Skip to main content
How to secure body-worn cameras and protect footage from cyber threats
  • Hardware Hacking
How to secure body-worn cameras and protect footage from cyber threats

4 Min Read

Jan 21, 2025
Security flaws found in tiny phones promoted to children
  • Consumer Advice
  • Hardware Hacking
Security flaws found in tiny phones promoted to children

9 Min Read

Jan 15, 2025
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection
  • Artificial Intelligence
  • Digital Forensics and Incident Response
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection

14 Min Read

Jan 13, 2025
The unexpected effects of GPS spoofing on aviation safety
  • Aviation Cyber Security
The unexpected effects of GPS spoofing on aviation safety

8 Min Read

Jan 09, 2025
10 Non-tech things you wish you had done after being breached
  • Digital Forensics and Incident Response
10 Non-tech things you wish you had done after being breached

5 Min Read

Jan 07, 2025
The surprising existence of the erase button on cockpit voice recorders
  • Aviation Cyber Security
The surprising existence of the erase button on cockpit voice recorders

8 Min Read

Jan 03, 2025
Heels on fire. Hacking smart ski socks
  • Internet Of Things
Heels on fire. Hacking smart ski socks

3 Min Read

Dec 23, 2024
Practice being punched in the face. The realities of incident response preparation
  • Digital Forensics and Incident Response
Practice being punched in the face. The realities of incident response preparation

4 Min Read

Dec 20, 2024
How easily access cards can be cloned and why your PACS might be vulnerable
  • Hardware Hacking
  • OPSEC
  • Social Engineering
How easily access cards can be cloned and why your PACS might be vulnerable

12 Min Read

Dec 11, 2024
Making sure your door access control system is secure: Top 5 things to check
  • Hardware Hacking
  • OPSEC
Making sure your door access control system is secure: Top 5 things to check

3 Min Read

Dec 09, 2024
Is secure boot on the main application processor enough?
  • Hardware Hacking
Is secure boot on the main application processor enough?

5 Min Read

Dec 05, 2024
6 non tech things you wish you had done before being breached
  • Digital Forensics and Incident Response
6 non tech things you wish you had done before being breached

5 Min Read

Dec 03, 2024
BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365
  • Digital Forensics and Incident Response
BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365

8 Min Read

Nov 27, 2024
How we helped expose a £12 million rental scam
  • Consumer Advice
How we helped expose a £12 million rental scam

8 Min Read

Nov 19, 2024
IACS UR E26 and E27 guidance
  • Cyber Regulation
  • Maritime Cyber Security
IACS UR E26 and E27 guidance

30 Min Read

Nov 14, 2024
Did security gaps at Antwerp port enable drug smuggling operations?
  • Maritime Cyber Security
Did security gaps at Antwerp port enable drug smuggling operations?

5 Min Read

Nov 12, 2024
BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365
  • Digital Forensics and Incident Response
BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365

14 Min Read

Nov 08, 2024
You lost your iPhone, but it’s locked. That’s fine, right?
  • Consumer Advice
  • Digital Forensics and Incident Response
You lost your iPhone, but it’s locked. That’s fine, right?

5 Min Read

Nov 06, 2024
What goes into testing a ship?
  • Maritime Cyber Security
What goes into testing a ship?

8 Min Read

Nov 05, 2024
Maritime lawyers assemble!
  • Maritime Cyber Security
Maritime lawyers assemble!

6 Min Read

Nov 05, 2024
Mounting memory with MemProcFS for advanced memory forensics
  • Digital Forensics and Incident Response
Mounting memory with MemProcFS for advanced memory forensics

10 Min Read

Oct 31, 2024
Testing the security of CCTV systems
  • Hardware Hacking
  • Opinions
Testing the security of CCTV systems

4 Min Read

Oct 30, 2024
Using Volatility for advanced memory forensics
  • Digital Forensics and Incident Response
  • Internet Of Things
Using Volatility for advanced memory forensics

13 Min Read

Oct 24, 2024
BEC-ware the phish (part 1). Investigating incidents in M365
  • Digital Forensics and Incident Response
BEC-ware the phish (part 1). Investigating incidents in M365

13 Min Read

Oct 15, 2024
Imposter syndrome in cyber security
  • Opinions
Imposter syndrome in cyber security

6 Min Read

Oct 10, 2024
How to handle vulnerability reports in aviation
  • Aviation Cyber Security
How to handle vulnerability reports in aviation

4 Min Read

Oct 09, 2024
Airbus Navblue Flysmart LPC-NG issues
  • Aviation Cyber Security
Airbus Navblue Flysmart LPC-NG issues

17 Min Read

Oct 01, 2024
How can you protect your data, privacy, and finances if your phone gets lost or stolen?
  • Consumer Advice
How can you protect your data, privacy, and finances if your phone gets lost or stolen?

15 Min Read

Sep 30, 2024
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking
  • Hardware Hacking
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

8 Min Read

Sep 26, 2024
Proroute H685 4G router vulnerabilities
  • Vulnerabilities and Disclosures
Proroute H685 4G router vulnerabilities

12 Min Read

Sep 19, 2024
Cyber threats to shipping explained
  • Maritime Cyber Security
Cyber threats to shipping explained

14 Min Read

Sep 18, 2024
Living off the land, GPO style
  • Red Teaming
Living off the land, GPO style

11 Min Read

Sep 12, 2024
Smart home security advice. Ring, SimpliSafe, Swann, and Yale
  • Consumer Advice
Smart home security advice. Ring, SimpliSafe, Swann, and Yale

18 Min Read

Sep 10, 2024
Advanced forensic techniques for recovering hidden data in wearable devices
  • Digital Forensics and Incident Response
Advanced forensic techniques for recovering hidden data in wearable devices

13 Min Read

Sep 04, 2024
How to enhance the security of your social media accounts
  • Consumer Advice
  • How Tos
How to enhance the security of your social media accounts

13 Min Read

Aug 30, 2024
How to root an Android device for analysis and vulnerability assessment
  • How Tos
How to root an Android device for analysis and vulnerability assessment

7 Min Read

Aug 23, 2024
Insights and highlights from DEF CON 32
  • Shameless Self Promotion
Insights and highlights from DEF CON 32

8 Min Read

Aug 16, 2024
Living off the land with Bluetooth PAN
  • Red Teaming
Living off the land with Bluetooth PAN

4 Min Read

Aug 12, 2024
Key safe security, or the lack of it
  • Opinions
Key safe security, or the lack of it

3 Min Read

Aug 07, 2024
Fuzzy matching with Ghidra BSim, a guide
  • Hardware Hacking
Fuzzy matching with Ghidra BSim, a guide

10 Min Read

Aug 05, 2024
Bootloaders explained
  • How Tos
Bootloaders explained

4 Min Read

Aug 01, 2024
Leave the World Behind, or don’t
  • Maritime Cyber Security
Leave the World Behind, or don’t

7 Min Read

Jul 24, 2024
Pen testing cruise ships
  • Maritime Cyber Security
  • Security Blog
Pen testing cruise ships

6 Min Read

Jul 08, 2024
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
  • Security Blog
  • Vulnerabilities and Disclosures
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)

5 Min Read

Jul 02, 2024
Glastonbury ticket hijack vulnerability fixed
  • Security Blog
  • Vulnerabilities and Disclosures
Glastonbury ticket hijack vulnerability fixed

4 Min Read

Jun 28, 2024
Dodgy disks. My 32TB SSD Adventure
  • How Tos
  • Security Blog
Dodgy disks. My 32TB SSD Adventure

3 Min Read

Jun 21, 2024
HUMINT in a cyber world
  • OPSEC
  • Security Blog
HUMINT in a cyber world

7 Min Read

Jun 20, 2024
UK PSTI? You’ll need a Vulnerability Disclosure Program! 
  • Security Blog
  • Vulnerabilities and Disclosures
UK PSTI? You’ll need a Vulnerability Disclosure Program! 

5 Min Read

May 24, 2024
Impacts on ICS from the updated Cyber Assessment Framework (CAF)
  • OT, ICS, IIoT, SCADA
  • Security Blog
Impacts on ICS from the updated Cyber Assessment Framework (CAF)

5 Min Read

May 17, 2024
Pipedream ICS malware toolkit is a nightmare
  • Digital Forensics and Incident Response
  • Security Blog
Pipedream ICS malware toolkit is a nightmare

5 Min Read

May 09, 2024
Vulnerabilities that (mostly) aren’t: LUCKY13
  • Vulnerabilities that aren't
Vulnerabilities that (mostly) aren’t: LUCKY13

5 Min Read

May 03, 2024
Bypassing MFA on Microsoft Azure Entra ID
  • How Tos
  • Security Blog
Bypassing MFA on Microsoft Azure Entra ID

7 Min Read

May 01, 2024
Can ships be hacked?
  • Maritime Cyber Security
  • Security Blog
Can ships be hacked?

15 Min Read

Apr 12, 2024
Navigating the perilous waters of conference invitations
  • Opinions
  • Security Blog
Navigating the perilous waters of conference invitations

3 Min Read

Mar 14, 2024
The big play of autonomous vehicles
  • Automotive Security
  • Security Blog
The big play of autonomous vehicles

5 Min Read

Mar 12, 2024
Living off the land with native SSH and split tunnelling
  • Red Teaming
  • Security Blog
Living off the land with native SSH and split tunnelling

5 Min Read

Mar 06, 2024
Advice for manufacturers on the coming PSTI regulation
  • Cyber Regulation
  • Internet Of Things
  • Security Blog
Advice for manufacturers on the coming PSTI regulation

8 Min Read

Feb 23, 2024
No fix KrbRelay VMware style
  • Security Blog
  • Vulnerabilities and Disclosures
No fix KrbRelay VMware style

6 Min Read

Feb 21, 2024
Cyber security for Credit Unions 101
  • How Tos
  • Security Blog
Cyber security for Credit Unions 101

4 Min Read

Feb 20, 2024
QR Phishing. Fact or Fiction?
  • Security Blog
  • Social Engineering
QR Phishing. Fact or Fiction?

6 Min Read

Feb 15, 2024
Android Content Providers 101
  • Android
  • Security Blog
Android Content Providers 101

6 Min Read

Feb 13, 2024
Ski & bike helmets protect your head, not location or voice
  • Internet Of Things
  • Security Blog
Ski & bike helmets protect your head, not location or voice

7 Min Read

Feb 07, 2024
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager
  • Aviation Cyber Security
  • Security Blog
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager

6 Min Read

Feb 01, 2024
OSINT in 60 seconds. Mind reading on TV
  • OPSEC
  • Security Blog
OSINT in 60 seconds. Mind reading on TV

7 Min Read

Jan 30, 2024
10 years on from the Target breach. Has building cyber security improved?
  • OT, ICS, IIoT, SCADA
  • Security Blog
10 years on from the Target breach. Has building cyber security improved?

6 Min Read

Jan 24, 2024
Cockpit door lock auto-unlock is no surprise
  • Aviation Cyber Security
  • Security Blog
Cockpit door lock auto-unlock is no surprise

3 Min Read

Jan 10, 2024
Listening in at Latimer House. RF emissions and more
  • Opinions
  • Security Blog
Listening in at Latimer House. RF emissions and more

12 Min Read

Jan 09, 2024
RAID Technology and the importance of disk encryption in data security
  • Digital Forensics and Incident Response
  • Security Blog
RAID Technology and the importance of disk encryption in data security

3 Min Read

Jan 04, 2024
Mobile malware analysis for the BBC
  • Consumer Advice
  • Security Blog
Mobile malware analysis for the BBC

13 Min Read

Jan 02, 2024
  • Consumer Advice
Helping a banking fraud victim

4 Min Read

Jan 02, 2024
Helping a mobile malware fraud victim
  • Consumer Advice
  • Security Blog
Helping a mobile malware fraud victim

5 Min Read

Jan 02, 2024
Socks! Our cyber prediction for 2024
  • Shameless Self Promotion
Socks! Our cyber prediction for 2024

4 Min Read

Dec 22, 2023
Intercepting MFA. Phishing and Adversary in The Middle attacks
  • Digital Forensics and Incident Response
  • Security Blog
Intercepting MFA. Phishing and Adversary in The Middle attacks

12 Min Read

Dec 12, 2023
Navigate FDA 524b to get your medical cyber device to market
  • Medical Device Security
  • Security Blog
Navigate FDA 524b to get your medical cyber device to market

6 Min Read

Dec 07, 2023
OSINT. What can you find from a domain or company name
  • OPSEC
  • Security Blog
OSINT. What can you find from a domain or company name

4 Min Read

Dec 05, 2023
OPSEC failures when threat hunting
  • OPSEC
  • Security Blog
OPSEC failures when threat hunting

5 Min Read

Nov 30, 2023
Are Vehicle to Grid spikes coming?
  • Automotive Security
  • Security Blog
Are Vehicle to Grid spikes coming?

6 Min Read

Nov 27, 2023
Cap Dev. Better red teaming with continuous Capability Development
  • Red Teaming
  • Security Blog
Cap Dev. Better red teaming with continuous Capability Development

4 Min Read

Nov 23, 2023
FujiFilm printer credentials encryption issue fixed
  • Security Blog
  • Vulnerabilities and Disclosures
FujiFilm printer credentials encryption issue fixed

5 Min Read

Oct 31, 2023
FDA medical IoT cyber device compliance. FD&C 524b
  • Medical Device Security
  • Security Blog
FDA medical IoT cyber device compliance. FD&C 524b

5 Min Read

Oct 31, 2023
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting
  • Digital Forensics and Incident Response
  • Security Blog
Using Velociraptor for large-scale endpoint visibility and rapid threat hunting

11 Min Read

Oct 12, 2023
IoT Secure Development Guide
  • Internet Of Things
  • Security Blog
IoT Secure Development Guide

47 Min Read

Oct 10, 2023
The reality of Apple watch pen testing
  • Macs / Apple
  • Security Blog
The reality of Apple watch pen testing

12 Min Read

Oct 09, 2023
Call centres. Outbound call verification
  • How Tos
  • Security Blog
Call centres. Outbound call verification

5 Min Read

Oct 03, 2023
Fastboot Fuzzing
  • Hardware Hacking
  • Security Blog
Fastboot Fuzzing

4 Min Read

Sep 29, 2023
Which security framework? All of them, in the SCF
  • Cyber Regulation
  • GRC Consultancy Advice
Which security framework? All of them, in the SCF

6 Min Read

Sep 27, 2023
3yrs of CAA ASSURE assessments. What we’ve learned
  • GRC Consultancy Advice
  • Security Blog
3yrs of CAA ASSURE assessments. What we’ve learned

6 Min Read

Sep 20, 2023
PCI v4 is coming. Are you ready?
  • Cyber Regulation
  • GRC Consultancy Advice
  • PCI Advice
PCI v4 is coming. Are you ready?

6 Min Read

Sep 14, 2023
Information disclosure through insecure design
  • How Tos
  • Security Blog
Information disclosure through insecure design

3 Min Read

Sep 07, 2023
A broken marriage. Abusing mixed vendor Kerberos stacks
  • Security Blog
  • Vulnerabilities and Disclosures
A broken marriage. Abusing mixed vendor Kerberos stacks

14 Min Read

Aug 25, 2023
The most hated man on the internet. Lessons to learn
  • How Tos
  • Security Blog
The most hated man on the internet. Lessons to learn

3 Min Read

Aug 22, 2023
Scorpion CBS show. Plane hack
  • Aviation Cyber Security
  • Security Blog
Scorpion CBS show. Plane hack

4 Min Read

Aug 14, 2023
Die Hard 2. Or how not to hack airplanes
  • Aviation Cyber Security
  • Security Blog
Die Hard 2. Or how not to hack airplanes

6 Min Read

Aug 14, 2023
Vulnerability disclosure in aviation
  • Aviation Cyber Security
  • Security Blog
Vulnerability disclosure in aviation

6 Min Read

Aug 09, 2023
PTP at DEF CON 31 2023
  • Security Blog
  • Shameless Self Promotion
PTP at DEF CON 31 2023

2 Min Read

Aug 03, 2023
n00b’s guide to DEF CON. Surviving the Matrix of the underground
  • How Tos
  • Security Blog
n00b’s guide to DEF CON. Surviving the Matrix of the underground

11 Min Read

Aug 03, 2023
Have you been compromised?
  • Digital Forensics and Incident Response
  • Security Blog
Have you been compromised?

6 Min Read

Aug 02, 2023
Exposed Gits: 10 Years on
  • How Tos
  • Security Blog
Exposed Gits: 10 Years on

4 Min Read

Jul 19, 2023
Black Basta ransomware
  • Digital Forensics and Incident Response
  • Security Blog
Black Basta ransomware

6 Min Read

Jun 28, 2023
WhosHere Plus. Trilateration vulnerability
  • Security Blog
  • Vulnerabilities and Disclosures
WhosHere Plus. Trilateration vulnerability

5 Min Read

Jun 12, 2023
1 2 3 4 … 10