Skip to main content
You can have your cookie and eat it!
  • Opinions
  • Security Blog
You can have your cookie and eat it!

3 Min Read

Mar 03, 2017
CloudPets data breach
  • Consumer Advice
  • Internet Of Things
  • Security Blog
CloudPets data breach

2 Min Read

Feb 28, 2017
Pathway to driverless cars. UK law and liability.
  • Automotive Security
  • Security Blog
Pathway to driverless cars. UK law and liability.

1 Min Read

Feb 27, 2017
PTP brief UK Government on Cyber Security and call for IoT legislation
  • Opinions
  • Security Blog
PTP brief UK Government on Cyber Security and call for IoT legislation

1 Min Read

Feb 23, 2017
MyFriendCayla banned. Are all listening Bluetooth devices set for the bin?
  • Internet Of Things
  • Security Blog
MyFriendCayla banned. Are all listening Bluetooth devices set for the bin?

3 Min Read

Feb 21, 2017
Our Friend Cayla: No Longer Welcome in Germany!
  • Internet Of Things
  • Security Blog
Our Friend Cayla: No Longer Welcome in Germany!

3 Min Read

Feb 17, 2017
Help users spot phishing. Tag fake “internal” emails for them
  • How Tos
  • Security Blog
Help users spot phishing. Tag fake “internal” emails for them

3 Min Read

Feb 16, 2017
Screw Cayla: Use Chromecast for rogue Amazon Echo voice control!
  • Internet Of Things
  • Security Blog
Screw Cayla: Use Chromecast for rogue Amazon Echo voice control!

5 Min Read

Feb 14, 2017
Secure all the things with other things via the Blockchain!
  • Blockchain
  • Internet Of Things
  • Security Blog
Secure all the things with other things via the Blockchain!

6 Min Read

Feb 10, 2017
End of the line, Internet of Things
  • Internet Of Things
  • Security Blog
End of the line, Internet of Things

4 Min Read

Feb 02, 2017
How to avoid blowing your privacy online
  • Consumer Advice
  • How Tos
  • Internet Of Things
  • Security Blog
How to avoid blowing your privacy online

8 Min Read

Jan 25, 2017
Leaked DVR creds added to the IoT Fail list
  • Internet Of Things
  • Security Blog
Leaked DVR creds added to the IoT Fail list

3 Min Read

Jan 11, 2017
Who wants a hairbrush that’s connected to the internet?
  • Internet Of Things
  • Security Blog
Who wants a hairbrush that’s connected to the internet?

2 Min Read

Jan 06, 2017
Edimax Wi-Fi Extender can disclose your WPA key
  • Internet Of Things
  • Security Blog
  • Vulnerability Advisory
Edimax Wi-Fi Extender can disclose your WPA key

3 Min Read

Jan 06, 2017
Christmas lights. Festive security issues?
  • Internet Of Things
  • Security Blog
Christmas lights. Festive security issues?

3 Min Read

Jan 05, 2017
BMW integrates Alexa / Echo. Did I read that right?!
  • Automotive Security
  • Security Blog
BMW integrates Alexa / Echo. Did I read that right?!

2 Min Read

Dec 16, 2016
Just in time for Christmas- the Cayla reminder
  • Internet Of Things
  • Security Blog
Just in time for Christmas- the Cayla reminder

1 Min Read

Dec 16, 2016
TalkTalk router hack. Consumers, what should you do?
  • In the news
  • Internet Of Things
  • Security Blog
TalkTalk router hack. Consumers, what should you do?

4 Min Read

Dec 07, 2016
IoT Encryption: The challenge of missing entropy
  • Internet Of Things
  • Security Blog
IoT Encryption: The challenge of missing entropy

5 Min Read

Dec 07, 2016
My Friend Cayla wakes up and smells the lawsuits
  • Internet Of Things
  • Security Blog
My Friend Cayla wakes up and smells the lawsuits

2 Min Read

Dec 06, 2016
TalkTalk and other ISPs need to replace customer routers urgently
  • Internet Of Things
  • Security Blog
TalkTalk and other ISPs need to replace customer routers urgently

3 Min Read

Dec 03, 2016
TR-064 worm. It’s not Mirai and the outages are interesting
  • Internet Of Things
  • Security Blog
TR-064 worm. It’s not Mirai and the outages are interesting

3 Min Read

Dec 02, 2016
Password stuffing: How to avoid breaches from password re-use
  • Passwords
  • Security Blog
Password stuffing: How to avoid breaches from password re-use

5 Min Read

Nov 30, 2016
Can Linux really be owned by holding the Enter key?
  • Internet Of Things
  • Opinions
  • Security Blog
Can Linux really be owned by holding the Enter key?

2 Min Read

Nov 16, 2016
Netgear EX7000 Wi-Fi Range Extender. Minor XSS and Poor Password Handling
  • Security Blog
  • Vulnerability Advisory
Netgear EX7000 Wi-Fi Range Extender. Minor XSS and Poor Password Handling

3 Min Read

Nov 15, 2016
Filling in gaps in Mirai. It’s about DVRs, not cameras
  • Internet Of Things
  • Security Blog
Filling in gaps in Mirai. It’s about DVRs, not cameras

4 Min Read

Nov 11, 2016
Can’t get data onto that machine? Download a tunnel client over DNS
  • How Tos
  • Security Blog
Can’t get data onto that machine? Download a tunnel client over DNS

8 Min Read

Nov 10, 2016
The Wi-Fi enabled LG air conditioner
  • Internet Of Things
  • Security Blog
The Wi-Fi enabled LG air conditioner

5 Min Read

Nov 08, 2016
Scripting Metasploit to exploit a group of hosts. A how-to.
  • How Tos
  • Security Blog
Scripting Metasploit to exploit a group of hosts. A how-to.

3 Min Read

Nov 04, 2016
What is Mirai? The malware explained
  • Internet Of Things
  • Security Blog
What is Mirai? The malware explained

6 Min Read

Nov 03, 2016
Too little, too late. IoT vendors wake up and smell the coffee. …and the lawsuits
  • Internet Of Things
  • Security Blog
Too little, too late. IoT vendors wake up and smell the coffee. …and the lawsuits

4 Min Read

Oct 27, 2016
Smart Fridge. Dumb idea?
  • Internet Of Things
  • Security Blog
Smart Fridge. Dumb idea?

3 Min Read

Oct 21, 2016
A “Neet” CSRF to Reverse Shell in Wi-Fi music streamer
  • Security Blog
  • Vulnerability Advisory
A “Neet” CSRF to Reverse Shell in Wi-Fi music streamer

8 Min Read

Oct 13, 2016
Optimising Mirai: A better IoT DDoS botnet?
  • Internet Of Things
  • Security Blog
Optimising Mirai: A better IoT DDoS botnet?

6 Min Read

Oct 06, 2016
Yet another vulnerability in the Smarter Wi-Fi Kettle
  • Internet Of Things
  • Security Blog
Yet another vulnerability in the Smarter Wi-Fi Kettle

2 Min Read

Oct 06, 2016
IoT DDoS – we haven’t seen the half of it yet. Nor have utilities…
  • Internet Of Things
  • Security Blog
IoT DDoS – we haven’t seen the half of it yet. Nor have utilities…

4 Min Read

Sep 27, 2016
ASUS RT-AC66U router. A couple of bug fixes
  • How Tos
  • Security Blog
ASUS RT-AC66U router. A couple of bug fixes

3 Min Read

Sep 27, 2016
Attacking Android through custom updates
  • Android
  • Security Blog
Attacking Android through custom updates

6 Min Read

Sep 20, 2016
BT Wi-Fi Extender. Multiple security issues. Upgrade ASAP
  • Security Blog
  • Vulnerability Advisory
BT Wi-Fi Extender. Multiple security issues. Upgrade ASAP

6 Min Read

Sep 19, 2016
Argos MyTablet FUBAR
  • Android
  • Security Blog
Argos MyTablet FUBAR

2 Min Read

Sep 09, 2016
CSRFing Facebook games
  • How Tos
  • Security Blog
CSRFing Facebook games

6 Min Read

Sep 07, 2016
All your video are belong to us part 3. The D-Link 932L webcam
  • Internet Of Things
  • Security Blog
All your video are belong to us part 3. The D-Link 932L webcam

3 Min Read

Sep 05, 2016
Sandbox vuln in Tales of Maj’Eyal
  • Security Blog
  • Vulnerability Advisory
Sandbox vuln in Tales of Maj’Eyal

3 Min Read

Sep 05, 2016
How to abuse SSH keys
  • How Tos
  • Security Blog
How to abuse SSH keys

5 Min Read

Aug 31, 2016
Stupidly insecure electronic / RFID door lock
  • Internet Of Things
  • Security Blog
Stupidly insecure electronic / RFID door lock

1 Min Read

Aug 19, 2016
wigle.net suppresses Mitsubishi Outlander Wi-Fi hits
  • Automotive Security
  • Security Blog
wigle.net suppresses Mitsubishi Outlander Wi-Fi hits

2 Min Read

Aug 11, 2016
Samsung’s smart camera. A tale of IoT & network security
  • Internet Of Things
  • Security Blog
Samsung’s smart camera. A tale of IoT & network security

10 Min Read

Aug 11, 2016
Thermostat Ransomware: a lesson in IoT security
  • Internet Of Things
  • Security Blog
Thermostat Ransomware: a lesson in IoT security

6 Min Read

Aug 08, 2016
Smarter Coffee machines still being found unconfigured
  • Internet Of Things
  • Security Blog
Smarter Coffee machines still being found unconfigured

2 Min Read

Jul 19, 2016
XSS in SAP BI Documents
  • Security Blog
  • Vulnerability Advisory
XSS in SAP BI Documents

1 Min Read

Jul 12, 2016
Home security camera isn’t secure. SpotCam in the spotlight
  • Internet Of Things
  • Security Blog
Home security camera isn’t secure. SpotCam in the spotlight

5 Min Read

Jul 07, 2016
Symantec endpoint protection. Update now!
  • Security Blog
  • Vulnerability Advisory
Symantec endpoint protection. Update now!

1 Min Read

Jul 06, 2016
Alarm systems alarmingly insecure. Oh the irony
  • Internet Of Things
  • Security Blog
Alarm systems alarmingly insecure. Oh the irony

12 Min Read

Jun 29, 2016
All your video are belong to us part 2. The TP Link TL-SC3230’s CSRF
  • Internet Of Things
  • Security Blog
All your video are belong to us part 2. The TP Link TL-SC3230’s CSRF

3 Min Read

Jun 27, 2016
All your video are belong to us. The Foscam webcam
  • Internet Of Things
  • Security Blog
All your video are belong to us. The Foscam webcam

5 Min Read

Jun 21, 2016
Hacking the Mitsubishi Outlander. Working out the protocol
  • Automotive Security
  • Security Blog
Hacking the Mitsubishi Outlander. Working out the protocol

2 Min Read

Jun 14, 2016
Consumer IoT security is often terrible, but it doesn’t have to be…
  • Security Blog
Consumer IoT security is often terrible, but it doesn’t have to be…

8 Min Read

Jun 14, 2016
Hacking the Mitsubishi Outlander PHEV hybrid
  • Automotive Security
  • Security Blog
Hacking the Mitsubishi Outlander PHEV hybrid

6 Min Read

Jun 05, 2016
Moodle e-Learning platform vulnerability
  • Security Blog
  • Vulnerability Advisory
Moodle e-Learning platform vulnerability

1 Min Read

Jun 01, 2016
Snooping Sony Bravia TV
  • Android
  • Security Blog
Snooping Sony Bravia TV

2 Min Read

May 20, 2016
How I can gain control of your TP-LINK home switch
  • How Tos
  • Security Blog
How I can gain control of your TP-LINK home switch

7 Min Read

May 20, 2016
An interesting route to domain admin- iSCSI
  • How Tos
  • Security Blog
An interesting route to domain admin- iSCSI

6 Min Read

May 18, 2016
Discrimination by telematics?
  • Automotive Security
  • Security Blog
Discrimination by telematics?

5 Min Read

May 09, 2016
RATing through the Steam Workshop
  • How Tos
  • Security Blog
RATing through the Steam Workshop

4 Min Read

Apr 28, 2016
  • Internet Of Things
  • Security Blog
Advice for IoT device manufacturers

9 Min Read

Apr 22, 2016
Snooping where the sun doesn’t shine
  • Internet Of Things
  • Security Blog
Snooping where the sun doesn’t shine

2 Min Read

Apr 22, 2016
  • Security Blog
BBC Panorama. How we hacked the house

3 Min Read

Apr 16, 2016
How-to subvert Android backups to export sandboxed app files
  • Android
  • How Tos
  • Security Blog
How-to subvert Android backups to export sandboxed app files

4 Min Read

Apr 14, 2016
XSS in SAP Business Intelligence Documents
  • Security Blog
  • Vulnerability Advisory
XSS in SAP Business Intelligence Documents

1 Min Read

Apr 12, 2016
  • Macs / Apple
  • Security Blog
Mobile App Tips. Dealing with iOS and device requirements

5 Min Read

Apr 10, 2016
DOM XSS in iThemes Security Pro
  • Security Blog
  • Vulnerability Advisory
DOM XSS in iThemes Security Pro

2 Min Read

Apr 05, 2016
How a Pentester books a Squash court
  • How Tos
  • Security Blog
How a Pentester books a Squash court

13 Min Read

Mar 31, 2016
Another (un)smart Smarter app
  • Android
  • Security Blog
Another (un)smart Smarter app

3 Min Read

Mar 24, 2016
How we made the listening-in Android app
  • Android
  • How Tos
  • Security Blog
How we made the listening-in Android app

8 Min Read

Mar 23, 2016
  • How Tos
  • Security Blog
How to defend against Pass-the-Hash (PtH) attacks

6 Min Read

Mar 21, 2016
DIY: How to build your own host-based IDS (HIDS) using OSSEC
  • How Tos
  • Security Blog
DIY: How to build your own host-based IDS (HIDS) using OSSEC

6 Min Read

Mar 16, 2016
Apps and Après. Skiing and privacy
  • Android
  • How Tos
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Apps and Après. Skiing and privacy

4 Min Read

Mar 15, 2016
New Chromecast & Chromecast Audio. Have they fixed their hijacking issue?
  • Android
  • How Tos
  • Security Blog
New Chromecast & Chromecast Audio. Have they fixed their hijacking issue?

5 Min Read

Mar 11, 2016
BLN’s IoT Forum. What went down
  • Android
  • Internet Of Things
  • Opinions
  • Security Blog
BLN’s IoT Forum. What went down

1 Min Read

Mar 10, 2016
Are your phones listening to you?
  • Android
  • How Tos
  • Security Blog
Are your phones listening to you?

3 Min Read

Mar 02, 2016
How to exploit XSS with CSRF
  • How Tos
  • Security Blog
How to exploit XSS with CSRF

7 Min Read

Feb 26, 2016
  • How Tos
  • Security Blog
glibc stack-based buffer overflow. What you need to know: UPDATE

2 Min Read

Feb 24, 2016
Pwning CCTV cameras: Update
  • How Tos
  • Internet Of Things
  • Opinions
  • Security Blog
Pwning CCTV cameras: Update

4 Min Read

Feb 23, 2016
  • How Tos
  • Security Blog
glibc stack-based buffer overflow. What you need to know

4 Min Read

Feb 22, 2016
  • How Tos
  • Security Blog
PowerShell and VBScript: Getting full DB access via restricted desktop apps

4 Min Read

Feb 18, 2016
  • How Tos
  • Opinions
  • Security Blog
Cisco ASA Remote Code Execution – Buffer Overflow in IKE code

2 Min Read

Feb 16, 2016
When VTech meets the GDPR
  • Opinions
  • Security Blog
  • Shameless Self Promotion
When VTech meets the GDPR

3 Min Read

Feb 11, 2016
Pwning CCTV cameras
  • How Tos
  • Opinions
  • Security Blog
Pwning CCTV cameras

9 Min Read

Feb 10, 2016
  • How Tos
  • Passwords
  • Reverse Engineering
  • Security Blog
How to reverse Wyse terminal password crypto: Method Two

4 Min Read

Feb 10, 2016
  • How Tos
  • Passwords
  • Reverse Engineering
  • Security Blog
How to reverse Wyse terminal password crypto: Method One

9 Min Read

Feb 09, 2016
  • How Tos
  • Passwords
  • Security Blog
Just how secure is the average home Wi-Fi router?

4 Min Read

Feb 08, 2016
Why I think that U.S. house is hounded by phone trackers
  • Android
  • Macs / Apple
  • Opinions
  • Security Blog
Why I think that U.S. house is hounded by phone trackers

4 Min Read

Jan 25, 2016
Reading Atmel AVR MCUs
  • How Tos
  • Security Blog
Reading Atmel AVR MCUs

8 Min Read

Jan 23, 2016
Who is tracking your run? Run and bike activity tracking app privacy issues investigated
  • Android
  • Macs / Apple
  • Security Blog
Who is tracking your run? Run and bike activity tracking app privacy issues investigated

11 Min Read

Jan 22, 2016
Steal your Wi-Fi key from your doorbell? IoT WTF! UPDATE
  • How Tos
  • Internet Of Things
  • Security Blog
Steal your Wi-Fi key from your doorbell? IoT WTF! UPDATE

2 Min Read

Jan 12, 2016
Steal your Wi-Fi key from your doorbell? IoT WTF!
  • Android
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Steal your Wi-Fi key from your doorbell? IoT WTF!

3 Min Read

Jan 08, 2016
Star Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?
  • Android
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Star Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?

4 Min Read

Jan 06, 2016
Wi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?
  • Internet Of Things
  • Opinions
  • Security Blog
Wi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?

6 Min Read

Jan 05, 2016
OWASP Birmingham IoT Hackathon
  • Android
  • Internet Of Things
  • Security Blog
  • Shameless Self Promotion
OWASP Birmingham IoT Hackathon

1 Min Read

Dec 17, 2015
Why buying a smart toy for a child might be the craziest thing you could do
  • Consumer Advice
  • Security Blog
Why buying a smart toy for a child might be the craziest thing you could do

4 Min Read

Dec 10, 2015
1 … 5 6 7 8 9 10