Skip to main content
EFB Tampering 2. Device Integrity
  • Aviation Cyber Security
  • Security Blog
EFB Tampering 2. Device Integrity

7 Min Read

Apr 19, 2021
Security vs User Journey
  • How Tos
  • Security Blog
Security vs User Journey

5 Min Read

Apr 16, 2021
Dumping LSASS in memory undetected using MirrorDump
  • Red Teaming
  • Security Blog
Dumping LSASS in memory undetected using MirrorDump

10 Min Read

Mar 26, 2021
Multi-factor Authentication. Reset MFA you say?
  • Red Teaming
  • Security Blog
Multi-factor Authentication. Reset MFA you say?

3 Min Read

Mar 22, 2021
Out of cyber class. Maritime compliance.
  • Maritime Cyber Security
  • Security Blog
Out of cyber class. Maritime compliance.

7 Min Read

Mar 15, 2021
Is IoT ever really yours?
  • Internet Of Things
  • Security Blog
Is IoT ever really yours?

6 Min Read

Mar 08, 2021
EFB Tampering 1. Introduction and Class Differences
  • Aviation Cyber Security
  • Security Blog
EFB Tampering 1. Introduction and Class Differences

10 Min Read

Mar 05, 2021
Grid. Locked.
  • OT, ICS, IIoT, SCADA
  • Security Blog
Grid. Locked.

6 Min Read

Mar 04, 2021
Feature and Permission Policies. Security issues
  • How Tos
  • Security Blog
Feature and Permission Policies. Security issues

8 Min Read

Feb 23, 2021
K&R insurance. Kidnap and Ransom(ware)
  • Cyber Liability Insurance
K&R insurance. Kidnap and Ransom(ware)

3 Min Read

Feb 22, 2021
Reverse Engineering Keys from Firmware. A how-to
  • Reverse Engineering
  • Security Blog
Reverse Engineering Keys from Firmware. A how-to

9 Min Read

Feb 08, 2021
Email Relaying. A how-to and a reminder
  • Red Teaming
  • Security Blog
Email Relaying. A how-to and a reminder

8 Min Read

Feb 05, 2021
Cyber Essentials and the New Normal
  • GRC Consultancy Advice
  • Security Blog
Cyber Essentials and the New Normal

5 Min Read

Jan 26, 2021
Three Word Passwords
  • Passwords
  • Security Blog
Three Word Passwords

5 Min Read

Jan 19, 2021
Cyber Security advice for Finance staff
  • How Tos
  • Security Blog
Cyber Security advice for Finance staff

7 Min Read

Jan 15, 2021
Azure AD. Attack of the Default Config
  • Cloud Security
  • Security Blog
Azure AD. Attack of the Default Config

9 Min Read

Jan 12, 2021
Where maritime cyber checklists fail
  • Maritime Cyber Security
  • Security Blog
Where maritime cyber checklists fail

4 Min Read

Jan 11, 2021
Schneider T200 RTU vulnerabilities
  • OT, ICS, IIoT, SCADA
  • Security Blog
Schneider T200 RTU vulnerabilities

5 Min Read

Jan 07, 2021
How to make a software BTRFS RAID1 with LUKS2 FDE
  • How Tos
  • Security Blog
How to make a software BTRFS RAID1 with LUKS2 FDE

7 Min Read

Dec 22, 2020
How to use Keepalived for high availability and load balancing
  • How Tos
  • Security Blog
How to use Keepalived for high availability and load balancing

22 Min Read

Dec 22, 2020
A Logical Volume Manager / LVM primer for Linux
  • How Tos
  • Security Blog
A Logical Volume Manager / LVM primer for Linux

10 Min Read

Dec 21, 2020
Mimosa Cloud. Invite friends, not hackers
  • Security Blog
  • Vulnerabilities and Disclosures
Mimosa Cloud. Invite friends, not hackers

4 Min Read

Dec 21, 2020
Serious Vulnerabilities in Dualog Connection Suite
  • Security Blog
  • Vulnerabilities and Disclosures
Serious Vulnerabilities in Dualog Connection Suite

8 Min Read

Dec 10, 2020
Locking down your cyber life in lockdown
  • Consumer Advice
  • Security Blog
Locking down your cyber life in lockdown

7 Min Read

Dec 04, 2020
What the cluck?! Cyber hygiene when eating out.
  • Consumer Advice
  • Security Blog
What the cluck?! Cyber hygiene when eating out.

5 Min Read

Dec 02, 2020
Understanding Binary and Data Representation with CyberChef
  • How Tos
  • Security Blog
Understanding Binary and Data Representation with CyberChef

8 Min Read

Nov 24, 2020
OBDeleven vulnerability
  • Automotive Security
  • Security Blog
OBDeleven vulnerability

4 Min Read

Nov 18, 2020
Brute forcing device passwords
  • How Tos
  • Security Blog
Brute forcing device passwords

11 Min Read

Nov 16, 2020
Digital Forensics acquisition
  • Digital Forensics and Incident Response
  • Security Blog
Digital Forensics acquisition

3 Min Read

Nov 14, 2020
Snakes and Ladder Logic
  • OT, ICS, IIoT, SCADA
  • Security Blog
Snakes and Ladder Logic

4 Min Read

Nov 10, 2020
Password choice
  • Red Teaming
  • Security Blog
Password choice

5 Min Read

Nov 06, 2020
Abusing RDP’s Remote Credential Guard with Rubeus PTT
  • Red Teaming
  • Security Blog
Abusing RDP’s Remote Credential Guard with Rubeus PTT

14 Min Read

Oct 22, 2020
Cyber Security Month. What can you do?
  • How Tos
  • Security Blog
Cyber Security Month. What can you do?

7 Min Read

Oct 08, 2020
Smart male chastity lock cock-up
  • Internet Of Things
  • Security Blog
Smart male chastity lock cock-up

10 Min Read

Oct 06, 2020
DLL Hijacking in NVIDIA SMI
  • Red Teaming
  • Vulnerabilities and Disclosures
DLL Hijacking in NVIDIA SMI

3 Min Read

Oct 01, 2020
Cloud-y, with a chance of hacking all the wireless things
  • Security Blog
  • Vulnerabilities and Disclosures
Cloud-y, with a chance of hacking all the wireless things

3 Min Read

Sep 29, 2020
CVE-2020-1472/Zerologon. As an IT manager should I worry?
  • How Tos
  • Security Blog
CVE-2020-1472/Zerologon. As an IT manager should I worry?

4 Min Read

Sep 23, 2020
The Return of Raining SYSTEM Shells with Citrix Workspace app
  • Red Teaming
  • Security Blog
The Return of Raining SYSTEM Shells with Citrix Workspace app

11 Min Read

Sep 21, 2020
Speed 2 – The Poseidon Adventure – Part Two
  • Maritime Cyber Security
  • Security Blog
Speed 2 – The Poseidon Adventure – Part Two

10 Min Read

Sep 17, 2020
Consumer advice: Giggle vulnerability
  • Consumer Advice
  • Security Blog
Consumer advice: Giggle vulnerability

7 Min Read

Sep 14, 2020
360lock Smart Lock Review
  • Internet Of Things
  • Security Blog
360lock Smart Lock Review

7 Min Read

Sep 11, 2020
Speed 2 – The Poseidon Adventure – Part One
  • Maritime Cyber Security
  • Security Blog
Speed 2 – The Poseidon Adventure – Part One

14 Min Read

Sep 08, 2020
Cloud firewall management API SNAFU put 500k SonicWall customers at risk
  • Security Blog
  • Vulnerabilities and Disclosures
Cloud firewall management API SNAFU put 500k SonicWall customers at risk

65 Min Read

Sep 02, 2020
A Vulnerability Disclosure Program is not just a page on a web site
  • Security Blog
  • Vulnerabilities and Disclosures
A Vulnerability Disclosure Program is not just a page on a web site

5 Min Read

Aug 26, 2020
Scanning for UK gov security.txt files
  • How Tos
  • Security Blog
Scanning for UK gov security.txt files

5 Min Read

Aug 26, 2020
Breaking Samsung firmware, or turning your S8/S9/S10 into a DIY “Proxmark”
  • Hardware Hacking
  • Security Blog
Breaking Samsung firmware, or turning your S8/S9/S10 into a DIY “Proxmark”

35 Min Read

Aug 18, 2020
DEF CON 28: 747 Walkthrough from a Hacker’s Perspective
  • Aviation Cyber Security
  • Security Blog
DEF CON 28: 747 Walkthrough from a Hacker’s Perspective

24 Min Read

Aug 12, 2020
DEF CON 28: ILS and TCAS Spoofing
  • Aviation Cyber Security
  • Security Blog
DEF CON 28: ILS and TCAS Spoofing

6 Min Read

Aug 11, 2020
DEF CON 28: Introduction to ACARS
  • Aviation Cyber Security
  • Security Blog
DEF CON 28: Introduction to ACARS

19 Min Read

Aug 10, 2020
Security Awareness is as valuable today as ever
  • How Tos
  • Security Blog
Security Awareness is as valuable today as ever

6 Min Read

Aug 07, 2020
Building a lab with Server 2019 Server Core and PowerShell …then attacking it!
  • How Tos
  • Security Blog
Building a lab with Server 2019 Server Core and PowerShell …then attacking it!

22 Min Read

Aug 03, 2020
Raining SYSTEM Shells with Citrix Workspace app
  • Security Blog
  • Vulnerabilities and Disclosures
Raining SYSTEM Shells with Citrix Workspace app

15 Min Read

Jul 21, 2020
Threat modelling and IoT hubs
  • Internet Of Things
  • Security Blog
Threat modelling and IoT hubs

8 Min Read

Jul 17, 2020
Bridging the gaps between Red and Blue teaming
  • Red Teaming
  • Security Blog
Bridging the gaps between Red and Blue teaming

7 Min Read

Jul 13, 2020
Hacking smart devices to convince dementia sufferers to overdose
  • Internet Of Things
  • Security Blog
Hacking smart devices to convince dementia sufferers to overdose

11 Min Read

Jul 09, 2020
Patchless AMSI bypass using SharpBlock
  • Red Teaming
  • Security Blog
Patchless AMSI bypass using SharpBlock

6 Min Read

Jul 07, 2020
Pwning smart garage door openers
  • Internet Of Things
  • Security Blog
Pwning smart garage door openers

9 Min Read

Jul 07, 2020
Identity in IoT
  • Internet Of Things
  • Security Blog
Identity in IoT

8 Min Read

Jul 01, 2020
What an IoT assurance scheme could look like
  • Internet Of Things
  • Security Blog
What an IoT assurance scheme could look like

7 Min Read

Jun 30, 2020
Scams and how to spot them
  • How Tos
  • Security Blog
Scams and how to spot them

5 Min Read

Jun 30, 2020
Congrats, you got everyone remote. But did you do it securely?
  • How Tos
  • Security Blog
Congrats, you got everyone remote. But did you do it securely?

4 Min Read

Jun 29, 2020
Embedded security fails in ICS
  • OT, ICS, IIoT, SCADA
  • Security Blog
Embedded security fails in ICS

5 Min Read

Jun 17, 2020
Revisiting old tools
  • How Tos
  • Security Blog
Revisiting old tools

4 Min Read

Jun 12, 2020
A cyber warning light. The canary in the mine
  • Opinions
  • Security Blog
A cyber warning light. The canary in the mine

5 Min Read

Jun 11, 2020
Unclamping the Barnacle
  • Internet Of Things
  • Security Blog
Unclamping the Barnacle

4 Min Read

Jun 04, 2020
Introduction to PLCs and Ladder Logic
  • OT, ICS, IIoT, SCADA
  • Security Blog
Introduction to PLCs and Ladder Logic

14 Min Read

Jun 01, 2020
Reverse Engineering a 5g ‘Bioshield’
  • Reverse Engineering
  • Security Blog
Reverse Engineering a 5g ‘Bioshield’

6 Min Read

May 28, 2020
In Flight Entertainment System Security
  • Aviation Cyber Security
  • Security Blog
In Flight Entertainment System Security

5 Min Read

May 27, 2020
Docker Desktop for Windows PrivEsc (CVE-2020-11492)
  • Security Blog
  • Vulnerabilities and Disclosures
Docker Desktop for Windows PrivEsc (CVE-2020-11492)

7 Min Read

May 22, 2020
Ethical dilemmas with responsible disclosure
  • Security Blog
  • Vulnerabilities and Disclosures
Ethical dilemmas with responsible disclosure

7 Min Read

May 22, 2020
Short beacon analysis on the NHS iOS Tracking application
  • Macs / Apple
  • Security Blog
Short beacon analysis on the NHS iOS Tracking application

3 Min Read

May 12, 2020
Housemates. The new Red Team?
  • Red Teaming
  • Security Blog
Housemates. The new Red Team?

5 Min Read

May 06, 2020
How quickly can you respond?
  • Digital Forensics and Incident Response
  • Security Blog
How quickly can you respond?

6 Min Read

May 05, 2020
Speaking at security events
  • How Tos
  • Security Blog
Speaking at security events

10 Min Read

May 04, 2020
Jeopardising aircraft through TCAS spoofing
  • Aviation Cyber Security
  • Security Blog
Jeopardising aircraft through TCAS spoofing

6 Min Read

May 01, 2020
GDPR.EU has er… a data leakage issue
  • Security Blog
  • Vulnerabilities and Disclosures
GDPR.EU has er… a data leakage issue

3 Min Read

Apr 27, 2020
From a TCU to Corporate Domain Admin
  • Automotive Security
  • Security Blog
From a TCU to Corporate Domain Admin

3 Min Read

Apr 24, 2020
Are you cyber seaworthy?
  • Maritime Cyber Security
  • Security Blog
Are you cyber seaworthy?

9 Min Read

Apr 17, 2020
You can’t build a great IoT system without a strong foundation
  • Internet Of Things
  • Security Blog
You can’t build a great IoT system without a strong foundation

26 Min Read

Apr 17, 2020
SweetPotato – Service to SYSTEM
  • Red Teaming
  • Security Blog
SweetPotato – Service to SYSTEM

3 Min Read

Apr 14, 2020
Authenticating your call centre when everyone is remote
  • Red Teaming
  • Security Blog
Authenticating your call centre when everyone is remote

3 Min Read

Apr 06, 2020
Honeyroasting. How to detect Kerberoast breaches with honeypots
  • How Tos
  • Security Blog
Honeyroasting. How to detect Kerberoast breaches with honeypots

5 Min Read

Apr 01, 2020
Quick wins with Adobe Experience Manager
  • How Tos
  • Security Blog
Quick wins with Adobe Experience Manager

5 Min Read

Mar 27, 2020
Turning an OBD-II reader into a USB / NFC attack tool
  • Hardware Hacking
  • Security Blog
Turning an OBD-II reader into a USB / NFC attack tool

15 Min Read

Mar 25, 2020
Spying on old folks
  • Security Blog
  • Vulnerabilities and Disclosures
Spying on old folks

4 Min Read

Mar 23, 2020
PrivEsc in Lenovo Vantage. Two minutes later
  • Security Blog
  • Vulnerabilities and Disclosures
PrivEsc in Lenovo Vantage. Two minutes later

8 Min Read

Mar 20, 2020
Introduction to Bluetooth Low Energy
  • Hardware Hacking
  • Security Blog
Introduction to Bluetooth Low Energy

8 Min Read

Mar 12, 2020
9 things to consider when staff work from home unexpectedly
  • How Tos
  • Security Blog
9 things to consider when staff work from home unexpectedly

4 Min Read

Mar 10, 2020
Hardware Router CTF
  • Hardware Hacking
  • Security Blog
Hardware Router CTF

14 Min Read

Mar 10, 2020
Fill your Boots with credential stuffing protections
  • Passwords
  • Security Blog
Fill your Boots with credential stuffing protections

5 Min Read

Mar 06, 2020
A not so Clearview?
  • Security Blog
A not so Clearview?

3 Min Read

Mar 04, 2020
From Minecraft to Metasploit. Game hacking could start your cyber security career
  • How Tos
  • Security Blog
From Minecraft to Metasploit. Game hacking could start your cyber security career

5 Min Read

Mar 03, 2020
Hardcoding Keys. Is that Wyse?
  • Reverse Engineering
  • Security Blog
Hardcoding Keys. Is that Wyse?

3 Min Read

Feb 25, 2020
Ships can’t be hacked. Wrong
  • Maritime Cyber Security
  • Security Blog
Ships can’t be hacked. Wrong

10 Min Read

Feb 20, 2020
Out Of Band, Out Of Sight, Out Of Mind
  • Maritime Cyber Security
  • Security Blog
Out Of Band, Out Of Sight, Out Of Mind

4 Min Read

Feb 17, 2020
Business Email Compromise. What to do
  • How Tos
  • Security Blog
Business Email Compromise. What to do

6 Min Read

Feb 14, 2020
Reverse Engineering the Tesla Firmware Update Process
  • Automotive Security
Reverse Engineering the Tesla Firmware Update Process

44 Min Read

Feb 12, 2020
Reverse Engineering Tesla Hardware
  • Automotive Security
  • Security Blog
Reverse Engineering Tesla Hardware

16 Min Read

Feb 12, 2020
Password managers for all staff. Why the resistance?!
  • Passwords
  • Security Blog
Password managers for all staff. Why the resistance?!

6 Min Read

Feb 10, 2020
2×4 Security
  • PCI Advice
  • Security Blog
2×4 Security

3 Min Read

Feb 07, 2020
1 2 3 4 5 6 … 10