TL;DR Introduction We spend a lot of time in industrial environments. Power stations, water treatment works, gas distribution ...

Breaking In: from rejection emails to my first pentest reports Jenny is sharing her experience of breaking into the ...

TL;DR Introduction On the 20th of October two critical vulnerabilities affecting the PHP engine were publicly disclosed, ...

James Beamish and Aaron Thacker will be at the ISC2 East of England Chapter: When Cyber Gets Physical & Planning for Q Day.

Built on five years of hands on, community led events, it has grown into something a bit different from the usual cyber event. More practical. More interactive. More time with the people doing the ...

Our Ken Munro will be presenting Flirting with AI: Pwning websites through their AI chatbot agents and politely breaking guard rails. The session will explore how AI chatbot agents can create new ...

Earlier this year I found myself in need of various cheap electronic components. So naturally I turned to AliExpress. I came across a listing for a cheap “32TB Portable SSD”. I knew this was too good ...

If you are distributing or selling smart devices in to the UK market, your products will need to be compliant with the UK Product Security and Telecommunications Act.

I’ve had a keen interest in the original RottenPotato and JuicyPotato exploits that utilize DCOM and NTLM reflection to perform privilege escalation to SYSTEM from service accounts. The applications ...

PTP has a myriad of customers coming for help to improve their security posture. They usually default to one framework, ISO 27001. But ISO 27001 is not your only option. Let me introduce the Secure ...

As Red Teamers, we often find information in SharePoint that can be useful for us in later attacks. As part of this we regularly want to download copies of the file, or parts of their contents. In ...