Flipper Zeros often cause alarm on flights, but the real risk is far more limited. Here’s what they can and cannot do in an ...

On a recent Red Team engagement we got Domain Admin privileges on the on-premises Active Directory (AD) network. But we had not yet gained access to their cloud estate, which was hosted in Azure. Our ...

Unit 2, Verney Junction Business Park, ...

We help keep money in the banks, planes in the sky, and the lights on.

In my previous job as the SOC manager for a public sector organisation, I would often see attempts from scammers trying to get some unlucky employee’s payroll details changed to their own bank account ...

LPC-NG or Less Paper Cockpit – Next Generation is an electronic flight bag (EFB) application offered by Navblue, a part of Airbus. It’s used for calculating engine thrust requirements (perf) on ...

The Revolution Pi is a programmable logic controller (PLC) made by KUNBUS Gmbh. PLCs are ruggedised devices sitting near the lowest layer of an industrial network. They use simple I/O and fieldbus ...

I’ve had a keen interest in the original RottenPotato and JuicyPotato exploits that utilize DCOM and NTLM reflection to perform privilege escalation to SYSTEM from service accounts. The applications ...

My first DEF CON talk was nerve-racking but something I would definitely put myself through again. In hindsight I should have submitted a 45-minute talk as there were some elements missing from what I ...

Many organisations are turning to virtualisation of apps and desktops. This often involves virtualisation platforms such as Citrix to deliver these services. Get your configuration or lock-down wrong ...

In certain circumstances it can be challenging installing client applications for testing. Situations arise where the application could be provided unsigned or ...