TL;DR Why EN 303 645 matters ETSI EN 303 645 has given consumer IoT security a much-needed baseline. It gives manufacturers, assessors, and product teams a shared view of reasonable IoT security and ...

Healthcare cybersecurity – understanding threats through an attacker’s lens 10:15 – 10:50 This keynote offers a perspective ...

Lessons from real-world aviation testing 15:30-16:25, Stage 1 Modern aircraft are among the most connected machines on earth, ...

We help keep money in the banks, planes in the sky, and the lights on.

Many organisations are turning to virtualisation of apps and desktops. This often involves virtualisation platforms such as Citrix to deliver these services. Get your configuration or lock-down wrong ...

LPC-NG or Less Paper Cockpit – Next Generation is an electronic flight bag (EFB) application offered by Navblue, a part of Airbus. It’s used for calculating engine thrust requirements (perf) on ...

Unit 2, Verney Junction Business Park, ...

My first DEF CON talk was nerve-racking but something I would definitely put myself through again. In hindsight I should have submitted a 45-minute talk as there were some elements missing from what I ...

Presented the very first proof of concept ransomware running on an embedded device: at DEFCON 24: ransomware on desktop and server operating systems is well known, but the challenge of creating ...

UK Office Pen Test Partners LLP, Unit 2, Verney Junction Business Park, Buckingham, MK18 2LB, United Kingdom +44 20 3095 0500 ...

I’ve had a keen interest in the original RottenPotato and JuicyPotato exploits that utilize DCOM and NTLM reflection to perform privilege escalation to SYSTEM from service accounts. The applications ...