle vulnerability reports in aviation

4 Min Read

Oct 09, 2024
Airbus Navblue Flysmart LPC-NG issues
  • Aviation Cyber Security
Airbus Navblue Flysmart LPC-NG issues

17 Min Read

Oct 01, 2024
How can you protect your data, privacy, and finances if your phone gets lost or stolen?
  • Consumer Advice
How can you protect your data, privacy, and finances if your phone gets lost or stolen?

15 Min Read

Sep 30, 2024
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking
  • Hardware Hacking
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

8 Min Read

Sep 26, 2024
Proroute H685 4G router vulnerabilities
  • Vulnerabilities and Disclosures
Proroute H685 4G router vulnerabilities

12 Min Read

Sep 19, 2024
Cyber threats to shipping explained
  • Maritime Cyber Security
Cyber threats to shipping explained

14 Min Read

Sep 18, 2024
Living off the land, GPO style
  • Red Teaming
Living off the land, GPO style

11 Min Read

Sep 12, 2024
Smart home security advice. Ring, SimpliSafe, Swann, and Yale
  • Consumer Advice
Smart home security advice. Ring, SimpliSafe, Swann, and Yale

18 Min Read

Sep 10, 2024
Advanced forensic techniques for recovering hidden data in wearable devices
  • Digital Forensics and Incident Response
Advanced forensic techniques for recovering hidden data in wearable devices

13 Min Read

Sep 04, 2024
How to enhance the security of your social media accounts
  • How Tos
How to enhance the security of your social media accounts

13 Min Read

Aug 30, 2024
How to root an Android device for analysis and vulnerability assessment
  • How Tos
How to root an Android device for analysis and vulnerability assessment

7 Min Read

Aug 23, 2024
Insights and highlights from DEF CON 32
  • Shameless Self Promotion
Insights and highlights from DEF CON 32

8 Min Read

Aug 16, 2024
Living off the land with Bluetooth PAN
  • Red Teaming
Living off the land with Bluetooth PAN

4 Min Read

Aug 12, 2024
Key safe security, or the lack of it
  • Opinions
Key safe security, or the lack of it

3 Min Read

Aug 07, 2024
Fuzzy matching with Ghidra BSim, a guide
  • Hardware Hacking
Fuzzy matching with Ghidra BSim, a guide

10 Min Read

Aug 05, 2024
Bootloaders explained
  • How Tos
Bootloaders explained

4 Min Read

Aug 01, 2024
Leave the World Behind, or don’t
  • Maritime Cyber Security
Leave the World Behind, or don’t

7 Min Read

Jul 24, 2024
Pen testing cruise ships
  • Maritime Cyber Security
  • Security Blog
Pen testing cruise ships

6 Min Read

Jul 08, 2024
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
  • Security Blog
  • Vulnerabilities and Disclosures
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)

5 Min Read

Jul 02, 2024
Glastonbury ticket hijack vulnerability fixed
  • Security Blog
  • Vulnerabilities and Disclosures
Glastonbury ticket hijack vulnerability fixed

4 Min Read

Jun 28, 2024
Dodgy disks. My 32TB SSD Adventure
  • How Tos
  • Security Blog
Dodgy disks. My 32TB SSD Adventure

3 Min Read

Jun 21, 2024
HUMINT in a cyber world
  • OPSEC
  • Security Blog
HUMINT in a cyber world

7 Min Read

Jun 20, 2024
UK PSTI? You’ll need a Vulnerability Disclosure Program! 
  • Security Blog
  • Vulnerabilities and Disclosures
UK PSTI? You’ll need a Vulnerability Disclosure Program! 

5 Min Read

May 24, 2024
Impacts on ICS from the updated Cyber Assessment Framework (CAF)
  • OT, ICS, IIoT, SCADA
  • Security Blog
Impacts on ICS from the updated Cyber Assessment Framework (CAF)

5 Min Read

May 17, 2024
Pipedream ICS malware toolkit is a nightmare
  • Digital Forensics and Incident Response
  • Security Blog
Pipedream ICS malware toolkit is a nightmare

5 Min Read

May 09, 2024
Vulnerabilities that (mostly) aren’t: LUCKY13
  • Vulnerabilities that aren't
Vulnerabilities that (mostly) aren’t: LUCKY13

5 Min Read

May 03, 2024
Bypassing MFA on Microsoft Azure Entra ID
  • How Tos
  • Security Blog
Bypassing MFA on Microsoft Azure Entra ID

7 Min Read

May 01, 2024
Can ships be hacked?
  • Maritime Cyber Security
  • Security Blog
Can ships be hacked?

15 Min Read

Apr 12, 2024
Navigating the perilous waters of conference invitations
  • Opinions
  • Security Blog
Navigating the perilous waters of conference invitations

3 Min Read

Mar 14, 2024
The big play of autonomous vehicles
  • Automotive Security
  • Security Blog
The big play of autonomous vehicles

5 Min Read

Mar 12, 2024
Living off the land with native SSH and split tunnelling
  • Red Teaming
  • Security Blog
Living off the land with native SSH and split tunnelling

5 Min Read

Mar 06, 2024
Advice for manufacturers on the coming PSTI regulation
  • Cyber Regulation
  • Internet Of Things
  • Security Blog
Advice for manufacturers on the coming PSTI regulation

8 Min Read

Feb 23, 2024
No fix KrbRelay VMware style
  • Security Blog
  • Vulnerabilities and Disclosures
No fix KrbRelay VMware style

6 Min Read

Feb 21, 2024
Cyber security for Credit Unions 101
  • How Tos
  • Security Blog
Cyber security for Credit Unions 101

4 Min Read

Feb 20, 2024
QR Phishing. Fact or Fiction?
  • Security Blog
  • Social Engineering
QR Phishing. Fact or Fiction?

6 Min Read

Feb 15, 2024
Android Content Providers 101
  • Android
  • Security Blog
Android Content Providers 101

6 Min Read

Feb 13, 2024
Ski & bike helmets protect your head, not location or voice
  • Internet Of Things
  • Security Blog
Ski & bike helmets protect your head, not location or voice

7 Min Read

Feb 07, 2024
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager
  • Aviation Cyber Security
  • Security Blog
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager

6 Min Read

Feb 01, 2024
OSINT in 60 seconds. Mind reading on TV
  • OPSEC
  • Security Blog
OSINT in 60 seconds. Mind reading on TV

7 Min Read

Jan 30, 2024
10 years on from the Target breach. Has building cyber security improved?
  • OT, ICS, IIoT, SCADA
  • Security Blog
10 years on from the Target breach. Has building cyber security improved?

6 Min Read

Jan 24, 2024
Cockpit door lock auto-unlock is no surprise
  • Aviation Cyber Security
  • Security Blog
Cockpit door lock auto-unlock is no surprise

3 Min Read

Jan 10, 2024
Listening in at Latimer House. RF emissions and more
  • Opinions
  • Security Blog
Listening in at Latimer House. RF emissions and more

12 Min Read

Jan 09, 2024
RAID Technology and the importance of disk encryption in data security
  • Digital Forensics and Incident Response
  • Security Blog
RAID Technology and the importance of disk encryption in data security

3 Min Read

Jan 04, 2024
Mobile malware analysis for the BBC
  • Consumer Advice
  • Security Blog
Mobile malware analysis for the BBC

13 Min Read

Jan 02, 2024
  • Consumer Advice
Helping a banking fraud victim

4 Min Read

Jan 02, 2024
Helping a mobile malware fraud victim
  • Consumer Advice
  • Security Blog
Helping a mobile malware fraud victim

5 Min Read

Jan 02, 2024
Socks! Our cyber prediction for 2024
  • Shameless Self Promotion
Socks! Our cyber prediction for 2024

4 Min Read

Dec 22, 2023
Intercepting MFA. Phishing and Adversary in The Middle attacks
  • Digital Forensics and Incident Response
  • Security Blog
Intercepting MFA. Phishing and Adversary in The Middle attacks

12 Min Read

Dec 12, 2023
Navigate FDA 524b to get your medical cyber device to market
  • Medical Device Security
  • Security Blog
Navigate FDA 524b to get your medical cyber device to market

6 Min Read

Dec 07, 2023
OSINT. What can you find from a domain or company name
  • OPSEC
  • Security Blog
OSINT. What can you find from a domain or company name

4 Min Read

Dec 05, 2023
OPSEC failures when threat hunting
  • OPSEC
  • Security Blog
OPSEC failures when threat hunting

5 Min Read

Nov 30, 2023
Are Vehicle to Grid spikes coming?
  • Automotive Security
  • Security Blog
Are Vehicle to Grid spikes coming?

6 Min Read

Nov 27, 2023
Cap Dev. Better red teaming with continuous Capability Development
  • Red Teaming
  • Security Blog
Cap Dev. Better red teaming with continuous Capability Development

4 Min Read

Nov 23, 2023
FujiFilm printer credentials encryption issue fixed
  • Security Blog
  • Vulnerabilities and Disclosures
FujiFilm printer credentials encryption issue fixed

5 Min Read

Oct 31, 2023
FDA medical IoT cyber device compliance. FD&C 524b
  • Medical Device Security
  • Security Blog
FDA medical IoT cyber device compliance. FD&C 524b

5 Min Read

Oct 31, 2023
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting
  • Digital Forensics and Incident Response
  • Security Blog
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting

11 Min Read

Oct 12, 2023
IoT Secure Development Guide
  • Internet Of Things
  • Security Blog
IoT Secure Development Guide

47 Min Read

Oct 10, 2023
The reality of Apple watch pen testing
  • Macs / Apple
  • Security Blog
The reality of Apple watch pen testing

12 Min Read

Oct 09, 2023
Call centres. Outbound call verification
  • How Tos
  • Security Blog
Call centres. Outbound call verification

5 Min Read

Oct 03, 2023
Fastboot Fuzzing
  • Hardware Hacking
  • Security Blog
Fastboot Fuzzing

4 Min Read

Sep 29, 2023
Which security framework? All of them, in the SCF
  • GRC Consultancy Advice
  • Security Blog
Which security framework? All of them, in the SCF

6 Min Read

Sep 27, 2023
3yrs of CAA ASSURE assessments. What we’ve learned
  • GRC Consultancy Advice
  • Security Blog
3yrs of CAA ASSURE assessments. What we’ve learned

6 Min Read

Sep 20, 2023
PCI v4 is coming. Are you ready?
  • GRC Consultancy Advice
  • PCI Advice
  • Security Blog
PCI v4 is coming. Are you ready?

6 Min Read

Sep 14, 2023
Information disclosure through insecure design
  • How Tos
  • Security Blog
Information disclosure through insecure design

3 Min Read

Sep 07, 2023
A broken marriage. Abusing mixed vendor Kerberos stacks
  • Security Blog
  • Vulnerabilities and Disclosures
A broken marriage. Abusing mixed vendor Kerberos stacks

14 Min Read

Aug 25, 2023
The most hated man on the internet. Lessons to learn
  • How Tos
  • Security Blog
The most hated man on the internet. Lessons to learn

3 Min Read

Aug 22, 2023
Scorpion CBS show. Plane hack
  • Aviation Cyber Security
  • Security Blog
Scorpion CBS show. Plane hack

4 Min Read

Aug 14, 2023
Die Hard 2. Or how not to hack airplanes
  • Aviation Cyber Security
  • Security Blog
Die Hard 2. Or how not to hack airplanes

6 Min Read

Aug 14, 2023
Vulnerability disclosure in aviation
  • Aviation Cyber Security
  • Security Blog
Vulnerability disclosure in aviation

6 Min Read

Aug 09, 2023
PTP at DEF CON 31 2023
  • Security Blog
  • Shameless Self Promotion
PTP at DEF CON 31 2023

2 Min Read

Aug 03, 2023
n00b’s guide to DEF CON. Surviving the Matrix of the underground
  • How Tos
  • Security Blog
n00b’s guide to DEF CON. Surviving the Matrix of the underground

11 Min Read

Aug 03, 2023
Have you been compromised?
  • Digital Forensics and Incident Response
  • Security Blog
Have you been compromised?

6 Min Read

Aug 02, 2023
Exposed Gits: 10 Years on
  • How Tos
  • Security Blog
Exposed Gits: 10 Years on

4 Min Read

Jul 19, 2023
Black Basta ransomware
  • Digital Forensics and Incident Response
  • Security Blog
Black Basta ransomware

6 Min Read

Jun 28, 2023
WhosHere Plus. Trilateration vulnerability
  • Security Blog
  • Vulnerabilities and Disclosures
WhosHere Plus. Trilateration vulnerability

5 Min Read

Jun 12, 2023
EFB vulnerability in Lufthansa’s Lido eRouteManual
  • Aviation Cyber Security
  • Security Blog
EFB vulnerability in Lufthansa’s Lido eRouteManual

8 Min Read

May 24, 2023
All your building are belong to us
  • OT, ICS, IIoT, SCADA
  • Security Blog
All your building are belong to us

10 Min Read

May 19, 2023
It’s always DNS, here’s why…
  • How Tos
  • Security Blog
It’s always DNS, here’s why…

10 Min Read

May 16, 2023
Netflix MH370: The plane that wasn’t hacked
  • Aviation Cyber Security
  • Security Blog
Netflix MH370: The plane that wasn’t hacked

8 Min Read

May 12, 2023
Bullied by Bugcrowd over Kape CyberGhost disclosure
  • Security Blog
  • Vulnerabilities and Disclosures
Bullied by Bugcrowd over Kape CyberGhost disclosure

13 Min Read

May 05, 2023
London Councils & pirate books. Google dorking for subdomain takeovers
  • How Tos
  • Security Blog
London Councils & pirate books. Google dorking for subdomain takeovers

13 Min Read

Apr 11, 2023
  • Maritime Cyber Security
Pen testing cargo vessels without putting OT at risk

5 Min Read

Mar 25, 2023
Carbon reduction at PTP
  • Sustainability
Carbon reduction at PTP

6 Min Read

Mar 17, 2023
Monetising hacking by shorting commodity shipments
  • Maritime Cyber Security
  • Security Blog
Monetising hacking by shorting commodity shipments

6 Min Read

Mar 08, 2023
Finding forensics breadcrumbs in Android image storage
  • Digital Forensics and Incident Response
  • Security Blog
Finding forensics breadcrumbs in Android image storage

8 Min Read

Feb 20, 2023
Causing incidents with in-flight entertainment systems
  • Aviation Cyber Security
  • Security Blog
Causing incidents with in-flight entertainment systems

7 Min Read

Feb 07, 2023
OSINT your OT suppliers
  • OT, ICS, IIoT, SCADA
  • Security Blog
OSINT your OT suppliers

6 Min Read

Jan 24, 2023
UK gov website being used to redirect to porn sites
  • Security Blog
  • Vulnerabilities and Disclosures
UK gov website being used to redirect to porn sites

2 Min Read

Jan 09, 2023
RCE on Steam through the Cultist Simulator game
  • Security Blog
  • Vulnerabilities and Disclosures
RCE on Steam through the Cultist Simulator game

5 Min Read

Jan 02, 2023
What’s My Name Again? Reolink camera command injection
  • Security Blog
  • Vulnerabilities and Disclosures
What’s My Name Again? Reolink camera command injection

4 Min Read

Dec 13, 2022
Consumer advice for buying smart IoT devices this Christmas
  • Consumer Advice
  • Security Blog
Consumer advice for buying smart IoT devices this Christmas

4 Min Read

Dec 02, 2022
Hive Ransomware is on the rise. How should you deal with it?
  • Digital Forensics and Incident Response
  • Ransomware
  • Security Blog
Hive Ransomware is on the rise. How should you deal with it?

7 Min Read

Nov 18, 2022
  • Cloud Security
Stories from the cloud: security risks we see in testing 

11 Min Read

Nov 03, 2022
Effecting positive change in the Internet of Things
  • Internet Of Things
  • Security Blog
Effecting positive change in the Internet of Things

5 Min Read

Oct 21, 2022
Social Engineering dos and don’ts
  • Security Blog
  • Social Engineering
Social Engineering dos and don’ts

4 Min Read

Oct 20, 2022
Moto E20 Readback Vulnerability
  • Security Blog
  • Vulnerabilities and Disclosures
Moto E20 Readback Vulnerability

6 Min Read

Oct 19, 2022
MS Enterprise app management service RCE. CVE-2022-35841
  • Security Blog
  • Vulnerabilities and Disclosures
MS Enterprise app management service RCE. CVE-2022-35841

8 Min Read

Oct 13, 2022
1 2 3 4 … 10