Skip to main content
Hacking smart devices to convince dementia sufferers to overdose
  • Internet Of Things
  • Security Blog
Hacking smart devices to convince dementia sufferers to overdose

11 Min Read

Jul 09, 2020
Patchless AMSI bypass using SharpBlock
  • Red Teaming
  • Security Blog
Patchless AMSI bypass using SharpBlock

6 Min Read

Jul 07, 2020
Pwning smart garage door openers
  • Internet Of Things
  • Security Blog
Pwning smart garage door openers

9 Min Read

Jul 07, 2020
Identity in IoT
  • Internet Of Things
  • Security Blog
Identity in IoT

8 Min Read

Jul 01, 2020
What an IoT assurance scheme could look like
  • Internet Of Things
  • Security Blog
What an IoT assurance scheme could look like

7 Min Read

Jun 30, 2020
Scams and how to spot them
  • How Tos
  • Security Blog
Scams and how to spot them

5 Min Read

Jun 30, 2020
Congrats, you got everyone remote. But did you do it securely?
  • How Tos
  • Security Blog
Congrats, you got everyone remote. But did you do it securely?

4 Min Read

Jun 29, 2020
Embedded security fails in ICS
  • OT, ICS, IIoT, SCADA
  • Security Blog
Embedded security fails in ICS

5 Min Read

Jun 17, 2020
Revisiting old tools
  • How Tos
  • Security Blog
Revisiting old tools

4 Min Read

Jun 12, 2020
A cyber warning light. The canary in the mine
  • Opinions
  • Security Blog
A cyber warning light. The canary in the mine

5 Min Read

Jun 11, 2020
Unclamping the Barnacle
  • Internet Of Things
  • Security Blog
Unclamping the Barnacle

4 Min Read

Jun 04, 2020
Introduction to PLCs and Ladder Logic
  • OT, ICS, IIoT, SCADA
  • Security Blog
Introduction to PLCs and Ladder Logic

14 Min Read

Jun 01, 2020
Reverse Engineering a 5g ‘Bioshield’
  • Reverse Engineering
  • Security Blog
Reverse Engineering a 5g ‘Bioshield’

6 Min Read

May 28, 2020
In Flight Entertainment System Security
  • Aviation Cyber Security
  • Security Blog
In Flight Entertainment System Security

5 Min Read

May 27, 2020
Docker Desktop for Windows PrivEsc (CVE-2020-11492)
  • Security Blog
  • Vulnerability Advisory
Docker Desktop for Windows PrivEsc (CVE-2020-11492)

7 Min Read

May 22, 2020
Ethical dilemmas with responsible disclosure
  • Security Blog
  • Vulnerability Disclosure
Ethical dilemmas with responsible disclosure

7 Min Read

May 22, 2020
Short beacon analysis on the NHS iOS Tracking application
  • Macs / Apple
  • Security Blog
Short beacon analysis on the NHS iOS Tracking application

3 Min Read

May 12, 2020
Housemates. The new Red Team?
  • Red Teaming
  • Security Blog
Housemates. The new Red Team?

5 Min Read

May 06, 2020
How quickly can you respond?
  • DFIR
  • Security Blog
How quickly can you respond?

6 Min Read

May 05, 2020
Speaking at security events
  • How Tos
  • Security Blog
Speaking at security events

10 Min Read

May 04, 2020
Jeopardising aircraft through TCAS spoofing
  • Aviation Cyber Security
  • Security Blog
Jeopardising aircraft through TCAS spoofing

6 Min Read

May 01, 2020
GDPR.EU has er… a data leakage issue
  • Security Blog
  • Vulnerability Advisory
GDPR.EU has er… a data leakage issue

3 Min Read

Apr 27, 2020
From a TCU to Corporate Domain Admin
  • Automotive Security
  • Security Blog
From a TCU to Corporate Domain Admin

3 Min Read

Apr 24, 2020
Are you cyber seaworthy?
  • Maritime Cyber Security
  • Security Blog
Are you cyber seaworthy?

9 Min Read

Apr 17, 2020
You can’t build a great IoT system without a strong foundation
  • Internet Of Things
  • Security Blog
You can’t build a great IoT system without a strong foundation

26 Min Read

Apr 17, 2020
SweetPotato – Service to SYSTEM
  • Red Teaming
  • Security Blog
SweetPotato – Service to SYSTEM

3 Min Read

Apr 14, 2020
Authenticating your call centre when everyone is remote
  • Red Teaming
  • Security Blog
Authenticating your call centre when everyone is remote

3 Min Read

Apr 06, 2020
Honeyroasting. How to detect Kerberoast breaches with honeypots
  • How Tos
  • Security Blog
Honeyroasting. How to detect Kerberoast breaches with honeypots

5 Min Read

Apr 01, 2020
Quick wins with Adobe Experience Manager
  • How Tos
  • Security Blog
Quick wins with Adobe Experience Manager

5 Min Read

Mar 27, 2020
Turning an OBD-II reader into a USB / NFC attack tool
  • Hardware Hacking
  • Security Blog
Turning an OBD-II reader into a USB / NFC attack tool

15 Min Read

Mar 25, 2020
Spying on old folks
  • Security Blog
  • Vulnerability Advisory
Spying on old folks

4 Min Read

Mar 23, 2020
PrivEsc in Lenovo Vantage. Two minutes later
  • Security Blog
  • Vulnerability Advisory
PrivEsc in Lenovo Vantage. Two minutes later

8 Min Read

Mar 20, 2020
Introduction to Bluetooth Low Energy
  • Hardware Hacking
  • Security Blog
Introduction to Bluetooth Low Energy

8 Min Read

Mar 12, 2020
9 things to consider when staff work from home unexpectedly
  • How Tos
  • Security Blog
9 things to consider when staff work from home unexpectedly

4 Min Read

Mar 10, 2020
Hardware Router CTF
  • Hardware Hacking
  • Security Blog
Hardware Router CTF

14 Min Read

Mar 10, 2020
Fill your Boots with credential stuffing protections
  • Passwords
  • Security Blog
Fill your Boots with credential stuffing protections

5 Min Read

Mar 06, 2020
A not so Clearview?
  • Security Blog
A not so Clearview?

3 Min Read

Mar 04, 2020
From Minecraft to Metasploit. Game hacking could start your cyber security career
  • How Tos
  • Security Blog
From Minecraft to Metasploit. Game hacking could start your cyber security career

5 Min Read

Mar 03, 2020
Hardcoding Keys. Is that Wyse?
  • Reverse Engineering
  • Security Blog
Hardcoding Keys. Is that Wyse?

3 Min Read

Feb 25, 2020
Ships can’t be hacked. Wrong
  • Maritime Cyber Security
  • Security Blog
Ships can’t be hacked. Wrong

10 Min Read

Feb 20, 2020
Out Of Band, Out Of Sight, Out Of Mind
  • Maritime Cyber Security
  • Security Blog
Out Of Band, Out Of Sight, Out Of Mind

4 Min Read

Feb 17, 2020
Business Email Compromise. What to do
  • How Tos
  • Security Blog
Business Email Compromise. What to do

6 Min Read

Feb 14, 2020
Reverse Engineering the Tesla Firmware Update Process
  • Automotive Security
Reverse Engineering the Tesla Firmware Update Process

44 Min Read

Feb 12, 2020
Reverse Engineering Tesla Hardware
  • Automotive Security
  • Security Blog
Reverse Engineering Tesla Hardware

16 Min Read

Feb 12, 2020
Password managers for all staff. Why the resistance?!
  • Passwords
  • Security Blog
Password managers for all staff. Why the resistance?!

6 Min Read

Feb 10, 2020
2×4 Security
  • PCI Advice
  • Security Blog
2×4 Security

3 Min Read

Feb 07, 2020
Pen Testing Ships. A year in review
  • Maritime Cyber Security
  • Security Blog
Pen Testing Ships. A year in review

9 Min Read

Feb 04, 2020
HTTP Request Smuggling. A how-to
  • How Tos
  • Security Blog
HTTP Request Smuggling. A how-to

7 Min Read

Jan 31, 2020
ASSURE Aviation Cyber Security Testing
  • Aviation Cyber Security
  • Security Blog
ASSURE Aviation Cyber Security Testing

7 Min Read

Jan 30, 2020
  • Internet Of Things
Embedded devices. Typical security issues

3 Min Read

Jan 26, 2020
IR & Forensics in the Cloud
  • DFIR
  • Security Blog
IR & Forensics in the Cloud

4 Min Read

Jan 10, 2020
Quick Wins to Combat Data Leaks
  • How Tos
  • Security Blog
Quick Wins to Combat Data Leaks

3 Min Read

Jan 08, 2020
Kids Tracker Watches: CloudPets, exploiting athletes and hijacking reality TV
  • Internet Of Things
  • Security Blog
Kids Tracker Watches: CloudPets, exploiting athletes and hijacking reality TV

11 Min Read

Dec 17, 2019
Xmas Light Security Improves… a bit
  • Internet Of Things
  • Security Blog
Xmas Light Security Improves… a bit

3 Min Read

Dec 10, 2019
Hacking Hardware Password Managers: The RecZone
  • Hardware Hacking
  • Security Blog
Hacking Hardware Password Managers: The RecZone

11 Min Read

Dec 06, 2019
Hacking Hardware Password Managers: passwordsFAST
  • Hardware Hacking
  • Security Blog
Hacking Hardware Password Managers: passwordsFAST

8 Min Read

Dec 06, 2019
Hacking Hardware Password Managers: Royal Vault Password Keeper
  • Hardware Hacking
  • Security Blog
Hacking Hardware Password Managers: Royal Vault Password Keeper

9 Min Read

Dec 06, 2019
Nuclear Satcoms
  • OT, ICS, IIoT, SCADA
  • Security Blog
Nuclear Satcoms

4 Min Read

Dec 04, 2019
Commands and Tools for Embedded Reverse Engineering
  • Reverse Engineering
  • Security Blog
Commands and Tools for Embedded Reverse Engineering

8 Min Read

Dec 03, 2019
Analysing the Attack Surface of an Industrial Data Acquisition Device
  • OT, ICS, IIoT, SCADA
  • Security Blog
Analysing the Attack Surface of an Industrial Data Acquisition Device

7 Min Read

Dec 03, 2019
The snooping girl on a train, again. How to compromise a business
  • How Tos
  • Security Blog
The snooping girl on a train, again. How to compromise a business

3 Min Read

Dec 02, 2019
Embedded device research. The tools you’ll need
  • Hardware Hacking
  • Security Blog
Embedded device research. The tools you’ll need

7 Min Read

Nov 29, 2019
Ships engines, a guide for pen testers
  • Maritime Cyber Security
  • Security Blog
Ships engines, a guide for pen testers

7 Min Read

Nov 29, 2019
Christmas socialising. Goodwill to all, and keep your devices safe
  • How Tos
Christmas socialising. Goodwill to all, and keep your devices safe

3 Min Read

Nov 28, 2019
The Disgruntled Employee?
  • DFIR
  • Security Blog
The Disgruntled Employee?

4 Min Read

Nov 15, 2019
Updating Airplanes
  • Aviation Cyber Security
  • Security Blog
Updating Airplanes

2 Min Read

Nov 11, 2019
Schiphol hijack false alarm. An insiders view of what happened
  • Aviation Cyber Security
  • Security Blog
Schiphol hijack false alarm. An insiders view of what happened

4 Min Read

Nov 07, 2019
Pwning a Smart Car Charger, Building a Botnet
  • Internet Of Things
  • Security Blog
Pwning a Smart Car Charger, Building a Botnet

7 Min Read

Nov 06, 2019
Objections to IoT regulation. A rational reply
  • Internet Of Things
  • Security Blog
Objections to IoT regulation. A rational reply

3 Min Read

Oct 24, 2019
Unmasking mystery boxes on ship’s bridges
  • Maritime Cyber Security
  • Security Blog
Unmasking mystery boxes on ship’s bridges

9 Min Read

Oct 14, 2019
Mapping the Attack Surface of an Airport
  • Aviation Cyber Security
  • Security Blog
Mapping the Attack Surface of an Airport

12 Min Read

Oct 11, 2019
Help, my accounts have been hacked! What should I do?
  • Consumer Advice
  • Security Blog
Help, my accounts have been hacked! What should I do?

10 Min Read

Oct 10, 2019
Too Interested?
  • DFIR
  • Security Blog
Too Interested?

3 Min Read

Oct 08, 2019
Real-life social engineering. Another two days in tweets
  • Security Blog
  • Social Engineering
Real-life social engineering. Another two days in tweets

11 Min Read

Oct 04, 2019
OSINT for Avionics
  • Aviation Cyber Security
  • Security Blog
OSINT for Avionics

6 Min Read

Oct 04, 2019
The 5 breach readiness mistakes
  • DFIR
  • Security Blog
The 5 breach readiness mistakes

4 Min Read

Sep 30, 2019
  • Sustainability
My environmental journey

5 Min Read

Sep 28, 2019
A security researcher has made contact. What do I do?
  • How Tos
  • Security Blog
A security researcher has made contact. What do I do?

11 Min Read

Sep 27, 2019
Think you’ve had a breach? Top 5 things to do
  • Breach Handling
  • Security Blog
Think you’ve had a breach? Top 5 things to do

6 Min Read

Sep 23, 2019
Drilling open a smart door lock in 4 seconds
  • Internet Of Things
  • Security Blog
Drilling open a smart door lock in 4 seconds

4 Min Read

Sep 23, 2019
A Pen Tester’s First Solo: Aviation Security 101
  • Aviation Cyber Security
  • Security Blog
A Pen Tester’s First Solo: Aviation Security 101

16 Min Read

Sep 20, 2019
How to: Kerberoast like a boss
  • Red Teaming
  • Security Blog
How to: Kerberoast like a boss

12 Min Read

Sep 18, 2019
  • Internet Of Things
IoT security. A retrospective

5 Min Read

Sep 17, 2019
Real-life social engineering. Two days in tweets
  • Red Teaming
  • Security Blog
Real-life social engineering. Two days in tweets

12 Min Read

Sep 16, 2019
Pwning a Siemens Scalance ICS switch through ARM reversing
  • OT, ICS, IIoT, SCADA
  • Security Blog
Pwning a Siemens Scalance ICS switch through ARM reversing

7 Min Read

Sep 03, 2019
A Secure “Smart” Kettle?
  • Internet Of Things
  • Security Blog
A Secure “Smart” Kettle?

3 Min Read

Aug 30, 2019
PrivEsc in Lenovo Solution Centre, 10 minutes later
  • Security Blog
  • Vulnerability Advisory
PrivEsc in Lenovo Solution Centre, 10 minutes later

4 Min Read

Aug 22, 2019
Lojack’d: Pwning Smart vehicle trackers
  • Automotive Security
  • Security Blog
Lojack’d: Pwning Smart vehicle trackers

9 Min Read

Aug 14, 2019
Dating apps that track users from home to work and everywhere in-between
  • Security Blog
  • Vulnerability Advisory
Dating apps that track users from home to work and everywhere in-between

6 Min Read

Aug 11, 2019
Reverse Engineering 4G Hotspots for fun, bugs and net financial loss
  • Hardware Hacking
  • Security Blog
Reverse Engineering 4G Hotspots for fun, bugs and net financial loss

7 Min Read

Aug 10, 2019
Breaking (Bad) Cross-Site Request Forgery Protection – The Netgear Nighthawk M1
  • Hardware Hacking
  • Security Blog
Breaking (Bad) Cross-Site Request Forgery Protection – The Netgear Nighthawk M1

5 Min Read

Aug 10, 2019
CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!
  • Hardware Hacking
  • Security Blog
CVE-2019-12103 – Analysis of a Pre-Auth RCE on the TP-Link M7350, with Ghidra!

18 Min Read

Aug 10, 2019
Breaking (bad) firmware encryption. Case study on the Netgear Nighthawk M1
  • Hardware Hacking
  • Security Blog
Breaking (bad) firmware encryption. Case study on the Netgear Nighthawk M1

16 Min Read

Aug 10, 2019
ZTE MF910 – An end of life router, running lots of vivacious hidden code
  • Internet Of Things
  • Security Blog
ZTE MF910 – An end of life router, running lots of vivacious hidden code

8 Min Read

Aug 10, 2019
Group sex app leaks locations, pics and personal details. Identifies users in White House and Supreme Court
  • Internet Of Things
  • Security Blog
Group sex app leaks locations, pics and personal details. Identifies users in White House and Supreme Court

5 Min Read

Aug 08, 2019
PTP at DEF CON 27
  • Security Blog
  • Shameless Self Promotion
PTP at DEF CON 27

2 Min Read

Aug 05, 2019
DCMS Practical Guidelines. Actionable information
  • Internet Of Things
  • Security Blog
DCMS Practical Guidelines. Actionable information

11 Min Read

Aug 02, 2019
Vehicle Telematics Security; getting it right
  • Automotive Security
  • Internet Of Things
Vehicle Telematics Security; getting it right

9 Min Read

Jul 26, 2019
Social engineering. When you’re the mark…
  • Social Engineering
Social engineering. When you’re the mark…

9 Min Read

Jul 23, 2019
Fails and Fixes with IoT
  • Internet Of Things
Fails and Fixes with IoT

8 Min Read

Jul 19, 2019
1 2 3 4 5 6 … 10