Skip to main content
RAID Technology and the importance of disk encryption in data security
  • DFIR
  • Security Blog
RAID Technology and the importance of disk encryption in data security

3 Min Read

Jan 04, 2024
Mobile malware analysis for the BBC
  • Consumer Advice
  • Security Blog
Mobile malware analysis for the BBC

13 Min Read

Jan 02, 2024
  • Consumer Advice
Helping a banking fraud victim

4 Min Read

Jan 02, 2024
Helping a mobile malware fraud victim
  • Consumer Advice
  • Security Blog
Helping a mobile malware fraud victim

5 Min Read

Jan 02, 2024
Socks! Our cyber prediction for 2024
  • Shameless Self Promotion
Socks! Our cyber prediction for 2024

4 Min Read

Dec 22, 2023
Intercepting MFA. Phishing and Adversary in The Middle attacks
  • DFIR
  • Security Blog
Intercepting MFA. Phishing and Adversary in The Middle attacks

12 Min Read

Dec 12, 2023
Navigate FDA 524b to get your medical cyber device to market
  • Medical Device Security
  • Security Blog
Navigate FDA 524b to get your medical cyber device to market

6 Min Read

Dec 07, 2023
OSINT. What can you find from a domain or company name
  • OPSEC
  • Security Blog
OSINT. What can you find from a domain or company name

4 Min Read

Dec 05, 2023
OPSEC failures when threat hunting
  • OPSEC
  • Security Blog
OPSEC failures when threat hunting

5 Min Read

Nov 30, 2023
Are Vehicle to Grid spikes coming?
  • Automotive Security
  • Security Blog
Are Vehicle to Grid spikes coming?

6 Min Read

Nov 27, 2023
Cap Dev. Better red teaming with continuous Capability Development
  • Red Teaming
  • Security Blog
Cap Dev. Better red teaming with continuous Capability Development

4 Min Read

Nov 23, 2023
FujiFilm printer credentials encryption issue fixed
  • Security Blog
  • Vulnerability Disclosure
FujiFilm printer credentials encryption issue fixed

5 Min Read

Oct 31, 2023
FDA medical IoT cyber device compliance. FD&C 524b
  • Medical Device Security
  • Security Blog
FDA medical IoT cyber device compliance. FD&C 524b

5 Min Read

Oct 31, 2023
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting
  • DFIR
  • Security Blog
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting

11 Min Read

Oct 12, 2023
IoT Secure Development Guide
  • Internet Of Things
  • Security Blog
IoT Secure Development Guide

47 Min Read

Oct 10, 2023
The reality of Apple watch pen testing
  • Macs / Apple
  • Security Blog
The reality of Apple watch pen testing

12 Min Read

Oct 09, 2023
Call centres. Outbound call verification
  • How Tos
  • Security Blog
Call centres. Outbound call verification

5 Min Read

Oct 03, 2023
Fastboot Fuzzing
  • Hardware Hacking
  • Security Blog
Fastboot Fuzzing

4 Min Read

Sep 29, 2023
Which security framework? All of them, in the SCF
  • Consultancy advice
  • Security Blog
Which security framework? All of them, in the SCF

6 Min Read

Sep 27, 2023
3yrs of CAA ASSURE assessments. What we’ve learned
  • Consultancy advice
  • Security Blog
3yrs of CAA ASSURE assessments. What we’ve learned

6 Min Read

Sep 20, 2023
PCI v4 is coming. Are you ready?
  • Consultancy advice
  • PCI Advice
  • Security Blog
PCI v4 is coming. Are you ready?

6 Min Read

Sep 14, 2023
Information disclosure through insecure design
  • How Tos
  • Security Blog
Information disclosure through insecure design

3 Min Read

Sep 07, 2023
A broken marriage. Abusing mixed vendor Kerberos stacks
  • Security Blog
  • Vulnerability Disclosure
A broken marriage. Abusing mixed vendor Kerberos stacks

14 Min Read

Aug 25, 2023
The most hated man on the internet. Lessons to learn
  • How Tos
  • Security Blog
The most hated man on the internet. Lessons to learn

3 Min Read

Aug 22, 2023
Scorpion CBS show. Plane hack
  • Aviation Cyber Security
  • Security Blog
Scorpion CBS show. Plane hack

4 Min Read

Aug 14, 2023
Die Hard 2. Or how not to hack airplanes
  • Aviation Cyber Security
  • Security Blog
Die Hard 2. Or how not to hack airplanes

6 Min Read

Aug 14, 2023
Vulnerability disclosure in aviation
  • Aviation Cyber Security
  • Security Blog
Vulnerability disclosure in aviation

6 Min Read

Aug 09, 2023
PTP at DEF CON 31 2023
  • Security Blog
  • Shameless Self Promotion
PTP at DEF CON 31 2023

2 Min Read

Aug 03, 2023
n00b’s guide to DEF CON. Surviving the Matrix of the underground
  • How Tos
  • Security Blog
n00b’s guide to DEF CON. Surviving the Matrix of the underground

11 Min Read

Aug 03, 2023
Have you been compromised?
  • DFIR
  • Security Blog
Have you been compromised?

6 Min Read

Aug 02, 2023
Exposed Gits: 10 Years on
  • How Tos
  • Security Blog
Exposed Gits: 10 Years on

4 Min Read

Jul 19, 2023
Black Basta ransomware
  • DFIR
  • Security Blog
Black Basta ransomware

6 Min Read

Jun 28, 2023
PTP Cyber Fest 2025. More than just another conference
  • Shameless Self Promotion
PTP Cyber Fest 2025. More than just another conference

4 Min Read

Jun 13, 2023
WhosHere Plus. Trilateration vulnerability
  • Security Blog
  • Vulnerability Disclosure
WhosHere Plus. Trilateration vulnerability

5 Min Read

Jun 12, 2023
EFB vulnerability in Lufthansa’s Lido eRouteManual
  • Aviation Cyber Security
  • Security Blog
EFB vulnerability in Lufthansa’s Lido eRouteManual

8 Min Read

May 24, 2023
All your building are belong to us
  • OT, ICS, IIoT, SCADA
  • Security Blog
All your building are belong to us

10 Min Read

May 19, 2023
It’s always DNS, here’s why…
  • How Tos
  • Security Blog
It’s always DNS, here’s why…

10 Min Read

May 16, 2023
Netflix MH370: The plane that wasn’t hacked
  • Aviation Cyber Security
  • Security Blog
Netflix MH370: The plane that wasn’t hacked

8 Min Read

May 12, 2023
Bullied by Bugcrowd over Kape CyberGhost disclosure
  • Security Blog
  • Vulnerability Disclosure
Bullied by Bugcrowd over Kape CyberGhost disclosure

13 Min Read

May 05, 2023
London Councils & pirate books. Google dorking for subdomain takeovers
  • How Tos
  • Security Blog
London Councils & pirate books. Google dorking for subdomain takeovers

13 Min Read

Apr 11, 2023
  • Maritime Cyber Security
How to pen test cargo vessels

5 Min Read

Mar 25, 2023
Carbon reduction at PTP
  • Sustainability
Carbon reduction at PTP

6 Min Read

Mar 17, 2023
Monetising hacking by shorting commodity shipments
  • Maritime Cyber Security
  • Security Blog
Monetising hacking by shorting commodity shipments

6 Min Read

Mar 08, 2023
Finding forensics breadcrumbs in Android image storage
  • DFIR
  • Security Blog
Finding forensics breadcrumbs in Android image storage

8 Min Read

Feb 20, 2023
Causing incidents with in-flight entertainment systems
  • Aviation Cyber Security
  • Security Blog
Causing incidents with in-flight entertainment systems

7 Min Read

Feb 07, 2023
OSINT your OT suppliers
  • OT, ICS, IIoT, SCADA
  • Security Blog
OSINT your OT suppliers

6 Min Read

Jan 24, 2023
UK gov website being used to redirect to porn sites
  • Security Blog
  • Vulnerability Disclosure
UK gov website being used to redirect to porn sites

2 Min Read

Jan 09, 2023
RCE on Steam through the Cultist Simulator game
  • Security Blog
  • Vulnerability Disclosure
RCE on Steam through the Cultist Simulator game

5 Min Read

Jan 02, 2023
What’s My Name Again? Reolink camera command injection
  • Security Blog
  • Vulnerability Disclosure
What’s My Name Again? Reolink camera command injection

4 Min Read

Dec 13, 2022
Consumer advice for buying smart IoT devices this Christmas
  • Consumer Advice
  • Security Blog
Consumer advice for buying smart IoT devices this Christmas

4 Min Read

Dec 02, 2022
Hive Ransomware is on the rise. How should you deal with it?
  • DFIR
  • Ransomware
  • Security Blog
Hive Ransomware is on the rise. How should you deal with it?

7 Min Read

Nov 18, 2022
Effecting positive change in the Internet of Things
  • Internet Of Things
  • Security Blog
Effecting positive change in the Internet of Things

5 Min Read

Oct 21, 2022
Social Engineering dos and don’ts
  • Security Blog
  • Social Engineering
Social Engineering dos and don’ts

4 Min Read

Oct 20, 2022
Moto E20 Readback Vulnerability
  • Security Blog
  • Vulnerability Disclosure
Moto E20 Readback Vulnerability

6 Min Read

Oct 19, 2022
MS Enterprise app management service RCE. CVE-2022-35841
  • Security Blog
  • Vulnerability Advisory
MS Enterprise app management service RCE. CVE-2022-35841

8 Min Read

Oct 13, 2022
Living off the Cloud. Cloudy with a Chance of Exfiltration
  • Cloud Security
  • Security Blog
Living off the Cloud. Cloudy with a Chance of Exfiltration

5 Min Read

Oct 11, 2022
Airbus AoA – Angle of Attack sensor issue
  • Aviation Cyber Security
  • Security Blog
Airbus AoA – Angle of Attack sensor issue

5 Min Read

Oct 03, 2022
Attacking Encrypted HTTP Communications
  • How Tos
  • Security Blog
Attacking Encrypted HTTP Communications

11 Min Read

Sep 28, 2022
You can’t stop me. MS Teams session hijacking and bypass
  • Security Blog
  • Vulnerability Advisory
You can’t stop me. MS Teams session hijacking and bypass

5 Min Read

Sep 22, 2022
DEF CON 30. Hacking EFBs. Engine Performance
  • Aviation Cyber Security
  • Security Blog
DEF CON 30. Hacking EFBs. Engine Performance

3 Min Read

Sep 08, 2022
When disclosure goes wrong. People
  • Security Blog
  • Vulnerability Disclosure
When disclosure goes wrong. People

6 Min Read

Sep 02, 2022
Living off the land, AD CS style
  • Red Teaming
  • Security Blog
Living off the land, AD CS style

13 Min Read

Aug 26, 2022
Bluetooth + Electrical switchgear
  • OT, ICS, IIoT, SCADA
Bluetooth + Electrical switchgear

5 Min Read

Aug 25, 2022
Database Integrity Vulnerabilities in Boeing’s Onboard Performance Tool
  • Aviation Cyber Security
  • Security Blog
Database Integrity Vulnerabilities in Boeing’s Onboard Performance Tool

7 Min Read

Aug 13, 2022
Maritime regulation. All Hands-on Deck! 
  • Maritime Cyber Security
  • Security Blog
Maritime regulation. All Hands-on Deck! 

6 Min Read

Aug 05, 2022
Efficient Infrastructure Testing
  • How Tos
  • Security Blog
Efficient Infrastructure Testing

7 Min Read

Aug 01, 2022
Attacking EFB updates
  • Aviation Cyber Security
  • Security Blog
Attacking EFB updates

9 Min Read

Jul 27, 2022
EFB ePIL. Pinching passenger PII from pilots
  • Aviation Cyber Security
  • Security Blog
EFB ePIL. Pinching passenger PII from pilots

13 Min Read

Jul 15, 2022
Stop using phishing as a measure of your cyber awareness culture
  • How Tos
  • Security Blog
Stop using phishing as a measure of your cyber awareness culture

4 Min Read

Jul 12, 2022
EFB Tampering. Holdover Time
  • Aviation Cyber Security
  • Security Blog
EFB Tampering. Holdover Time

17 Min Read

Jul 06, 2022
Cloud OSINT. Finding Interesting Resources
  • Cloud Security
  • Security Blog
Cloud OSINT. Finding Interesting Resources

7 Min Read

Jul 04, 2022
CMC Electronics EFB breakout vulnerability
  • Aviation Cyber Security
  • Security Blog
CMC Electronics EFB breakout vulnerability

5 Min Read

Jun 28, 2022
Follina 0day exploit. Malicious code execution in Office docs
  • DFIR
  • Security Blog
Follina 0day exploit. Malicious code execution in Office docs

2 Min Read

Jun 01, 2022
Azure Cloud Takeover
  • Cloud Security
  • Security Blog
Azure Cloud Takeover

7 Min Read

May 31, 2022
747 Hackathon
  • Aviation Cyber Security
  • Security Blog
747 Hackathon

6 Min Read

May 25, 2022
Password policy guidance
  • Passwords
  • Security Blog
Password policy guidance

8 Min Read

May 23, 2022
We need to talk about sex toys and cyber security
  • Internet Of Things
  • Security Blog
We need to talk about sex toys and cyber security

9 Min Read

May 23, 2022
Galleon NTS-6002-GPS Command Injection vulnerability (CVE-2022-27224)
  • Security Blog
  • Vulnerability Disclosure
Galleon NTS-6002-GPS Command Injection vulnerability (CVE-2022-27224)

5 Min Read

May 20, 2022
Got the security controls wrong in OT and maritime? Watch as engineers work around them
  • OT, ICS, IIoT, SCADA
  • Security Blog
Got the security controls wrong in OT and maritime? Watch as engineers work around them

5 Min Read

May 16, 2022
Constrained environment breakout. .NET Assembly exfiltration via Internet Options
  • How Tos
  • Security Blog
Constrained environment breakout. .NET Assembly exfiltration via Internet Options

11 Min Read

May 09, 2022
Reporting of cyber incidents becomes law in the USA
  • DFIR
  • Security Blog
Reporting of cyber incidents becomes law in the USA

5 Min Read

Apr 13, 2022
The reality of OT segregation
  • OT, ICS, IIoT, SCADA
  • Security Blog
The reality of OT segregation

8 Min Read

Mar 31, 2022
To Pay or Not to Pay? That is the Ransomware question
  • DFIR
  • Security Blog
To Pay or Not to Pay? That is the Ransomware question

8 Min Read

Mar 21, 2022
Red Team lab automation
  • Red Teaming
  • Security Blog
Red Team lab automation

22 Min Read

Mar 03, 2022
OAuth consent phishing, in the wild
  • DFIR
  • Security Blog
OAuth consent phishing, in the wild

3 Min Read

Feb 21, 2022
OpSec. Hunting wireless access points
  • OPSEC
  • Security Blog
OpSec. Hunting wireless access points

3 Min Read

Feb 16, 2022
Vulnerabilities that aren’t. Unquoted Spaces
  • Security Blog
  • Vulnerabilities that aren't
Vulnerabilities that aren’t. Unquoted Spaces

6 Min Read

Feb 14, 2022
DPD package sniffing
  • Security Blog
  • Vulnerability Disclosure
DPD package sniffing

4 Min Read

Feb 07, 2022
Vulnerabilities that aren’t. ETag headers
  • Security Blog
  • Vulnerabilities that aren't
Vulnerabilities that aren’t. ETag headers

6 Min Read

Feb 04, 2022
Who has access to your leased Tesla?
  • Automotive Security
  • Security Blog
Who has access to your leased Tesla?

5 Min Read

Feb 01, 2022
Vulnerabilities that aren’t. Cross Site Tracing / XST
  • Security Blog
  • Vulnerabilities that aren't
Vulnerabilities that aren’t. Cross Site Tracing / XST

6 Min Read

Jan 25, 2022
Domestic CCTV and audio recording
  • Consumer Advice
  • Security Blog
Domestic CCTV and audio recording

4 Min Read

Jan 17, 2022
Audio bugging with the Fisher Price Chatter Bluetooth Telephone
  • Consumer Advice
  • Security Blog
Audio bugging with the Fisher Price Chatter Bluetooth Telephone

6 Min Read

Dec 22, 2021
Gumtree – leaking your data and not really listening
  • Security Blog
  • Vulnerability Advisory
Gumtree – leaking your data and not really listening

7 Min Read

Dec 15, 2021
A masterclass in responding to vulnerability disclosure: The Buddi app and tracker
  • Security Blog
  • Vulnerability Disclosure
A masterclass in responding to vulnerability disclosure: The Buddi app and tracker

4 Min Read

Nov 29, 2021
What does the Product Security and Telecommunications Infrastructure bill mean for me?
  • Internet Of Things
  • Security Blog
What does the Product Security and Telecommunications Infrastructure bill mean for me?

4 Min Read

Nov 25, 2021
SkyFail. 6 million routers left exposed
  • Security Blog
  • Vulnerability Advisory
SkyFail. 6 million routers left exposed

11 Min Read

Nov 19, 2021
Hijacking smart luggage
  • Internet Of Things
  • Security Blog
Hijacking smart luggage

4 Min Read

Nov 11, 2021
Pun-free Cylance vulnerability, fixed
  • Security Blog
  • Vulnerability Advisory
Pun-free Cylance vulnerability, fixed

5 Min Read

Nov 10, 2021
Time based username enumeration
  • How Tos
  • Security Blog
Time based username enumeration

3 Min Read

Nov 09, 2021
1 2 3 4 … 10