Skip to main content
  • Internet Of Things
  • Security Blog
Advice for IoT device manufacturers

9 Min Read

Apr 22, 2016
Snooping where the sun doesn’t shine
  • Internet Of Things
  • Security Blog
Snooping where the sun doesn’t shine

2 Min Read

Apr 22, 2016
  • Security Blog
BBC Panorama. How we hacked the house

3 Min Read

Apr 16, 2016
How-to subvert Android backups to export sandboxed app files
  • Android
  • How Tos
  • Security Blog
How-to subvert Android backups to export sandboxed app files

4 Min Read

Apr 14, 2016
XSS in SAP Business Intelligence Documents
  • Security Blog
  • Vulnerability Advisory
XSS in SAP Business Intelligence Documents

1 Min Read

Apr 12, 2016
  • Macs / Apple
  • Security Blog
Mobile App Tips. Dealing with iOS and device requirements

5 Min Read

Apr 10, 2016
DOM XSS in iThemes Security Pro
  • Security Blog
  • Vulnerability Advisory
DOM XSS in iThemes Security Pro

2 Min Read

Apr 05, 2016
How a Pentester books a Squash court
  • How Tos
  • Security Blog
How a Pentester books a Squash court

13 Min Read

Mar 31, 2016
Another (un)smart Smarter app
  • Android
  • Security Blog
Another (un)smart Smarter app

3 Min Read

Mar 24, 2016
How we made the listening-in Android app
  • Android
  • How Tos
  • Security Blog
How we made the listening-in Android app

8 Min Read

Mar 23, 2016
  • How Tos
  • Security Blog
How to defend against Pass-the-Hash (PtH) attacks

6 Min Read

Mar 21, 2016
DIY: How to build your own host-based IDS (HIDS) using OSSEC
  • How Tos
  • Security Blog
DIY: How to build your own host-based IDS (HIDS) using OSSEC

6 Min Read

Mar 16, 2016
Apps and Après. Skiing and privacy
  • Android
  • How Tos
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Apps and Après. Skiing and privacy

4 Min Read

Mar 15, 2016
New Chromecast & Chromecast Audio. Have they fixed their hijacking issue?
  • Android
  • How Tos
  • Security Blog
New Chromecast & Chromecast Audio. Have they fixed their hijacking issue?

5 Min Read

Mar 11, 2016
BLN’s IoT Forum. What went down
  • Android
  • Internet Of Things
  • Opinions
  • Security Blog
BLN’s IoT Forum. What went down

1 Min Read

Mar 10, 2016
Are your phones listening to you?
  • Android
  • How Tos
  • Security Blog
Are your phones listening to you?

3 Min Read

Mar 02, 2016
How to exploit XSS with CSRF
  • How Tos
  • Security Blog
How to exploit XSS with CSRF

7 Min Read

Feb 26, 2016
  • How Tos
  • Security Blog
glibc stack-based buffer overflow. What you need to know: UPDATE

2 Min Read

Feb 24, 2016
Pwning CCTV cameras: Update
  • How Tos
  • Internet Of Things
  • Opinions
  • Security Blog
Pwning CCTV cameras: Update

4 Min Read

Feb 23, 2016
  • How Tos
  • Security Blog
glibc stack-based buffer overflow. What you need to know

4 Min Read

Feb 22, 2016
  • How Tos
  • Security Blog
PowerShell and VBScript: Getting full DB access via restricted desktop apps

4 Min Read

Feb 18, 2016
  • How Tos
  • Opinions
  • Security Blog
Cisco ASA Remote Code Execution – Buffer Overflow in IKE code

2 Min Read

Feb 16, 2016
When VTech meets the GDPR
  • Opinions
  • Security Blog
  • Shameless Self Promotion
When VTech meets the GDPR

3 Min Read

Feb 11, 2016
Pwning CCTV cameras
  • How Tos
  • Opinions
  • Security Blog
Pwning CCTV cameras

9 Min Read

Feb 10, 2016
  • How Tos
  • Passwords
  • Reverse Engineering
  • Security Blog
How to reverse Wyse terminal password crypto: Method Two

4 Min Read

Feb 10, 2016
  • How Tos
  • Passwords
  • Reverse Engineering
  • Security Blog
How to reverse Wyse terminal password crypto: Method One

9 Min Read

Feb 09, 2016
  • How Tos
  • Passwords
  • Security Blog
Just how secure is the average home Wi-Fi router?

4 Min Read

Feb 08, 2016
Why I think that U.S. house is hounded by phone trackers
  • Android
  • Macs / Apple
  • Opinions
  • Security Blog
Why I think that U.S. house is hounded by phone trackers

4 Min Read

Jan 25, 2016
Reading Atmel AVR MCUs
  • How Tos
  • Security Blog
Reading Atmel AVR MCUs

8 Min Read

Jan 23, 2016
Who is tracking your run? Run and bike activity tracking app privacy issues investigated
  • Android
  • Macs / Apple
  • Security Blog
Who is tracking your run? Run and bike activity tracking app privacy issues investigated

11 Min Read

Jan 22, 2016
Steal your Wi-Fi key from your doorbell? IoT WTF! UPDATE
  • How Tos
  • Internet Of Things
  • Security Blog
Steal your Wi-Fi key from your doorbell? IoT WTF! UPDATE

2 Min Read

Jan 12, 2016
Steal your Wi-Fi key from your doorbell? IoT WTF!
  • Android
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Steal your Wi-Fi key from your doorbell? IoT WTF!

3 Min Read

Jan 08, 2016
Star Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?
  • Android
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Star Wars BB-8 IoT toy: awesome fun, but can it be turned to the Dark Side with this vulnerability?

4 Min Read

Jan 06, 2016
Wi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?
  • Internet Of Things
  • Opinions
  • Security Blog
Wi-Fi HaLow 802.11ah for IoT. 802.11uh-oh?

6 Min Read

Jan 05, 2016
OWASP Birmingham IoT Hackathon
  • Android
  • Internet Of Things
  • Security Blog
  • Shameless Self Promotion
OWASP Birmingham IoT Hackathon

1 Min Read

Dec 17, 2015
Why buying a smart toy for a child might be the craziest thing you could do
  • Consumer Advice
  • Security Blog
Why buying a smart toy for a child might be the craziest thing you could do

4 Min Read

Dec 10, 2015
  • Android
  • How Tos
  • Security Blog
Vtech Innotab Max file extraction: Finding the Superblock

8 Min Read

Dec 07, 2015
VTech Innotab Max: it’s getting even worse! Apps run in debug mode
  • Android
  • Internet Of Things
  • Opinions
  • Security Blog
VTech Innotab Max: it’s getting even worse! Apps run in debug mode

1 Min Read

Dec 03, 2015
  • Android
  • How Tos
  • Reverse Engineering
  • Security Blog
VTech Innotab Max vulnerable to trivial data extraction

3 Min Read

Dec 02, 2015
Collateral Damage: Top 5 Reasons You Should be Scared of Your Customers
  • How Tos
  • Passwords
  • Security Blog
  • Social Engineering
Collateral Damage: Top 5 Reasons You Should be Scared of Your Customers

5 Min Read

Nov 26, 2015
New Furby Teardown
  • Security Blog
New Furby Teardown

2 Min Read

Nov 24, 2015
New, easier ways to make My Friend Cayla swear
  • Android
  • How Tos
  • Internet Of Things
  • Macs / Apple
  • Security Blog
New, easier ways to make My Friend Cayla swear

4 Min Read

Nov 20, 2015
  • Internet Of Things
  • Opinions
  • Security Blog
The IoT: Innovation or Exploitation?

2 Min Read

Nov 18, 2015
Yet another Lovense smart vibrator flaw
  • Security Blog
Yet another Lovense smart vibrator flaw

2 Min Read

Nov 17, 2015
Hacking a Wi-Fi Coffee Machine – Part 1
  • How Tos
  • Internet Of Things
  • Security Blog
Hacking a Wi-Fi Coffee Machine – Part 1

6 Min Read

Nov 16, 2015
  • Consumer Advice
  • Security Blog
Some simple security advice for computer and smartphone users

3 Min Read

Nov 13, 2015
What if your fridge said “no”? What if indeed?
  • Internet Of Things
  • Opinions
  • Security Blog
What if your fridge said “no”? What if indeed?

4 Min Read

Nov 11, 2015
  • Opinions
  • Passwords
  • Security Blog
Concerned about KeeFarce? Don’t be. Why you should still use a password vault

4 Min Read

Nov 09, 2015
  • How Tos
  • Opinions
  • Security Blog
The TalkTalk breach, Ken Munro will be on the BBC later…

3 Min Read

Oct 23, 2015
New Wi-Fi kettle, same old security issues? Meh.
  • Android
  • Internet Of Things
  • Macs / Apple
  • Security Blog
New Wi-Fi kettle, same old security issues? Meh.

3 Min Read

Oct 15, 2015
Tonight’s CSI Cyber: implausible Marla talking doll hack. Fiction stranger than truth for once
  • Android
  • How Tos
  • Internet Of Things
  • Opinions
  • Security Blog
Tonight’s CSI Cyber: implausible Marla talking doll hack. Fiction stranger than truth for once

4 Min Read

Oct 06, 2015
Hacking the Aldi IP CCTV Camera (part 2)
  • How Tos
  • Internet Of Things
  • Security Blog
Hacking the Aldi IP CCTV Camera (part 2)

6 Min Read

Oct 02, 2015
  • Security Blog
  • Social Engineering
Microsoft, phishing emails, and lessons to learn

2 Min Read

Sep 25, 2015
Should I enable encryption my Android handset?
  • Android
  • How Tos
  • Passwords
  • Security Blog
Should I enable encryption my Android handset?

3 Min Read

Sep 23, 2015
  • How Tos
  • Passwords
  • Security Blog
How to get Windows to give you credentials through LLMNR

6 Min Read

Sep 22, 2015
Android Lock Screen Bypass
  • Android
  • How Tos
  • Passwords
  • Security Blog
Android Lock Screen Bypass

3 Min Read

Sep 16, 2015
CESG and CPNI put passwords back in the spotlight. Have they got it right?
  • How Tos
  • Passwords
  • Security Blog
CESG and CPNI put passwords back in the spotlight. Have they got it right?

5 Min Read

Sep 16, 2015
44CON London: Our IoT Security Workshop
  • How Tos
  • Internet Of Things
  • Security Blog
  • Shameless Self Promotion
44CON London: Our IoT Security Workshop

1 Min Read

Sep 11, 2015
Tweaking nmap for hostile networks. A How-to
  • How Tos
  • Security Blog
Tweaking nmap for hostile networks. A How-to

7 Min Read

Sep 09, 2015
Pen Test Partners IoT workshop at 44CON London
  • Internet Of Things
  • Security Blog
  • Shameless Self Promotion
Pen Test Partners IoT workshop at 44CON London

1 Min Read

Sep 07, 2015
How do you know that you aren’t compromised?
  • How Tos
  • Security Blog
How do you know that you aren’t compromised?

3 Min Read

Aug 28, 2015
Grab the UI lock password from McAfee A/V, kill the service, send in the malware
  • How Tos
  • Passwords
  • Security Blog
Grab the UI lock password from McAfee A/V, kill the service, send in the malware

6 Min Read

Aug 26, 2015
How to extract sensitive plaintext data from Android memory
  • Android
  • How Tos
  • Security Blog
How to extract sensitive plaintext data from Android memory

9 Min Read

Aug 19, 2015
Hacking DefCon 23’s IoT Village Samsung fridge
  • Android
  • Internet Of Things
  • Security Blog
Hacking DefCon 23’s IoT Village Samsung fridge

4 Min Read

Aug 18, 2015
AirDrop and Cyber Flashing, what’s the deal?
  • How Tos
  • Macs / Apple
  • Opinions
  • Security Blog
AirDrop and Cyber Flashing, what’s the deal?

3 Min Read

Aug 13, 2015
Inside the spy tank; a hardware review.
  • Android
  • How Tos
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Inside the spy tank; a hardware review.

4 Min Read

Aug 11, 2015
Denial-of-Service bug in BIND
  • How Tos
  • Security Blog
Denial-of-Service bug in BIND

2 Min Read

Aug 04, 2015
How to create poisoned Office documents for your staff awareness training – part 2
  • How Tos
  • Security Blog
How to create poisoned Office documents for your staff awareness training – part 2

6 Min Read

Jul 30, 2015
  • Security Blog
  • Shameless Self Promotion
Going to DefCon 23? Come to our IoT Village workshop!

2 Min Read

Jul 29, 2015
How to create poisoned Office documents for your staff awareness training – part 1
  • How Tos
  • Security Blog
How to create poisoned Office documents for your staff awareness training – part 1

5 Min Read

Jul 28, 2015
How to hack an app enabled device to make it truly internet enabled
  • Android
  • How Tos
  • Internet Of Things
  • Macs / Apple
  • Security Blog
How to hack an app enabled device to make it truly internet enabled

7 Min Read

Jul 17, 2015
Android debug mode and apps. A cautionary tale
  • Android
  • How Tos
  • Security Blog
Android debug mode and apps. A cautionary tale

7 Min Read

Jul 15, 2015
Hydra the logon cracker, a brute-forcing how-to user guide
  • How Tos
  • Security Blog
Hydra the logon cracker, a brute-forcing how-to user guide

3 Min Read

Jul 13, 2015
Basic safety tips for mobile devices
  • Android
  • How Tos
  • Macs / Apple
  • Security Blog
Basic safety tips for mobile devices

5 Min Read

Jul 08, 2015
The tiniest PHP system shell ever?
  • How Tos
  • Opinions
  • Security Blog
The tiniest PHP system shell ever?

2 Min Read

Jul 07, 2015
Oracle wants you to run vulnerable Java to remove vulnerable versions of Java
  • Opinions
  • Security Blog
Oracle wants you to run vulnerable Java to remove vulnerable versions of Java

2 Min Read

Jul 03, 2015
Finding wireless kettles with social networks
  • How Tos
  • Internet Of Things
  • Security Blog
Finding wireless kettles with social networks

3 Min Read

Jul 01, 2015
Abusing software updates. GoPro Studio desktop app: Samsung keyboard app-style fail
  • How Tos
  • Security Blog
Abusing software updates. GoPro Studio desktop app: Samsung keyboard app-style fail

3 Min Read

Jun 29, 2015
Shiva, the spam honeypot. Tips and tricks for getting it up and running.
  • Honeypots
  • How Tos
  • Security Blog
Shiva, the spam honeypot. Tips and tricks for getting it up and running.

10 Min Read

Jun 26, 2015
Yet another attack against the iKettle wireless kettle. Rumpy pumpy and fire alarms?
  • Android
  • Security Blog
Yet another attack against the iKettle wireless kettle. Rumpy pumpy and fire alarms?

2 Min Read

Jun 23, 2015
My Friend Cayla. Updated app; Updated security fails. How to make her swear (again!)
  • Android
  • How Tos
  • Internet Of Things
  • Security Blog
My Friend Cayla. Updated app; Updated security fails. How to make her swear (again!)

2 Min Read

Jun 22, 2015
Change your password to smiling, winking, pensive, sleepy….
  • Passwords
  • Security Blog
Change your password to smiling, winking, pensive, sleepy….

3 Min Read

Jun 17, 2015
Common coding fails when writing Android mobile apps
  • Android
  • How Tos
  • Security Blog
Common coding fails when writing Android mobile apps

5 Min Read

Jun 17, 2015
Why you’re better off buying expensive smart scales
  • Android
  • How Tos
  • Internet Of Things
  • Macs / Apple
  • Security Blog
Why you’re better off buying expensive smart scales

4 Min Read

Jun 15, 2015
CVSSv3. What’s changed? …or why even bother?
  • Opinions
  • Security Blog
CVSSv3. What’s changed? …or why even bother?

5 Min Read

Jun 12, 2015
Extracting your WPA PSK from bathroom scales
  • How Tos
  • Internet Of Things
  • Security Blog
Extracting your WPA PSK from bathroom scales

3 Min Read

Jun 08, 2015
Hacking kettles & extracting plain text WPA PSKs. Yes really!
  • Android
  • How Tos
  • Macs / Apple
  • Security Blog
Hacking kettles & extracting plain text WPA PSKs. Yes really!

5 Min Read

Jun 08, 2015
Infosecurity Europe 2015 round up
  • How Tos
  • Security Blog
  • Shameless Self Promotion
Infosecurity Europe 2015 round up

2 Min Read

Jun 05, 2015
GoPro Wi-Fi issues could mean stolen video, or worse…
  • Android
  • How Tos
  • Macs / Apple
  • Security Blog
GoPro Wi-Fi issues could mean stolen video, or worse…

6 Min Read

Jun 01, 2015
Short mobile PINs ARE bad, but I hate vendor FUD more!
  • Android
  • Macs / Apple
  • Passwords
  • Security Blog
Short mobile PINs ARE bad, but I hate vendor FUD more!

4 Min Read

May 29, 2015
Cyber liability insurance. Will your underwriter wriggle out of the claim?
  • Cyber Liability Insurance
  • Security Blog
Cyber liability insurance. Will your underwriter wriggle out of the claim?

3 Min Read

May 28, 2015
Thought you had seen FUD? Now see this: a rock can protect your computer from viruses
  • Opinions
  • Security Blog
Thought you had seen FUD? Now see this: a rock can protect your computer from viruses

3 Min Read

May 22, 2015
Why I hate named vulnerabilities
  • Opinions
  • Security Blog
Why I hate named vulnerabilities

4 Min Read

May 22, 2015
Ethical disclosure and the Internet of Things
  • Security Blog
  • Vulnerability Disclosure
Ethical disclosure and the Internet of Things

3 Min Read

May 20, 2015
Why you need to make your passwords more complex
  • Passwords
  • Security Blog
Why you need to make your passwords more complex

4 Min Read

May 13, 2015
Zero-code platforms? More like zero-clue platforms
  • Android
  • Macs / Apple
  • Opinions
  • Security Blog
Zero-code platforms? More like zero-clue platforms

3 Min Read

May 07, 2015
Honeypots; a usage guide
  • Honeypots
  • How Tos
  • Security Blog
Honeypots; a usage guide

4 Min Read

May 05, 2015
  • Cyber Liability Insurance
  • Opinions
  • Security Blog
Ryanair. A timely reminder why Europeans need First Party Cyber Liability Insurance

3 Min Read

May 01, 2015
How to read from an EEPROM
  • How Tos
  • Security Blog
How to read from an EEPROM

7 Min Read

Apr 27, 2015
MS15-034. What you need to know
  • How Tos
  • Opinions
  • Security Blog
MS15-034. What you need to know

3 Min Read

Apr 16, 2015
1 … 6 7 8 9 10