Skip to main content
Deploying EFBs securely
  • Aviation Cyber Security
Deploying EFBs securely

7 Min Read

Jun 04, 2021
Do you know your OpSec?
  • OPSEC
Do you know your OpSec?

7 Min Read

May 28, 2021
Smart lighting security
  • How Tos
  • Internet Of Things
Smart lighting security

4 Min Read

May 21, 2021
Getting a persistent shell on a 747 IFE
  • Aviation Cyber Security
Getting a persistent shell on a 747 IFE

14 Min Read

May 21, 2021
EFB Tampering 3. Take-off pt1
  • Aviation Cyber Security
EFB Tampering 3. Take-off pt1

21 Min Read

May 17, 2021
EFB Tampering 3. Take-off pt2
  • Aviation Cyber Security
EFB Tampering 3. Take-off pt2

11 Min Read

May 17, 2021
Echelon PII Leak and Disclosure Fail
  • Vulnerabilities and Disclosures
Echelon PII Leak and Disclosure Fail

6 Min Read

May 14, 2021
EFB Safety Advice for Pilots
  • Aviation Cyber Security
EFB Safety Advice for Pilots

6 Min Read

May 07, 2021
Tour de Peloton: Exposed user data
  • Consumer Advice
Tour de Peloton: Exposed user data

6 Min Read

May 05, 2021
2021. The age of the super vulnerability?
  • Opinions
2021. The age of the super vulnerability?

8 Min Read

Apr 26, 2021
Training apps. Have their privacy settings improved in 5 years?
  • Consumer Advice
Training apps. Have their privacy settings improved in 5 years?

12 Min Read

Apr 21, 2021
Homeworking vs Homeschooling. The cyber challenge
  • Consumer Advice
Homeworking vs Homeschooling. The cyber challenge

7 Min Read

Apr 21, 2021
EFB Tampering 2. Device Integrity
  • Aviation Cyber Security
EFB Tampering 2. Device Integrity

7 Min Read

Apr 19, 2021
Security vs User Journey
  • How Tos
Security vs User Journey

5 Min Read

Apr 16, 2021
Dumping LSASS in memory undetected using MirrorDump
  • Red Teaming
Dumping LSASS in memory undetected using MirrorDump

10 Min Read

Mar 26, 2021
Multi-factor Authentication. Reset MFA you say?
  • Red Teaming
Multi-factor Authentication. Reset MFA you say?

3 Min Read

Mar 22, 2021
Out of cyber class. Maritime compliance.
  • Maritime Cyber Security
Out of cyber class. Maritime compliance.

7 Min Read

Mar 15, 2021
Is IoT ever really yours?
  • Internet Of Things
Is IoT ever really yours?

6 Min Read

Mar 08, 2021
EFB Tampering 1. Introduction and Class Differences
  • Aviation Cyber Security
EFB Tampering 1. Introduction and Class Differences

10 Min Read

Mar 05, 2021
Grid. Locked.
  • OT, ICS, IIoT, SCADA
Grid. Locked.

6 Min Read

Mar 04, 2021
Feature and Permission Policies. Security issues
  • How Tos
Feature and Permission Policies. Security issues

8 Min Read

Feb 23, 2021
K&R insurance. Kidnap and Ransom(ware)
  • Cyber Liability Insurance
K&R insurance. Kidnap and Ransom(ware)

3 Min Read

Feb 22, 2021
Reverse Engineering Keys from Firmware. A how-to
  • Hardware Hacking
  • Reverse Engineering
Reverse Engineering Keys from Firmware. A how-to

9 Min Read

Feb 08, 2021
Email Relaying. A how-to and a reminder
  • Red Teaming
Email Relaying. A how-to and a reminder

8 Min Read

Feb 05, 2021
Cyber Essentials and the New Normal
  • GRC Consultancy Advice
Cyber Essentials and the New Normal

5 Min Read

Jan 26, 2021
Three Word Passwords
  • Passwords
Three Word Passwords

5 Min Read

Jan 19, 2021
Cyber Security advice for Finance staff
  • How Tos
Cyber Security advice for Finance staff

7 Min Read

Jan 15, 2021
Azure AD. Attack of the Default Config
  • Cloud Security
Azure AD. Attack of the Default Config

9 Min Read

Jan 12, 2021
Where maritime cyber checklists fail
  • Maritime Cyber Security
Where maritime cyber checklists fail

4 Min Read

Jan 11, 2021
Schneider T200 RTU vulnerabilities
  • OT, ICS, IIoT, SCADA
  • Vulnerabilities and Disclosures
Schneider T200 RTU vulnerabilities

5 Min Read

Jan 07, 2021
How to make a software BTRFS RAID1 with LUKS2 FDE
  • How Tos
How to make a software BTRFS RAID1 with LUKS2 FDE

7 Min Read

Dec 22, 2020
How to use Keepalived for high availability and load balancing
  • How Tos
How to use Keepalived for high availability and load balancing

22 Min Read

Dec 22, 2020
A Logical Volume Manager / LVM primer for Linux
  • How Tos
A Logical Volume Manager / LVM primer for Linux

10 Min Read

Dec 21, 2020
Mimosa Cloud. Invite friends, not hackers
  • Vulnerabilities and Disclosures
Mimosa Cloud. Invite friends, not hackers

4 Min Read

Dec 21, 2020
Serious Vulnerabilities in Dualog Connection Suite
  • Vulnerabilities and Disclosures
Serious Vulnerabilities in Dualog Connection Suite

8 Min Read

Dec 10, 2020
Locking down your cyber life in lockdown
  • Consumer Advice
Locking down your cyber life in lockdown

7 Min Read

Dec 04, 2020
What the cluck?! Cyber hygiene when eating out.
  • Consumer Advice
What the cluck?! Cyber hygiene when eating out.

5 Min Read

Dec 02, 2020
Understanding Binary and Data Representation with CyberChef
  • How Tos
Understanding Binary and Data Representation with CyberChef

8 Min Read

Nov 24, 2020
OBDeleven vulnerability
  • Automotive Security
  • Vulnerabilities and Disclosures
OBDeleven vulnerability

4 Min Read

Nov 18, 2020
Brute forcing device passwords
  • How Tos
Brute forcing device passwords

11 Min Read

Nov 16, 2020
Digital Forensics acquisition
  • Digital Forensics and Incident Response
Digital Forensics acquisition

3 Min Read

Nov 14, 2020
Snakes and Ladder Logic
  • OT, ICS, IIoT, SCADA
Snakes and Ladder Logic

4 Min Read

Nov 10, 2020
Password choice
  • Red Teaming
Password choice

5 Min Read

Nov 06, 2020
Abusing RDP’s Remote Credential Guard with Rubeus PTT
  • Red Teaming
Abusing RDP’s Remote Credential Guard with Rubeus PTT

14 Min Read

Oct 22, 2020
Cyber Security Month. What can you do?
  • How Tos
Cyber Security Month. What can you do?

7 Min Read

Oct 08, 2020
Smart male chastity lock cock-up
  • Internet Of Things
Smart male chastity lock cock-up

10 Min Read

Oct 06, 2020
DLL Hijacking in NVIDIA SMI
  • Red Teaming
  • Vulnerabilities and Disclosures
DLL Hijacking in NVIDIA SMI

3 Min Read

Oct 01, 2020
Cloud-y, with a chance of hacking all the wireless things
  • Vulnerabilities and Disclosures
Cloud-y, with a chance of hacking all the wireless things

3 Min Read

Sep 29, 2020
CVE-2020-1472/Zerologon. As an IT manager should I worry?
  • How Tos
CVE-2020-1472/Zerologon. As an IT manager should I worry?

4 Min Read

Sep 23, 2020
The Return of Raining SYSTEM Shells with Citrix Workspace app
  • Red Teaming
The Return of Raining SYSTEM Shells with Citrix Workspace app

11 Min Read

Sep 21, 2020
Speed 2 – The Poseidon Adventure – Part Two
  • Maritime Cyber Security
Speed 2 – The Poseidon Adventure – Part Two

10 Min Read

Sep 17, 2020
Consumer advice: Giggle vulnerability
  • Consumer Advice
Consumer advice: Giggle vulnerability

7 Min Read

Sep 14, 2020
360lock Smart Lock Review
  • Internet Of Things
360lock Smart Lock Review

7 Min Read

Sep 11, 2020
Speed 2 – The Poseidon Adventure – Part One
  • Maritime Cyber Security
Speed 2 – The Poseidon Adventure – Part One

14 Min Read

Sep 08, 2020
Cloud firewall management API SNAFU put 500k SonicWall customers at risk
  • Vulnerabilities and Disclosures
Cloud firewall management API SNAFU put 500k SonicWall customers at risk

65 Min Read

Sep 02, 2020
A Vulnerability Disclosure Program is not just a page on a web site
  • Vulnerabilities and Disclosures
A Vulnerability Disclosure Program is not just a page on a web site

5 Min Read

Aug 26, 2020
Scanning for UK gov security.txt files
  • How Tos
Scanning for UK gov security.txt files

5 Min Read

Aug 26, 2020
Breaking Samsung firmware, or turning your S8/S9/S10 into a DIY “Proxmark”
  • Hardware Hacking
Breaking Samsung firmware, or turning your S8/S9/S10 into a DIY “Proxmark”

35 Min Read

Aug 18, 2020
DEF CON 28: 747 Walkthrough from a Hacker’s Perspective
  • Aviation Cyber Security
DEF CON 28: 747 Walkthrough from a Hacker’s Perspective

24 Min Read

Aug 12, 2020
DEF CON 28: ILS and TCAS Spoofing
  • Aviation Cyber Security
DEF CON 28: ILS and TCAS Spoofing

6 Min Read

Aug 11, 2020
DEF CON 28: Introduction to ACARS
  • Aviation Cyber Security
DEF CON 28: Introduction to ACARS

19 Min Read

Aug 10, 2020
Security Awareness is as valuable today as ever
  • How Tos
Security Awareness is as valuable today as ever

6 Min Read

Aug 07, 2020
Building a lab with Server 2019 Server Core and PowerShell …then attacking it!
  • How Tos
Building a lab with Server 2019 Server Core and PowerShell …then attacking it!

22 Min Read

Aug 03, 2020
Raining SYSTEM Shells with Citrix Workspace app
  • Vulnerabilities and Disclosures
Raining SYSTEM Shells with Citrix Workspace app

15 Min Read

Jul 21, 2020
Threat modelling and IoT hubs
  • Internet Of Things
Threat modelling and IoT hubs

8 Min Read

Jul 17, 2020
Bridging the gaps between Red and Blue teaming
  • Red Teaming
Bridging the gaps between Red and Blue teaming

7 Min Read

Jul 13, 2020
Hacking smart devices to convince dementia sufferers to overdose
  • Internet Of Things
Hacking smart devices to convince dementia sufferers to overdose

11 Min Read

Jul 09, 2020
Patchless AMSI bypass using SharpBlock
  • Red Teaming
Patchless AMSI bypass using SharpBlock

6 Min Read

Jul 07, 2020
Pwning smart garage door openers
  • Internet Of Things
Pwning smart garage door openers

9 Min Read

Jul 07, 2020
Identity in IoT
  • Internet Of Things
Identity in IoT

8 Min Read

Jul 01, 2020
What an IoT assurance scheme could look like
  • Internet Of Things
What an IoT assurance scheme could look like

7 Min Read

Jun 30, 2020
Scams and how to spot them
  • How Tos
Scams and how to spot them

5 Min Read

Jun 30, 2020
Congrats, you got everyone remote. But did you do it securely?
  • How Tos
Congrats, you got everyone remote. But did you do it securely?

4 Min Read

Jun 29, 2020
Embedded security fails in ICS
  • OT, ICS, IIoT, SCADA
Embedded security fails in ICS

5 Min Read

Jun 17, 2020
Revisiting old tools
  • How Tos
Revisiting old tools

4 Min Read

Jun 12, 2020
A cyber warning light. The canary in the mine
  • Opinions
A cyber warning light. The canary in the mine

5 Min Read

Jun 11, 2020
Unclamping the Barnacle
  • Internet Of Things
Unclamping the Barnacle

4 Min Read

Jun 04, 2020
Introduction to PLCs and Ladder Logic
  • OT, ICS, IIoT, SCADA
Introduction to PLCs and Ladder Logic

14 Min Read

Jun 01, 2020
Reverse Engineering a 5g ‘Bioshield’
  • Internet Of Things
  • Reverse Engineering
Reverse Engineering a 5g ‘Bioshield’

6 Min Read

May 28, 2020
In Flight Entertainment System Security
  • Aviation Cyber Security
In Flight Entertainment System Security

5 Min Read

May 27, 2020
Docker Desktop for Windows PrivEsc (CVE-2020-11492)
  • Vulnerabilities and Disclosures
Docker Desktop for Windows PrivEsc (CVE-2020-11492)

7 Min Read

May 22, 2020
Ethical dilemmas with responsible disclosure
  • Vulnerabilities and Disclosures
Ethical dilemmas with responsible disclosure

7 Min Read

May 22, 2020
Short beacon analysis on the NHS iOS Tracking application
  • Macs / Apple
Short beacon analysis on the NHS iOS Tracking application

3 Min Read

May 12, 2020
Housemates. The new Red Team?
  • Red Teaming
Housemates. The new Red Team?

5 Min Read

May 06, 2020
How quickly can you respond?
  • Digital Forensics and Incident Response
How quickly can you respond?

6 Min Read

May 05, 2020
Speaking at security events
  • How Tos
Speaking at security events

10 Min Read

May 04, 2020
Jeopardising aircraft through TCAS spoofing
  • Aviation Cyber Security
Jeopardising aircraft through TCAS spoofing

6 Min Read

May 01, 2020
GDPR.EU has er… a data leakage issue
  • Vulnerabilities and Disclosures
GDPR.EU has er… a data leakage issue

3 Min Read

Apr 27, 2020
From a TCU to Corporate Domain Admin
  • Automotive Security
From a TCU to Corporate Domain Admin

3 Min Read

Apr 24, 2020
Are you cyber seaworthy?
  • Maritime Cyber Security
Are you cyber seaworthy?

9 Min Read

Apr 17, 2020
You can’t build a great IoT system without a strong foundation
  • Internet Of Things
You can’t build a great IoT system without a strong foundation

26 Min Read

Apr 17, 2020
SweetPotato – Service to SYSTEM
  • Red Teaming
SweetPotato – Service to SYSTEM

3 Min Read

Apr 14, 2020
Authenticating your call centre when everyone is remote
  • Red Teaming
Authenticating your call centre when everyone is remote

3 Min Read

Apr 06, 2020
Honeyroasting. How to detect Kerberoast breaches with honeypots
  • How Tos
Honeyroasting. How to detect Kerberoast breaches with honeypots

5 Min Read

Apr 01, 2020
Quick wins with Adobe Experience Manager
  • How Tos
Quick wins with Adobe Experience Manager

5 Min Read

Mar 27, 2020
Turning an OBD-II reader into a USB / NFC attack tool
  • Hardware Hacking
Turning an OBD-II reader into a USB / NFC attack tool

15 Min Read

Mar 25, 2020
Spying on old folks
  • Vulnerabilities and Disclosures
Spying on old folks

4 Min Read

Mar 23, 2020
PrivEsc in Lenovo Vantage. Two minutes later
  • Vulnerabilities and Disclosures
PrivEsc in Lenovo Vantage. Two minutes later

8 Min Read

Mar 20, 2020
Introduction to Bluetooth Low Energy
  • Hardware Hacking
Introduction to Bluetooth Low Energy

8 Min Read

Mar 12, 2020
9 things to consider when staff work from home unexpectedly
  • How Tos
9 things to consider when staff work from home unexpectedly

4 Min Read

Mar 10, 2020
1 2 3 4 5 6 … 10