Husn Canaries: Defense-In-Depth for AI Coding Assistant Governance
AI-powered coding assistants such as OpenAI Codex, Claude Code, GitHub Copilot, and similar tools are increasingly embedded in eve
Characterizing the Raspberry Pico 2 FI countermeasures – Part 1
After more than 10 years in chip security evaluations, I can confidently say that the RP2350 might be one of the most secure gener
New Academic Paper: Extraction of Secrets from 40nm CMOS Gate Dielectric Breakdown Antifuses by FIB Passive Voltage Contrast
Explore our novel attack technique for one-time-programmable antifuse memory. Learn about its significance in hardware security.
Exploring AMD Platform Secure Boot
Learn about the significance of the AMD Platform Secure Boot in maintaining a secure hardware environment and preventing firmware
Owning a Bitcoin ATM
Explore the security vulnerabilities of Bitcoin ATMs with our in-depth analysis of the Lamassu Douro ATM and its risks.
Back to the Future with Platform Security
Explore the risks of AMD platform misconfigurations and how they can lead to critical vulnerabilities in system security.
Applying Fault Injection to the Firmware Update Process of a Drone
Discover how fault injection in drones could enable attacks on security features, posing risks to various drone applications.
Adventures in the Platform Security Coordinated Disclosure Circus
Learn how IOActive is addressing platform security challenges, including recent findings on ASUS Rog Strix G513QR vulnerabilities.
Exploring the security configuration of AMD platforms
Uncover vulnerabilities in the security configuration of AMD platforms, including an exploration of SMM challenges.
NFC RELAY ATTACK ON TESLA MODEL Y
Uncover the technical details of a Tesla Model Y cyber attack. Understand how NFC relay attacks pose a security risk.
Satellite (In)security: Vulnerability Analysis of Wideye SATCOM Terminals
Find out the security risks associated with SATCOM terminals. Our report details vulnerabilities in Wideye iSavi and Ranger 5000.
Batteries Not Included: Reverse Engineering Obscure Architectures
Learn about reverse engineering obscure architectures, and see how we achieved full decompilation using Binary Ninja and Blackfin.
Biometric Hacking: Face Authentication Systems
Explore our findings on Face Authentication Systems cybersecurity and discover vulnerabilities in popular mobile devices.
How we hacked your billion-dollar company for forty-two bucks
Explore the nuances of hacking a billion-dollar company and the weaknesses in their Internet perimeters that can be exploited.
Cracking the Snapcode
Learn about the intricacies of hacking snapcodes and how different barcode systems work to store and read data.
Breaking Protocol (Buffers): Reverse Engineering gRPC Binaries
Uncover the intricacies of reverse engineering gRPC binaries, focusing on communication via HTTP and protocol buffers.
Watch Your Step: Research Into the Concrete Effects of Fault Injection on Processor State via Single-Step Debugging
Explore the concept of voltage fault injection and its applications in testing electronic systems and enhancing their reliability.
Probing and Signal Integrity Fundamentals for the Hardware Hacker, part 2: Transmission Lines, Impedance, and Stubs
Learn the fundamentals for the hardware hacker, including crucial concepts of high-speed signals and their impact on electronics.
A Practical Approach to Attacking IoT Embedded Designs (II)
Explore the vulnerabilities in wireless protocols affecting IoT embedded designs. Learn how these flaws can lead to attacks.
A Practical Approach To Attacking IoT Embedded Designs (I)
Delve into the complexities of attacking IoT embedded designs and discover the risks involved in device security.
Probing and Signal Integrity Fundamentals for the Hardware Hacker
Discover essential fundamentals for the hardware hacker. Improve your skills in handling fast signals and complex technology.
TAPing the Stack for Fun and Profit: Shelling Embedded Linux Devices via JTAG
Explore cybersecurity for embedded Linux devices and understand the risks associated with JTAG interfaces in production.
Warcodes II - The Desko Case
Explore the vulnerabilities in DESKO products related to industrial barcode readers and learn about recent attack vectors.
CVE-2020-16877: Exploiting Microsoft Store Games
Uncover the exploitation of Microsoft Store games to elevate privileges, revealing a critical Windows vulnerability.
A journey into defeating regulated electronic cigarette protections
Understand the potential dangers of electronic cigarettes. This post examines how vulnerabilities can lead to weaponization risks.
Password Cracking: Some Further Techniques
Understand the mechanics of password cracking and the importance of one-way functions in protecting your passwords.
Uncovering Unencrypted Car Data in BMW Connected App
Explore cybersecurity for BMW Connected Apps and learn why encryption is vital for protecting sensitive data.
No buffers harmed: Rooting Sierra Wireless AirLink devices through logic bugs
Explore the vulnerabilities of Sierra Wireless AirLink devices and learn how to navigate the rooting process safely.
WSL 2.0 dxgkrnl Driver Memory Corruption
Explore the WSL 2.0 dxgkrnl Driver and its recent memory corruption fix in this insightful blog post on Linux kernel bugs.
Breaking Electronic Baggage Tags - Lufthansa vs British Airways
Dive into the world of hacking electronic baggage tags with our analysis of British Airways’ and Lufthansa’s solutions.
SCADA and Mobile Security in the IoT Era
Explore the risks of mobile cybersecurity in industrial control systems and how convenience can compromise security.