Recep
@recepsec.bsky.social
The first-ever smart thermostat ransomware vulnerability was demonstrated in 2016: smart thermostat with an SD card slot for custom settings/wallpapers lacked file-type verification when executing files from the SD card. Attackers could disguise malware as benign files.
www.vice.com/en/article/i...
www.vice.com/en/article/i...
March 19, 2025 at 12:47 PM
The first-ever smart thermostat ransomware vulnerability was demonstrated in 2016: smart thermostat with an SD card slot for custom settings/wallpapers lacked file-type verification when executing files from the SD card. Attackers could disguise malware as benign files.
www.vice.com/en/article/i...
www.vice.com/en/article/i...
AIoT framework called MSF-Net for WiFi-based human activity recognition. Unlike typical IoT systems, MSF-Net enables local data acquisition and real-time decision-making. The research aims to improve smart home applications.
ieeexplore.ieee.org/stamp/stamp....
ieeexplore.ieee.org/stamp/stamp....
March 19, 2025 at 12:33 PM
AIoT framework called MSF-Net for WiFi-based human activity recognition. Unlike typical IoT systems, MSF-Net enables local data acquisition and real-time decision-making. The research aims to improve smart home applications.
ieeexplore.ieee.org/stamp/stamp....
ieeexplore.ieee.org/stamp/stamp....
Light Ears: Information Leakage via Smart Lights
Attacks exploit smart lights' infrared for data exfiltration and multimedia visualization for media inference, lacking proper access control.
What do we know about IoT cybersecurity?
arxiv.org/pdf/1808.07814
Attacks exploit smart lights' infrared for data exfiltration and multimedia visualization for media inference, lacking proper access control.
What do we know about IoT cybersecurity?
arxiv.org/pdf/1808.07814
March 19, 2025 at 12:28 PM
Light Ears: Information Leakage via Smart Lights
Attacks exploit smart lights' infrared for data exfiltration and multimedia visualization for media inference, lacking proper access control.
What do we know about IoT cybersecurity?
arxiv.org/pdf/1808.07814
Attacks exploit smart lights' infrared for data exfiltration and multimedia visualization for media inference, lacking proper access control.
What do we know about IoT cybersecurity?
arxiv.org/pdf/1808.07814
Vienna State Opera is something else.
March 16, 2025 at 2:36 PM
Vienna State Opera is something else.
I recently read the Venture Security blog: 10 Commandments of Commercial Security.
Adi Shamir—one of the minds behind RSA encryption—shared 10 timeless principles for building secure systems. Nearly 30 years later, they remain just as relevant.
ventureinsecurity.net/p/10-princip...
Adi Shamir—one of the minds behind RSA encryption—shared 10 timeless principles for building secure systems. Nearly 30 years later, they remain just as relevant.
ventureinsecurity.net/p/10-princip...
March 11, 2025 at 7:10 PM
I recently read the Venture Security blog: 10 Commandments of Commercial Security.
Adi Shamir—one of the minds behind RSA encryption—shared 10 timeless principles for building secure systems. Nearly 30 years later, they remain just as relevant.
ventureinsecurity.net/p/10-princip...
Adi Shamir—one of the minds behind RSA encryption—shared 10 timeless principles for building secure systems. Nearly 30 years later, they remain just as relevant.
ventureinsecurity.net/p/10-princip...
The New Hub for Spyware Startups?
Barcelona has become a major hub for cybercriminals due to its low cost compared to other tech hubs, and after the NSO scandal, Israeli hackers have also shifted their operations to the city, TechCrunch’s Cybersecurity Writer Lorenzo Franceschi-Bicchierai said.
Barcelona has become a major hub for cybercriminals due to its low cost compared to other tech hubs, and after the NSO scandal, Israeli hackers have also shifted their operations to the city, TechCrunch’s Cybersecurity Writer Lorenzo Franceschi-Bicchierai said.
March 11, 2025 at 7:09 PM
The New Hub for Spyware Startups?
Barcelona has become a major hub for cybercriminals due to its low cost compared to other tech hubs, and after the NSO scandal, Israeli hackers have also shifted their operations to the city, TechCrunch’s Cybersecurity Writer Lorenzo Franceschi-Bicchierai said.
Barcelona has become a major hub for cybercriminals due to its low cost compared to other tech hubs, and after the NSO scandal, Israeli hackers have also shifted their operations to the city, TechCrunch’s Cybersecurity Writer Lorenzo Franceschi-Bicchierai said.
The book highlights threats like UAS misuse, GNSS spoofing, and physical layer attacks (e.g., jamming), which have likely intensified with technological advancements and geopolitical tensions. Here are the main points:
- Drones Can Be Dangerous: spying, attacks, or hacking aviation systems.
- Drones Can Be Dangerous: spying, attacks, or hacking aviation systems.
March 11, 2025 at 7:07 PM
The book highlights threats like UAS misuse, GNSS spoofing, and physical layer attacks (e.g., jamming), which have likely intensified with technological advancements and geopolitical tensions. Here are the main points:
- Drones Can Be Dangerous: spying, attacks, or hacking aviation systems.
- Drones Can Be Dangerous: spying, attacks, or hacking aviation systems.
As connectivity increases, so do cybersecurity risks. How Is Aviation Cybersecurity Today?
Aircraft and air traffic systems are increasingly reliant on networked technologies (e.g., IoT, LDACS, ADS-B), improving efficiency but exposing them to cyber threats.
Aircraft and air traffic systems are increasingly reliant on networked technologies (e.g., IoT, LDACS, ADS-B), improving efficiency but exposing them to cyber threats.
March 11, 2025 at 7:07 PM
As connectivity increases, so do cybersecurity risks. How Is Aviation Cybersecurity Today?
Aircraft and air traffic systems are increasingly reliant on networked technologies (e.g., IoT, LDACS, ADS-B), improving efficiency but exposing them to cyber threats.
Aircraft and air traffic systems are increasingly reliant on networked technologies (e.g., IoT, LDACS, ADS-B), improving efficiency but exposing them to cyber threats.
Aviation is no longer just about aircraft and pilots—it’s a complex cyber-physical system heavily reliant on digital infrastructure. I recently had a chance to take a look at the book "Aviation Cybersecurity: Foundations, Principles, and Applications".
March 11, 2025 at 7:07 PM
Aviation is no longer just about aircraft and pilots—it’s a complex cyber-physical system heavily reliant on digital infrastructure. I recently had a chance to take a look at the book "Aviation Cybersecurity: Foundations, Principles, and Applications".
82% of respondents lack confidence that IoT devices protect user privacy and data. WWF’s State of the Connected World 2023 Edition says transparency is key: tell users what data is collected, who gets it, and what it could mean.
March 11, 2025 at 7:03 PM
82% of respondents lack confidence that IoT devices protect user privacy and data. WWF’s State of the Connected World 2023 Edition says transparency is key: tell users what data is collected, who gets it, and what it could mean.
Are we aware of Internet of Things (IoT) security?
I am playing around with IoT devices and recently found a great resource to build in my VirtualBox, AttifyOS. It is a distro for the penetration testing of IoT devices.
I am playing around with IoT devices and recently found a great resource to build in my VirtualBox, AttifyOS. It is a distro for the penetration testing of IoT devices.
March 11, 2025 at 7:02 PM
Are we aware of Internet of Things (IoT) security?
I am playing around with IoT devices and recently found a great resource to build in my VirtualBox, AttifyOS. It is a distro for the penetration testing of IoT devices.
I am playing around with IoT devices and recently found a great resource to build in my VirtualBox, AttifyOS. It is a distro for the penetration testing of IoT devices.
Ahahahahha, work/life balance is broken crypto guys!!
February 13, 2025 at 10:30 AM
Ahahahahha, work/life balance is broken crypto guys!!
One of the very important thing when you start to invest something:
February 6, 2025 at 2:03 PM
One of the very important thing when you start to invest something:
Here is how you invest the future:
February 3, 2025 at 3:34 PM
Here is how you invest the future:
Recently I read, very much correct from J. Bezos:
"Stress primarily comes from not taking action over something that you can have some control over. So if some particular thing is causing me to have stress, that is a warning flag. "
"Stress primarily comes from not taking action over something that you can have some control over. So if some particular thing is causing me to have stress, that is a warning flag. "
February 3, 2025 at 3:33 PM
Recently I read, very much correct from J. Bezos:
"Stress primarily comes from not taking action over something that you can have some control over. So if some particular thing is causing me to have stress, that is a warning flag. "
"Stress primarily comes from not taking action over something that you can have some control over. So if some particular thing is causing me to have stress, that is a warning flag. "
That is the engineering we need to see.
February 3, 2025 at 3:33 PM
That is the engineering we need to see.
Alexandre Borges has one of the best articles about Reverse Engineering - Malware Analysis. If you are interested, take a look at them!
February 3, 2025 at 3:30 PM
Alexandre Borges has one of the best articles about Reverse Engineering - Malware Analysis. If you are interested, take a look at them!
Europe needs to change something.
December 4, 2024 at 7:00 AM
Europe needs to change something.
No way.
They get smarter everyday!
They get smarter everyday!
December 3, 2024 at 3:15 PM
No way.
They get smarter everyday!
They get smarter everyday!
Good research about Google Health app, and data security.
Important to know where we store our health data, what permissions we give to third parties.
Researches shows how to manipulate the data to play with your health.
#DeepSec conf was interesting.
Important to know where we store our health data, what permissions we give to third parties.
Researches shows how to manipulate the data to play with your health.
#DeepSec conf was interesting.
November 22, 2024 at 3:53 PM
Good research about Google Health app, and data security.
Important to know where we store our health data, what permissions we give to third parties.
Researches shows how to manipulate the data to play with your health.
#DeepSec conf was interesting.
Important to know where we store our health data, what permissions we give to third parties.
Researches shows how to manipulate the data to play with your health.
#DeepSec conf was interesting.
