Skip to main content
Reverse engineering microcontrollers WITHOUT a datasheet
  • Reverse Engineering
Reverse engineering microcontrollers WITHOUT a datasheet

3 Min Read

Feb 09, 2018
Want entropy? Don’t use a floating ADC input
  • Internet Of Things
Want entropy? Don’t use a floating ADC input

5 Min Read

Feb 06, 2018
Runtastic deserves more ‘heat’ than Strava!
  • Internet Of Things
Runtastic deserves more ‘heat’ than Strava!

4 Min Read

Feb 02, 2018
Blockchain. Changing the attackers aim
  • Internet Of Things
Blockchain. Changing the attackers aim

6 Min Read

Jan 26, 2018
NoT: Taking the ‘internet’ out of IoT
  • Internet Of Things
NoT: Taking the ‘internet’ out of IoT

4 Min Read

Jan 25, 2018
VTech strikes again
  • Opinions
VTech strikes again

3 Min Read

Jan 18, 2018
Building half a ‘Proxmark’ for $10
  • How Tos
Building half a ‘Proxmark’ for $10

17 Min Read

Jan 18, 2018
Hacking maritime IFTFCC messaging for invoice fraud
  • Maritime Cyber Security
Hacking maritime IFTFCC messaging for invoice fraud

4 Min Read

Jan 09, 2018
NRF51822 code readout protection bypass- a how-to
  • Hardware Hacking
  • How Tos
NRF51822 code readout protection bypass- a how-to

10 Min Read

Jan 05, 2018
Tracking & hacking ships with Shodan & AIS
  • Maritime Cyber Security
Tracking & hacking ships with Shodan & AIS

3 Min Read

Jan 03, 2018
Top 10 things to improve OT security
  • OT, ICS, IIoT, SCADA
Top 10 things to improve OT security

8 Min Read

Jan 03, 2018
The most common IoT device security failings of 2017
  • Internet Of Things
The most common IoT device security failings of 2017

5 Min Read

Jan 02, 2018
Sinking bulk carrier ships by hacking HSMS
  • Maritime Cyber Security
Sinking bulk carrier ships by hacking HSMS

4 Min Read

Dec 13, 2017
Too cold to work? School closed? Sure your BMS hasn’t been hacked?
  • OT, ICS, IIoT, SCADA
Too cold to work? School closed? Sure your BMS hasn’t been hacked?

7 Min Read

Dec 11, 2017
Hacking a talking toy parrot
  • How Tos
  • Internet Of Things
Hacking a talking toy parrot

3 Min Read

Dec 01, 2017
This week’s IoT security news
  • Internet Of Things
This week’s IoT security news

4 Min Read

Nov 27, 2017
Practical security advice for keyless cars
  • Automotive Security
  • Consumer Advice
Practical security advice for keyless cars

3 Min Read

Nov 27, 2017
Hacking your office through your screen caster
  • How Tos
Hacking your office through your screen caster

3 Min Read

Nov 24, 2017
Destroy kids GPS watches says German Federal Network Agency
  • Internet Of Things
Destroy kids GPS watches says German Federal Network Agency

3 Min Read

Nov 17, 2017
IoT vendors. Avoid recalls, choose a secure chip
  • Internet Of Things
IoT vendors. Avoid recalls, choose a secure chip

3 Min Read

Nov 17, 2017
Making prawn espressos, or hacking ships by deciphering BAPLIE EDIFACT messaging
  • Maritime Cyber Security
Making prawn espressos, or hacking ships by deciphering BAPLIE EDIFACT messaging

6 Min Read

Nov 17, 2017
Sinking container ships by hacking load plan software
  • Maritime Cyber Security
Sinking container ships by hacking load plan software

7 Min Read

Nov 16, 2017
Exfiltration by encoding data in pixel colour values
  • How Tos
Exfiltration by encoding data in pixel colour values

4 Min Read

Nov 08, 2017
Hacking IoT vendors & smart cars via private APNs
  • Automotive Security
  • How Tos
Hacking IoT vendors & smart cars via private APNs

9 Min Read

Oct 23, 2017
Compromising unencrypted butt plug comms
  • Vulnerabilities and Disclosures
Compromising unencrypted butt plug comms

3 Min Read

Oct 18, 2017
OSINT from ship satcoms
  • Maritime Cyber Security
OSINT from ship satcoms

4 Min Read

Oct 13, 2017
Girl on a train. The snooping girl on a train: The Sequel
  • How Tos
Girl on a train. The snooping girl on a train: The Sequel

6 Min Read

Oct 12, 2017
  • Maritime Cyber Security
Maritime OT networks. A Primer

9 Min Read

Oct 10, 2017
The art of finding JTAG on PCBs
  • How Tos
  • Internet Of Things
  • Reverse Engineering
The art of finding JTAG on PCBs

8 Min Read

Oct 04, 2017
Screwdriving. Locating and exploiting smart adult toys
  • Internet Of Things
Screwdriving. Locating and exploiting smart adult toys

8 Min Read

Sep 29, 2017
Dumping CC2540 Firmware. An IoT how-to
  • Hardware Hacking
  • How Tos
  • Internet Of Things
Dumping CC2540 Firmware. An IoT how-to

5 Min Read

Sep 18, 2017
Social engineering in the (festival) field
  • Social Engineering
Social engineering in the (festival) field

7 Min Read

Sep 05, 2017
Tearing down the Star Wars Battle Drone toy from Propel
  • Internet Of Things
Tearing down the Star Wars Battle Drone toy from Propel

2 Min Read

Sep 01, 2017
Bypass Windows auth & BitLocker with forgotten password function
  • How Tos
Bypass Windows auth & BitLocker with forgotten password function

3 Min Read

Aug 25, 2017
IoT: Convenience vs. Privacy. Where do you draw the line?
  • Internet Of Things
IoT: Convenience vs. Privacy. Where do you draw the line?

6 Min Read

Aug 24, 2017
Blockchain Implementation Security. A hardening how-to
  • How Tos
  • Internet Of Things
Blockchain Implementation Security. A hardening how-to

8 Min Read

Aug 22, 2017
Brick or Bot? Solving OTA update issues
  • Internet Of Things
Brick or Bot? Solving OTA update issues

4 Min Read

Aug 16, 2017
Analysis: Draft US Senate IoT security bill
  • Internet Of Things
Analysis: Draft US Senate IoT security bill

7 Min Read

Aug 10, 2017
“Alexa, use IoT to kill the power grid”
  • Internet Of Things
“Alexa, use IoT to kill the power grid”

5 Min Read

Aug 07, 2017
Which IoT product should I buy?
  • Consumer Advice
  • Internet Of Things
Which IoT product should I buy?

4 Min Read

Aug 01, 2017
Update your PLC firmware. A reminder
  • OT, ICS, IIoT, SCADA
Update your PLC firmware. A reminder

2 Min Read

Jul 25, 2017
Adult IoT toys. Privacy invasion or worse?
  • Internet Of Things
Adult IoT toys. Privacy invasion or worse?

5 Min Read

Jul 24, 2017
IoT security testing methodologies
  • Internet Of Things
IoT security testing methodologies

7 Min Read

Jul 20, 2017
Project Dumb2Smart. How to build a secure IoT device. Part One: Dumb
  • How Tos
Project Dumb2Smart. How to build a secure IoT device. Part One: Dumb

4 Min Read

Jul 18, 2017
Could ‘Right to Repair’ heighten the risk for IoT and smart devices?
  • Internet Of Things
Could ‘Right to Repair’ heighten the risk for IoT and smart devices?

8 Min Read

Jul 12, 2017
UnBrickerBot? XiongMai fix Mirai DVR security issues… and fail
  • Internet Of Things
UnBrickerBot? XiongMai fix Mirai DVR security issues… and fail

4 Min Read

Jul 03, 2017
Obfuscating consumer IoT hardware. Is it worth it?
  • Hardware Hacking
Obfuscating consumer IoT hardware. Is it worth it?

5 Min Read

Jun 29, 2017
Petya/NotPetya. What you need to know
  • Opinions
Petya/NotPetya. What you need to know

2 Min Read

Jun 28, 2017
Cyber Mum Vs Cyber Daughter
  • Opinions
Cyber Mum Vs Cyber Daughter

7 Min Read

Jun 28, 2017
Home Wi-Fi routers. Is yours secure?
  • Consumer Advice
  • How Tos
Home Wi-Fi routers. Is yours secure?

4 Min Read

Jun 23, 2017
What did Mirai Miss? Making a better, bigger botnet
  • Internet Of Things
What did Mirai Miss? Making a better, bigger botnet

8 Min Read

Jun 06, 2017
Hacking wireless house alarms
  • Internet Of Things
Hacking wireless house alarms

10 Min Read

Jun 05, 2017
IN THE NEWS: BBC Click. The IoT at Dover Castle
  • Internet Of Things
IN THE NEWS: BBC Click. The IoT at Dover Castle

1 Min Read

May 24, 2017
IN THE NEWS: Samsung’s S8 Iris and biometric revocation
  • Opinions
IN THE NEWS: Samsung’s S8 Iris and biometric revocation

5 Min Read

May 24, 2017
What I learned about managing worm outbreaks… 14 years ago
  • How Tos
What I learned about managing worm outbreaks… 14 years ago

7 Min Read

May 16, 2017
WannaCry ransomware. It’s not all bad news
  • Opinions
WannaCry ransomware. It’s not all bad news

6 Min Read

May 15, 2017
How to reverse engineer MSWord malware
  • How Tos
How to reverse engineer MSWord malware

7 Min Read

May 08, 2017
Responsible disclosure didn’t work? How to get an IoT vendor to take notice
  • Vulnerabilities and Disclosures
Responsible disclosure didn’t work? How to get an IoT vendor to take notice

7 Min Read

May 05, 2017
Faster EEPROM firmware reads? Use a Pi!
  • How Tos
Faster EEPROM firmware reads? Use a Pi!

6 Min Read

May 04, 2017
Girl on a train. The snooping girl on a train
  • How Tos
Girl on a train. The snooping girl on a train

5 Min Read

Apr 28, 2017
Hacking tractors is a thing. Is it the start of something else for connected cars?
  • Automotive Security
Hacking tractors is a thing. Is it the start of something else for connected cars?

6 Min Read

Apr 26, 2017
Decoding React Native creds on Android
  • Android
Decoding React Native creds on Android

4 Min Read

Apr 21, 2017
Keep your IoT schematics private
  • Internet Of Things
Keep your IoT schematics private

3 Min Read

Apr 19, 2017
IoT Aga. Cast iron Security Flaw
  • Internet Of Things
IoT Aga. Cast iron Security Flaw

7 Min Read

Apr 12, 2017
Vulnerable Wi-Fi dildo camera endoscope. Yes really
  • Internet Of Things
Vulnerable Wi-Fi dildo camera endoscope. Yes really

12 Min Read

Apr 03, 2017
Nifty XSS in Annke SP1 HD wireless camera
  • Internet Of Things
Nifty XSS in Annke SP1 HD wireless camera

2 Min Read

Mar 23, 2017
Jurassic Poke: Hacking a Dino toy
  • Internet Of Things
Jurassic Poke: Hacking a Dino toy

4 Min Read

Mar 16, 2017
In The News. DW TV. Driverless/connected car security
  • Automotive Security
In The News. DW TV. Driverless/connected car security

1 Min Read

Mar 14, 2017
LAN surfing. How to use JavaScript to Execute Arbitrary Code on Routers
  • How Tos
LAN surfing. How to use JavaScript to Execute Arbitrary Code on Routers

12 Min Read

Mar 13, 2017
Weeping Angel / Fake OFF for Android TV
  • Internet Of Things
Weeping Angel / Fake OFF for Android TV

2 Min Read

Mar 08, 2017
  • Internet Of Things
Weeping Angel. Old News?

2 Min Read

Mar 08, 2017
No Genesis Toys, My Friend Cayla can be hacked even if you do follow the instructions!
  • Internet Of Things
No Genesis Toys, My Friend Cayla can be hacked even if you do follow the instructions!

2 Min Read

Mar 06, 2017
You can have your cookie and eat it!
  • Opinions
You can have your cookie and eat it!

3 Min Read

Mar 03, 2017
CloudPets data breach
  • Consumer Advice
  • Internet Of Things
CloudPets data breach

2 Min Read

Feb 28, 2017
Pathway to driverless cars. UK law and liability.
  • Automotive Security
Pathway to driverless cars. UK law and liability.

1 Min Read

Feb 27, 2017
PTP brief UK Government on Cyber Security and call for IoT legislation
  • Opinions
PTP brief UK Government on Cyber Security and call for IoT legislation

1 Min Read

Feb 23, 2017
MyFriendCayla banned. Are all listening Bluetooth devices set for the bin?
  • Internet Of Things
MyFriendCayla banned. Are all listening Bluetooth devices set for the bin?

3 Min Read

Feb 21, 2017
Our Friend Cayla: No Longer Welcome in Germany!
  • Internet Of Things
Our Friend Cayla: No Longer Welcome in Germany!

3 Min Read

Feb 17, 2017
Help users spot phishing. Tag fake “internal” emails for them
  • How Tos
Help users spot phishing. Tag fake “internal” emails for them

3 Min Read

Feb 16, 2017
Screw Cayla: Use Chromecast for rogue Amazon Echo voice control!
  • Internet Of Things
Screw Cayla: Use Chromecast for rogue Amazon Echo voice control!

5 Min Read

Feb 14, 2017
Secure all the things with other things via the Blockchain!
  • Internet Of Things
Secure all the things with other things via the Blockchain!

6 Min Read

Feb 10, 2017
End of the line, Internet of Things
  • Internet Of Things
End of the line, Internet of Things

4 Min Read

Feb 02, 2017
How to avoid blowing your privacy online
  • Consumer Advice
  • How Tos
  • Internet Of Things
How to avoid blowing your privacy online

8 Min Read

Jan 25, 2017
Leaked DVR creds added to the IoT Fail list
  • Internet Of Things
Leaked DVR creds added to the IoT Fail list

3 Min Read

Jan 11, 2017
Who wants a hairbrush that’s connected to the internet?
  • Internet Of Things
Who wants a hairbrush that’s connected to the internet?

2 Min Read

Jan 06, 2017
Edimax Wi-Fi Extender can disclose your WPA key
  • Internet Of Things
  • Vulnerabilities and Disclosures
Edimax Wi-Fi Extender can disclose your WPA key

3 Min Read

Jan 06, 2017
Christmas lights. Festive security issues?
  • Internet Of Things
Christmas lights. Festive security issues?

3 Min Read

Jan 05, 2017
BMW integrates Alexa / Echo. Did I read that right?!
  • Automotive Security
BMW integrates Alexa / Echo. Did I read that right?!

2 Min Read

Dec 16, 2016
Just in time for Christmas- the Cayla reminder
  • Internet Of Things
Just in time for Christmas- the Cayla reminder

1 Min Read

Dec 16, 2016
TalkTalk router hack. Consumers, what should you do?
  • Internet Of Things
TalkTalk router hack. Consumers, what should you do?

4 Min Read

Dec 07, 2016
IoT Encryption: The challenge of missing entropy
  • Internet Of Things
IoT Encryption: The challenge of missing entropy

5 Min Read

Dec 07, 2016
My Friend Cayla wakes up and smells the lawsuits
  • Internet Of Things
My Friend Cayla wakes up and smells the lawsuits

2 Min Read

Dec 06, 2016
TalkTalk and other ISPs need to replace customer routers urgently
  • Internet Of Things
TalkTalk and other ISPs need to replace customer routers urgently

3 Min Read

Dec 03, 2016
TR-064 worm. It’s not Mirai and the outages are interesting
  • Internet Of Things
TR-064 worm. It’s not Mirai and the outages are interesting

3 Min Read

Dec 02, 2016
Password stuffing: How to avoid breaches from password re-use
  • Passwords
Password stuffing: How to avoid breaches from password re-use

5 Min Read

Nov 30, 2016
Can Linux really be owned by holding the Enter key?
  • Internet Of Things
  • Opinions
Can Linux really be owned by holding the Enter key?

2 Min Read

Nov 16, 2016
Netgear EX7000 Wi-Fi Range Extender. Minor XSS and Poor Password Handling
  • Vulnerabilities and Disclosures
Netgear EX7000 Wi-Fi Range Extender. Minor XSS and Poor Password Handling

3 Min Read

Nov 15, 2016
Filling in gaps in Mirai. It’s about DVRs, not cameras
  • Internet Of Things
Filling in gaps in Mirai. It’s about DVRs, not cameras

4 Min Read

Nov 11, 2016
Can’t get data onto that machine? Download a tunnel client over DNS
  • How Tos
Can’t get data onto that machine? Download a tunnel client over DNS

8 Min Read

Nov 10, 2016
The Wi-Fi enabled LG air conditioner
  • Internet Of Things
The Wi-Fi enabled LG air conditioner

5 Min Read

Nov 08, 2016
1 … 5 6 7 8 9 10