Skip to main content
Fire detection system been pwned? You’re not going to sea
  • Vulnerability Advisory
Fire detection system been pwned? You’re not going to sea

10 Min Read

May 30, 2025
How to load unsigned or fake-signed apps on iOS
  • How Tos
How to load unsigned or fake-signed apps on iOS

10 Min Read

May 28, 2025
Our capabilities. A story about what we can achieve
  • Shameless Self Promotion
Our capabilities. A story about what we can achieve

11 Min Read

May 27, 2025
Fully segregated networks? Your dual-homed devices might disagree
  • OT, ICS, IIoT, SCADA
Fully segregated networks? Your dual-homed devices might disagree

9 Min Read

May 22, 2025
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…
  • Red Teaming
Bypass SharePoint Restricted View to exfiltrate data using Copilot AI and more…

17 Min Read

May 20, 2025
VNC. RDP for all to see
  • How Tos
VNC. RDP for all to see

5 Min Read

May 16, 2025
New cybersecurity rules for smart heat pump manufacturers
  • Sustainability
New cybersecurity rules for smart heat pump manufacturers

5 Min Read

May 13, 2025
RCEs and more in the KUNBUS GmbH Revolution Pi PLC
  • Vulnerability Advisory
RCEs and more in the KUNBUS GmbH Revolution Pi PLC

15 Min Read

May 08, 2025
Exploiting Copilot AI for SharePoint
  • Red Teaming
Exploiting Copilot AI for SharePoint

10 Min Read

May 07, 2025
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache
  • DFIR
The remote desktop puzzle. DFIR techniques for dealing with RDP Bitmap Cache

8 Min Read

May 01, 2025
Hiding behind a password
  • Passwords
Hiding behind a password

5 Min Read

Apr 29, 2025
The dangers of web based messaging apps
  • Consumer Advice
The dangers of web based messaging apps

6 Min Read

Apr 25, 2025
Unallocated space analysis
  • DFIR
Unallocated space analysis

5 Min Read

Apr 23, 2025
Not everything in a data leak is real
  • DFIR
Not everything in a data leak is real

3 Min Read

Apr 15, 2025
Don’t use corporate email for your personal life
  • How Tos
Don’t use corporate email for your personal life

5 Min Read

Apr 09, 2025
Preparing for the EU Radio Equipment Directive security requirements
  • Internet Of Things
Preparing for the EU Radio Equipment Directive security requirements

3 Min Read

Apr 03, 2025
Backdoor in the Backplane. Doing IPMI security better
  • How Tos
Backdoor in the Backplane. Doing IPMI security better

7 Min Read

Mar 31, 2025
The first 24 hours of a cyber incident. A practical playbook
  • DFIR
The first 24 hours of a cyber incident. A practical playbook

6 Min Read

Mar 24, 2025
Cybersecurity communities. Small hacker groups, big impact
  • Opinions
Cybersecurity communities. Small hacker groups, big impact

5 Min Read

Mar 19, 2025
Take control of Cache-Control and local caching
  • How Tos
Take control of Cache-Control and local caching

4 Min Read

Mar 12, 2025
How I became a Cyber Essentials Plus assessor
  • Consultancy advice
How I became a Cyber Essentials Plus assessor

10 Min Read

Mar 06, 2025
DNSSEC NSEC. The accidental treasure map to your subdomains
  • How Tos
DNSSEC NSEC. The accidental treasure map to your subdomains

9 Min Read

Mar 04, 2025
A dive into the Rockchip Bootloader
  • Hardware Hacking
A dive into the Rockchip Bootloader

8 Min Read

Feb 26, 2025
Pen testing avionics under ED-203a
  • Aviation Cyber Security
Pen testing avionics under ED-203a

3 Min Read

Feb 21, 2025
Watch where you point that cred! Part 1
  • How Tos
Watch where you point that cred! Part 1

8 Min Read

Feb 18, 2025
New mandatory USCG cyber regulations. What you need to know
  • Maritime Cyber Security
New mandatory USCG cyber regulations. What you need to know

4 Min Read

Feb 14, 2025
PCI DSS v4.0 Evidence and documentation requirements checklist
  • Consultancy advice
PCI DSS v4.0 Evidence and documentation requirements checklist

6 Min Read

Feb 13, 2025
PCI DSS. Where to start?
  • Consultancy advice
PCI DSS. Where to start?

4 Min Read

Feb 11, 2025
ICS testing best results. Hint: Blend your approach
  • OT, ICS, IIoT, SCADA
ICS testing best results. Hint: Blend your approach

6 Min Read

Feb 07, 2025
A tale of enumeration, and why pen testing can’t be automated
  • How Tos
A tale of enumeration, and why pen testing can’t be automated

7 Min Read

Feb 05, 2025
How Garmin watches reveal your personal data, and what you can do
  • DFIR
How Garmin watches reveal your personal data, and what you can do

8 Min Read

Jan 28, 2025
Cyber security guidance for small fleet operators
  • Maritime Cyber Security
Cyber security guidance for small fleet operators

10 Min Read

Jan 24, 2025
How to secure body-worn cameras and protect footage from cyber threats
  • Hardware Hacking
How to secure body-worn cameras and protect footage from cyber threats

4 Min Read

Jan 21, 2025
Security flaws found in tiny phones promoted to children
  • Consumer Advice
Security flaws found in tiny phones promoted to children

9 Min Read

Jan 15, 2025
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection
  • DFIR
Tackling AI threats. Advanced DFIR methods and tools for deepfake detection

14 Min Read

Jan 13, 2025
The unexpected effects of GPS spoofing on aviation safety
  • Aviation Cyber Security
The unexpected effects of GPS spoofing on aviation safety

8 Min Read

Jan 09, 2025
10 Non-tech things you wish you had done after being breached
  • DFIR
10 Non-tech things you wish you had done after being breached

5 Min Read

Jan 07, 2025
The surprising existence of the erase button on cockpit voice recorders
  • Aviation Cyber Security
The surprising existence of the erase button on cockpit voice recorders

8 Min Read

Jan 03, 2025
Heels on fire. Hacking smart ski socks
  • Internet Of Things
Heels on fire. Hacking smart ski socks

3 Min Read

Dec 23, 2024
Practice being punched in the face. The realities of incident response preparation
  • DFIR
Practice being punched in the face. The realities of incident response preparation

4 Min Read

Dec 20, 2024
How easily access cards can be cloned and why your PACS might be vulnerable
  • Hardware Hacking
How easily access cards can be cloned and why your PACS might be vulnerable

12 Min Read

Dec 11, 2024
Making sure your door access control system is secure: Top 5 things to check
  • Hardware Hacking
Making sure your door access control system is secure: Top 5 things to check

3 Min Read

Dec 09, 2024
Is secure boot on the main application processor enough?
  • Hardware Hacking
Is secure boot on the main application processor enough?

5 Min Read

Dec 05, 2024
6 non tech things you wish you had done before being breached
  • DFIR
6 non tech things you wish you had done before being breached

5 Min Read

Dec 03, 2024
6 non tech things you wish you had done before being breached
  • DFIR
6 non tech things you wish you had done before being breached

5 Min Read

Dec 03, 2024
BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365
  • DFIR
BEC-ware the Phish (part 3): Detect and Prevent Incidents in M365

8 Min Read

Nov 27, 2024
How we helped expose a £12 million rental scam
  • Consumer Advice
How we helped expose a £12 million rental scam

8 Min Read

Nov 19, 2024
IACS UR E26 and E27 guidance
  • Maritime Cyber Security
IACS UR E26 and E27 guidance

30 Min Read

Nov 14, 2024
Did security gaps at Antwerp port enable drug smuggling operations?
  • Maritime Cyber Security
Did security gaps at Antwerp port enable drug smuggling operations?

5 Min Read

Nov 12, 2024
BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365
  • DFIR
BEC-ware the Phish (part 2): Respond and Remediate Incidents in M365

14 Min Read

Nov 08, 2024
You lost your iPhone, but it’s locked. That’s fine, right?
  • DFIR
You lost your iPhone, but it’s locked. That’s fine, right?

5 Min Read

Nov 06, 2024
What goes into testing a ship?
  • Maritime Cyber Security
What goes into testing a ship?

8 Min Read

Nov 05, 2024
Maritime lawyers assemble!
  • Maritime Cyber Security
Maritime lawyers assemble!

6 Min Read

Nov 05, 2024
Mounting memory with MemProcFS for advanced memory forensics
  • DFIR
Mounting memory with MemProcFS for advanced memory forensics

10 Min Read

Oct 31, 2024
Testing the security of CCTV systems
  • Opinions
Testing the security of CCTV systems

4 Min Read

Oct 30, 2024
Using Volatility for advanced memory forensics
  • Internet Of Things
Using Volatility for advanced memory forensics

13 Min Read

Oct 24, 2024
BEC-ware the phish (part 1). Investigating incidents in M365
  • DFIR
BEC-ware the phish (part 1). Investigating incidents in M365

13 Min Read

Oct 15, 2024
Imposter syndrome in cyber security
  • Opinions
Imposter syndrome in cyber security

6 Min Read

Oct 10, 2024
How to handle vulnerability reports in aviation
  • Aviation Cyber Security
How to handle vulnerability reports in aviation

4 Min Read

Oct 09, 2024
Airbus Navblue Flysmart LPC-NG issues
  • Aviation Cyber Security
Airbus Navblue Flysmart LPC-NG issues

17 Min Read

Oct 01, 2024
How can you protect your data, privacy, and finances if your phone gets lost or stolen?
  • Consultancy advice
How can you protect your data, privacy, and finances if your phone gets lost or stolen?

15 Min Read

Sep 30, 2024
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking
  • Hardware Hacking
Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

8 Min Read

Sep 26, 2024
Proroute H685 4G router vulnerabilities
  • Vulnerability Advisory
Proroute H685 4G router vulnerabilities

12 Min Read

Sep 19, 2024
Cyber threats to shipping explained
  • Maritime Cyber Security
Cyber threats to shipping explained

14 Min Read

Sep 18, 2024
Living off the land, GPO style
  • Red Teaming
Living off the land, GPO style

11 Min Read

Sep 12, 2024
Smart home security advice. Ring, SimpliSafe, Swann, and Yale
  • Consultancy advice
Smart home security advice. Ring, SimpliSafe, Swann, and Yale

18 Min Read

Sep 10, 2024
Advanced forensic techniques for recovering hidden data in wearable devices
  • DFIR
Advanced forensic techniques for recovering hidden data in wearable devices

13 Min Read

Sep 04, 2024
How to enhance the security of your social media accounts
  • How Tos
How to enhance the security of your social media accounts

13 Min Read

Aug 30, 2024
How to root an Android device for analysis and vulnerability assessment
  • How Tos
How to root an Android device for analysis and vulnerability assessment

7 Min Read

Aug 23, 2024
Insights and highlights from DEF CON 32
  • Shameless Self Promotion
Insights and highlights from DEF CON 32

8 Min Read

Aug 16, 2024
Living off the land with Bluetooth PAN
  • Red Teaming
Living off the land with Bluetooth PAN

4 Min Read

Aug 12, 2024
Key safe security, or the lack of it
  • Opinions
Key safe security, or the lack of it

3 Min Read

Aug 07, 2024
Fuzzy matching with Ghidra BSim, a guide
  • Hardware Hacking
Fuzzy matching with Ghidra BSim, a guide

10 Min Read

Aug 05, 2024
Bootloaders explained
  • How Tos
Bootloaders explained

4 Min Read

Aug 01, 2024
Leave the World Behind, or don’t
  • Maritime Cyber Security
Leave the World Behind, or don’t

7 Min Read

Jul 24, 2024
Pen testing cruise ships
  • Maritime Cyber Security
  • Security Blog
Pen testing cruise ships

6 Min Read

Jul 08, 2024
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)
  • Security Blog
  • Vulnerability Advisory
RCE vulnerability in OpenSSH – RegreSSHion (CVE-2024-6387)

5 Min Read

Jul 02, 2024
Glastonbury ticket hijack vulnerability fixed
  • Security Blog
  • Vulnerability Disclosure
Glastonbury ticket hijack vulnerability fixed

4 Min Read

Jun 28, 2024
Dodgy disks. My 32TB SSD Adventure
  • How Tos
  • Security Blog
Dodgy disks. My 32TB SSD Adventure

3 Min Read

Jun 21, 2024
HUMINT in a cyber world
  • OPSEC
  • Security Blog
HUMINT in a cyber world

7 Min Read

Jun 20, 2024
UK PSTI? You’ll need a Vulnerability Disclosure Program! 
  • Security Blog
  • Vulnerability Disclosure
UK PSTI? You’ll need a Vulnerability Disclosure Program! 

5 Min Read

May 24, 2024
Impacts on ICS from the updated Cyber Assessment Framework (CAF)
  • OT, ICS, IIoT, SCADA
  • Security Blog
Impacts on ICS from the updated Cyber Assessment Framework (CAF)

5 Min Read

May 17, 2024
Pipedream ICS malware toolkit is a nightmare
  • DFIR
  • Security Blog
Pipedream ICS malware toolkit is a nightmare

5 Min Read

May 09, 2024
Vulnerabilities that (mostly) aren’t: LUCKY13
  • Vulnerabilities that aren't
Vulnerabilities that (mostly) aren’t: LUCKY13

5 Min Read

May 03, 2024
Bypassing MFA on Microsoft Azure Entra ID
  • How Tos
  • Security Blog
Bypassing MFA on Microsoft Azure Entra ID

7 Min Read

May 01, 2024
Can ships be hacked?
  • Maritime Cyber Security
  • Security Blog
Can ships be hacked?

15 Min Read

Apr 12, 2024
Navigating the perilous waters of conference invitations
  • Opinions
  • Security Blog
Navigating the perilous waters of conference invitations

3 Min Read

Mar 14, 2024
The big play of autonomous vehicles
  • Automotive Security
  • Security Blog
The big play of autonomous vehicles

5 Min Read

Mar 12, 2024
Living off the land with native SSH and split tunnelling
  • Red Teaming
  • Security Blog
Living off the land with native SSH and split tunnelling

5 Min Read

Mar 06, 2024
Advice for manufacturers on the coming PSTI regulation
  • Internet Of Things
  • Security Blog
Advice for manufacturers on the coming PSTI regulation

8 Min Read

Feb 23, 2024
No fix KrbRelay VMware style
  • Security Blog
  • Vulnerability Advisory
No fix KrbRelay VMware style

6 Min Read

Feb 21, 2024
Cyber security for Credit Unions 101
  • How Tos
  • Security Blog
Cyber security for Credit Unions 101

4 Min Read

Feb 20, 2024
QR Phishing. Fact or Fiction?
  • Security Blog
  • Social Engineering
QR Phishing. Fact or Fiction?

6 Min Read

Feb 15, 2024
Android Content Providers 101
  • Android
  • Security Blog
Android Content Providers 101

6 Min Read

Feb 13, 2024
Ski & bike helmets protect your head, not location or voice
  • Internet Of Things
  • Security Blog
Ski & bike helmets protect your head, not location or voice

7 Min Read

Feb 07, 2024
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager
  • Aviation Cyber Security
  • Security Blog
Hacking Electronic Flight Bags. Airbus NAVBLUE Flysmart+ Manager

6 Min Read

Feb 01, 2024
OSINT in 60 seconds. Mind reading on TV
  • OPSEC
  • Security Blog
OSINT in 60 seconds. Mind reading on TV

7 Min Read

Jan 30, 2024
10 years on from the Target breach. Has building cyber security improved?
  • OT, ICS, IIoT, SCADA
  • Security Blog
10 years on from the Target breach. Has building cyber security improved?

6 Min Read

Jan 24, 2024
Cockpit door lock auto-unlock is no surprise
  • Aviation Cyber Security
  • Security Blog
Cockpit door lock auto-unlock is no surprise

3 Min Read

Jan 10, 2024
Listening in at Latimer House. RF emissions and more
  • Opinions
  • Security Blog
Listening in at Latimer House. RF emissions and more

12 Min Read

Jan 09, 2024
1 2 3 … 10