TL;DR Introduction We spend a lot of time in industrial environments. Power stations, water treatment works, gas distribution ...

Breaking In: from rejection emails to my first pentest reports Jenny is sharing her experience of breaking into the ...

TL;DR Introduction On the 20th of October two critical vulnerabilities affecting the PHP engine were publicly disclosed, ...

James Beamish and Aaron Thacker will be at the ISC2 East of England Chapter: When Cyber Gets Physical & Planning for Q Day.

Our Ken Munro will be presenting Flirting with AI: Pwning websites through their AI chatbot agents and politely breaking guard rails. The session will explore how AI chatbot agents can create new ...

Built on five years of hands on, community led events, it has grown into something a bit different from the usual cyber event. More practical. More interactive. More time with the people doing the ...

If you are distributing or selling smart devices in to the UK market, your products will need to be compliant with the UK Product Security and Telecommunications Act.

I’ve had a keen interest in the original RottenPotato and JuicyPotato exploits that utilize DCOM and NTLM reflection to perform privilege escalation to SYSTEM from service accounts. The applications ...

As Red Teamers, we often find information in SharePoint that can be useful for us in later attacks. As part of this we regularly want to download copies of the file, or parts of their contents. In ...

An interesting incident response investigation showed exploitation of a recent OAuth related consent-phishing issue. We had been asked to investigate as the organisation had noticed some odd ...

As we know one of the main issues facing defenders, especially in large environments, is protecting against threat actors after they gain a foothold in the environment. If an attacker lands on a ...