Skip to main content
Burning down the house with IoT
  • Internet Of Things
Burning down the house with IoT

6 Min Read

Jul 12, 2019
Getting your head under the hood and out of the sand: Automotive security testing
  • Automotive Security
Getting your head under the hood and out of the sand: Automotive security testing

12 Min Read

Jul 05, 2019
Slok API
  • Vulnerability Advisory
Slok API

7 Min Read

Jul 03, 2019
The null choice. A social engineering example in the wild
  • Social Engineering
The null choice. A social engineering example in the wild

7 Min Read

Jul 02, 2019
Ninja Turtles in your network: LAN Turtle 3G. A how-to for red teaming
  • Red Teaming
Ninja Turtles in your network: LAN Turtle 3G. A how-to for red teaming

11 Min Read

Jul 01, 2019
  • Vulnerability Advisory
Don’t ‘Roley’ your own encryption, says Bob the Builder

5 Min Read

Jun 28, 2019
The not so ultra lock
  • Vulnerability Advisory
The not so ultra lock

6 Min Read

Jun 27, 2019
F5 Networks Endpoint Inspector – Browser-to-RCE?
  • Vulnerability Advisory
F5 Networks Endpoint Inspector – Browser-to-RCE?

5 Min Read

Jun 26, 2019
Double-Free RCE in VLC. A honggfuzz how-to
  • How Tos
Double-Free RCE in VLC. A honggfuzz how-to

26 Min Read

Jun 21, 2019
Why we shouldn’t use sequential booking references
  • Opinions
Why we shouldn’t use sequential booking references

3 Min Read

Jun 19, 2019
Ewon Flexy IoT Router. A Deep dive
  • OT, ICS, IIoT, SCADA
  • Security Blog
Ewon Flexy IoT Router. A Deep dive

26 Min Read

Jun 18, 2019
Sharing the Secrets: Pwning an industrial IoT router
  • OT, ICS, IIoT, SCADA
  • Security Blog
Sharing the Secrets: Pwning an industrial IoT router

5 Min Read

Jun 18, 2019
Covert Keylogging: Sniping your Typing
  • How Tos
Covert Keylogging: Sniping your Typing

12 Min Read

Jun 13, 2019
Bloodhound walkthrough. A Tool for Many Tradecrafts
  • Red Teaming
Bloodhound walkthrough. A Tool for Many Tradecrafts

19 Min Read

Jun 07, 2019
Don’t get burnt on pay day. How to buy IoT gadgets sensibly
  • Consumer Advice
Don’t get burnt on pay day. How to buy IoT gadgets sensibly

6 Min Read

May 31, 2019
Securing your red team kit with Uncomplicated Firewall
  • Red Teaming
Securing your red team kit with Uncomplicated Firewall

17 Min Read

May 29, 2019
Pwning the Nokelock API
  • Vulnerability Advisory
Pwning the Nokelock API

7 Min Read

May 24, 2019
Tesla Killer: The Fuzzed and the Furious
  • Automotive Security
Tesla Killer: The Fuzzed and the Furious

2 Min Read

May 16, 2019
FUD 101: How not to report healthcare cybersecurity issues
  • Medical Device Security
FUD 101: How not to report healthcare cybersecurity issues

3 Min Read

May 15, 2019
eyeDisk. Hacking the unhackable. Again
  • Vulnerability Advisory
eyeDisk. Hacking the unhackable. Again

12 Min Read

May 09, 2019
Pwning WordPress GraphQL
  • Vulnerability Advisory
Pwning WordPress GraphQL

4 Min Read

May 08, 2019
How To Do Firmware Analysis. Tools, Tips, and Tricks
  • How Tos
  • Security Blog
How To Do Firmware Analysis. Tools, Tips, and Tricks

27 Min Read

May 03, 2019
UK Government gets serious about consumer IoT security. Legislation on the way
  • Consumer Advice
UK Government gets serious about consumer IoT security. Legislation on the way

2 Min Read

May 01, 2019
Tic Toc Pwned
  • Internet Of Things
  • Security Blog
Tic Toc Pwned

9 Min Read

Apr 15, 2019
Cobalt Strike. Walkthrough for Red Teamers
  • Red Teaming
  • Security Blog
Cobalt Strike. Walkthrough for Red Teamers

22 Min Read

Apr 15, 2019
Hacking Superyachts. Advice for integrators
  • Maritime Cyber Security
  • Security Blog
Hacking Superyachts. Advice for integrators

5 Min Read

Apr 01, 2019
Hacking Superyachts. Advice for captains
  • Maritime Cyber Security
  • Security Blog
Hacking Superyachts. Advice for captains

6 Min Read

Apr 01, 2019
Hacking Superyachts. Advice for owners
  • Maritime Cyber Security
  • Security Blog
Hacking Superyachts. Advice for owners

4 Min Read

Apr 01, 2019
Business banking fraud. Keep your eggs in TWO baskets. Here’s why…
  • Opinions
  • Security Blog
Business banking fraud. Keep your eggs in TWO baskets. Here’s why…

3 Min Read

Mar 26, 2019
Remote command injection through an endpoint security product
  • Vulnerability Advisory
Remote command injection through an endpoint security product

6 Min Read

Mar 21, 2019
Connected camera cock up
  • Internet Of Things
  • Security Blog
Connected camera cock up

4 Min Read

Mar 20, 2019
Walkthrough. Investigating an SSD
  • How Tos
  • Security Blog
Walkthrough. Investigating an SSD

4 Min Read

Mar 15, 2019
Gone in six seconds? Exploiting car alarms
  • Automotive Security
  • Security Blog
Gone in six seconds? Exploiting car alarms

10 Min Read

Mar 08, 2019
Hacking ski helmet audio
  • Internet Of Things
  • Security Blog
Hacking ski helmet audio

3 Min Read

Mar 04, 2019
Cisco RV130 – It’s 2019, but yet: strcpy
  • Security Blog
  • Vulnerability Advisory
Cisco RV130 – It’s 2019, but yet: strcpy

8 Min Read

Feb 28, 2019
Different ‘smart’ lock, similar security issues
  • Internet Of Things
  • Security Blog
Different ‘smart’ lock, similar security issues

10 Min Read

Feb 18, 2019
Sinking a ship and hiding the evidence
  • Maritime Cyber Security
  • Security Blog
Sinking a ship and hiding the evidence

5 Min Read

Feb 18, 2019
Oracle MAF store bypass, a how-to
  • How Tos
  • Security Blog
Oracle MAF store bypass, a how-to

3 Min Read

Feb 15, 2019
Vulnerability disclosure buzzword bingo!
  • Security Blog
  • Vulnerability Disclosure
Vulnerability disclosure buzzword bingo!

5 Min Read

Feb 14, 2019
BBC Inside Out. Consumer advice for the ‘smart’ homeowner
  • Consumer Advice
  • Security Blog
BBC Inside Out. Consumer advice for the ‘smart’ homeowner

3 Min Read

Feb 11, 2019
Burp HMAC header extensions, a how-to
  • How Tos
  • Security Blog
Burp HMAC header extensions, a how-to

2 Min Read

Feb 07, 2019
Super-systemic IoT flaws
  • Internet Of Things
  • Security Blog
Super-systemic IoT flaws

3 Min Read

Feb 05, 2019
Hacking floating hotels. Cruise ship compromise on the high seas
  • Maritime Cyber Security
  • Security Blog
Hacking floating hotels. Cruise ship compromise on the high seas

7 Min Read

Jan 30, 2019
GPS watch issues… AGAIN
  • Internet Of Things
  • Security Blog
GPS watch issues… AGAIN

6 Min Read

Jan 29, 2019
IoT: OFF by default
  • Internet Of Things
  • Security Blog
IoT: OFF by default

4 Min Read

Jan 11, 2019
Shipping operators, what you need to know about phishing and CEO fraud
  • Maritime Cyber Security
  • Security Blog
Shipping operators, what you need to know about phishing and CEO fraud

5 Min Read

Jan 08, 2019
Hacking the Echo echo echo
  • Internet Of Things
  • Security Blog
Hacking the Echo echo echo

4 Min Read

Jan 02, 2019
Hackers in Hot Water. Pwning smart hot tubs, yes really
  • Internet Of Things
  • Security Blog
Hackers in Hot Water. Pwning smart hot tubs, yes really

6 Min Read

Dec 22, 2018
Satellite communications equipment security
  • Maritime Cyber Security
  • Security Blog
Satellite communications equipment security

8 Min Read

Dec 13, 2018
Worried about Spouseware?
  • Consumer Advice
  • Security Blog
Worried about Spouseware?

3 Min Read

Dec 05, 2018
BBC: MiSafes’ child-tracking smartwatches are ‘easy to hack’
  • Consumer Advice
  • Security Blog
BBC: MiSafes’ child-tracking smartwatches are ‘easy to hack’

1 Min Read

Nov 26, 2018
  • Consumer Advice
  • Security Blog
ITV: New rules to prevent children’s ‘smart’ toys from being hacked

1 Min Read

Nov 26, 2018
Advice on buying ‘smart’ gadgets for Christmas
  • Consumer Advice
  • Security Blog
Advice on buying ‘smart’ gadgets for Christmas

5 Min Read

Nov 21, 2018
Consumer Advice: Kids GPS tracker watch security
  • Consumer Advice
  • Security Blog
Consumer Advice: Kids GPS tracker watch security

2 Min Read

Nov 15, 2018
Tracking and snooping on a million kids
  • Internet Of Things
  • Security Blog
Tracking and snooping on a million kids

6 Min Read

Nov 15, 2018
Flogging a dead smart horse
  • Internet Of Things
  • Security Blog
Flogging a dead smart horse

2 Min Read

Nov 09, 2018
No need for lock picking tools
  • How Tos
  • Security Blog
No need for lock picking tools

2 Min Read

Nov 02, 2018
Ghost hardware. Device No.1, the Ghost Pro
  • Security Blog
Ghost hardware. Device No.1, the Ghost Pro

11 Min Read

Oct 31, 2018
Ghost hardware. Device No.3, the Ghost Rover
  • Internet Of Things
  • Security Blog
Ghost hardware. Device No.3, the Ghost Rover

6 Min Read

Oct 31, 2018
Ghost hardware. Device No.2, the Boo Buddy
  • Security Blog
Ghost hardware. Device No.2, the Boo Buddy

6 Min Read

Oct 31, 2018
Hacking ghost hunters
  • Internet Of Things
  • Security Blog
Hacking ghost hunters

5 Min Read

Oct 30, 2018
Cisco device config dumping
  • How Tos
  • Security Blog
Cisco device config dumping

4 Min Read

Oct 26, 2018
Time Travel Debugging: finding Windows GDI flaws
  • Vulnerability Advisory
Time Travel Debugging: finding Windows GDI flaws

29 Min Read

Oct 10, 2018
‘Secure by Design’ & SB-327. Standards for a secure IoT?
  • Internet Of Things
  • Security Blog
‘Secure by Design’ & SB-327. Standards for a secure IoT?

4 Min Read

Oct 09, 2018
Smart male chastity lock cock-up – plot thickening
  • Internet Of Things
  • Security Blog
Smart male chastity lock cock-up – plot thickening

2 Min Read

Oct 09, 2018
Which? Magazine recommends vulnerable smart home camera
  • Internet Of Things
  • Security Blog
Which? Magazine recommends vulnerable smart home camera

4 Min Read

Oct 08, 2018
Running a security awareness program
  • How Tos
  • Security Blog
Running a security awareness program

8 Min Read

Oct 01, 2018
Speaking at TEDx
  • Internet Of Things
  • Security Blog
Speaking at TEDx

4 Min Read

Sep 28, 2018
Container theft, the legal system and poor maritime security
  • Maritime Cyber Security
  • Security Blog
Container theft, the legal system and poor maritime security

8 Min Read

Sep 21, 2018
Hacking AIS
  • Maritime Cyber Security
  • Security Blog
Hacking AIS

5 Min Read

Sep 18, 2018
Hacking an assault tank… A Nerf one
  • Internet Of Things
Hacking an assault tank… A Nerf one

10 Min Read

Sep 13, 2018
Automotive theft affects shipping security
  • Maritime Cyber Security
  • Security Blog
Automotive theft affects shipping security

5 Min Read

Sep 07, 2018
Smart Locks: Dumb Security
  • Internet Of Things
  • Security Blog
Smart Locks: Dumb Security

4 Min Read

Aug 31, 2018
Smart Lock Security: Interview with hardware.io
  • Internet Of Things
  • Security Blog
Smart Lock Security: Interview with hardware.io

1 Min Read

Aug 30, 2018
PTP, IoT & the Norwegian Government
  • Internet Of Things
  • Security Blog
PTP, IoT & the Norwegian Government

6 Min Read

Aug 15, 2018
Hacking the Bitfi Part 5: MITM transactions
  • Opinions
  • Security Blog
Hacking the Bitfi Part 5: MITM transactions

2 Min Read

Aug 14, 2018
Bitfi research receives Pwnie Award for ‘lamest vendor response’
  • Opinions
  • Security Blog
Bitfi research receives Pwnie Award for ‘lamest vendor response’

3 Min Read

Aug 09, 2018
Tamper proofing review: the iZettle card payment terminal
  • How Tos
  • Opinions
  • Security Blog
Tamper proofing review: the iZettle card payment terminal

5 Min Read

Aug 08, 2018
Copycat Kali, with mykali for Kali Linux
  • How Tos
  • Security Blog
Copycat Kali, with mykali for Kali Linux

3 Min Read

Aug 07, 2018
Hacking the Bitfi Part 3: The device with no storage
  • Opinions
  • Security Blog
Hacking the Bitfi Part 3: The device with no storage

2 Min Read

Aug 03, 2018
COSCO incident. Phishing frenzy and exploding goods?
  • Maritime Cyber Security
  • Security Blog
COSCO incident. Phishing frenzy and exploding goods?

3 Min Read

Aug 03, 2018
Hacking the Bitfi. Part 2: John McAfee’s video
  • Opinions
  • Security Blog
Hacking the Bitfi. Part 2: John McAfee’s video

6 Min Read

Aug 02, 2018
Hacking the Bitfi. Part 1
  • Opinions
  • Security Blog
Hacking the Bitfi. Part 1

3 Min Read

Jul 31, 2018
“Unhackable” Bitfi crypto wallet. What’s all the fuss about?
  • Opinions
  • Security Blog
“Unhackable” Bitfi crypto wallet. What’s all the fuss about?

3 Min Read

Jul 30, 2018
Security Alarm Round-up
  • Internet Of Things
  • Security Blog
Security Alarm Round-up

3 Min Read

Jul 30, 2018
FLIR FX / Lorex video stream hijack: Disclosure train wreck
  • Internet Of Things
  • Security Blog
FLIR FX / Lorex video stream hijack: Disclosure train wreck

3 Min Read

Jul 26, 2018
Hacking Swann & FLIR/Lorex home security camera video
  • Internet Of Things
  • Security Blog
Hacking Swann & FLIR/Lorex home security camera video

9 Min Read

Jul 26, 2018
Bluetooth vuln CVE-2018-5383 explained
  • Security Blog
  • Vulnerability Advisory
Bluetooth vuln CVE-2018-5383 explained

2 Min Read

Jul 24, 2018
EU Cybersecurity Act IoT FAIL
  • Internet Of Things
  • Security Blog
EU Cybersecurity Act IoT FAIL

2 Min Read

Jul 19, 2018
Data exfiltration techniques
  • How Tos
  • Security Blog
Data exfiltration techniques

8 Min Read

Jul 11, 2018
Breaking up is hard to do… with IoT
  • Internet Of Things
  • Security Blog
Breaking up is hard to do… with IoT

6 Min Read

Jul 06, 2018
Hacking Navtex maritime warning messages
  • Maritime Cyber Security
  • Security Blog
Hacking Navtex maritime warning messages

5 Min Read

Jul 03, 2018
Hacking Serial Networks on Ships
  • Maritime Cyber Security
  • Security Blog
Hacking Serial Networks on Ships

4 Min Read

Jun 25, 2018
Hardware reverse engineering. A tale from the workbench
  • Reverse Engineering
  • Security Blog
Hardware reverse engineering. A tale from the workbench

6 Min Read

Jun 22, 2018
  • How Tos
  • Security Blog
Windows Server settings. Administrative Templates – Network Items. A security how-to

22 Min Read

Jun 21, 2018
Totally Pwning the Tapplock (the API way)
  • Internet Of Things
  • Security Blog
Totally Pwning the Tapplock (the API way)

2 Min Read

Jun 15, 2018
Totally Pwning the Tapplock Smart Lock
  • Internet Of Things
  • Security Blog
Totally Pwning the Tapplock Smart Lock

10 Min Read

Jun 13, 2018
Hacking, tracking, stealing and sinking ships
  • Maritime Cyber Security
  • Security Blog
Hacking, tracking, stealing and sinking ships

6 Min Read

Jun 04, 2018
So, you just caused a data breach, by CCing the wrong person in an email…
  • How Tos
  • Security Blog
So, you just caused a data breach, by CCing the wrong person in an email…

4 Min Read

Jun 01, 2018
Z-Shave. Exploiting Z-Wave downgrade attacks
  • Internet Of Things
  • Security Blog
Z-Shave. Exploiting Z-Wave downgrade attacks

12 Min Read

May 23, 2018
1 … 3 4 5 6 7 … 10