sales[ ]midnightblue[ ]nl
PGP (0x9035856DF1D41F73)
A discussion of the process, efforts and challenges of constructing implants for ICS embedded devices and operational technology (OT) payloads for carrying out cyber-physical attacks
Read more
A discussion of an incident targeting Schneider Triconex, along with its background, the TRITON attack framework and the attack payload.
Research into the internals of the BlackBerry QNX OS which uncovered various flaws
We cover QNX's Qnet native networking protocol and the CVE-2017-3891 Elevation of Privilege vulnerability we discovered in it.
While vehicle immobilizer transponders have gotten increasingly advanced, the authentication between the BCM and ECM is still overlooked. We analyze three systems and break two
Research uncovering flaws in the RNGs of multiple embedded OSes
In this post we discuss exploiting a vulnerability in DarkComet’s C2 server as well as a new vulnerability affecting earlier versions of Poison Ivy.