@NCCGroupInfosec

Technical account for global cyber security & resilience provider, NCC Group. This account is run alongside the @NCCGroupplc corporate account.

 Global
research.nccgroup.com
Joined April 2011
  • Tweets6.3K
  • Following2.2K
  • Followers19.5K
447Media
Our research paper by @daniel_rome covers the attack surface with practical hardening guidance for XBee module deployments nccgroup.com/research/scalin… #IoTSecurity #DigiMesh #OT #CyberSecurity

Scaling the Mesh: Best Practices for Securing DigiMesh Environments

Scaling the Mesh: Best Practices for Securing DigiMesh Environments

nccgroup.com
1
3
932
🧀🐀💰"A Telegram from Pyongyang" New @FoxIT research exposes how #Lazarus deploys 3 different RATs to target financial & cryptocurrency companies. #PondRAT #ThemeForestRAT #RemotePE IOCs & technical details ⬇️ blog.fox-it.com/2025/09/01/t…

Three Lazarus RATs coming for your cheese

Authors: Yun Zheng Hu and Mick Koomen Introduction In the past few years, Fox-IT and NCC Group have conducted multiple incident response cases involving a Lazarus subgroup that specifically targets…

blog.fox-it.com
1
5
12
3,075
NCC Group EDG @alexjplaskett and @_mccaulay will present Pioneering Zero Days at Pwn2Own Automotive 2024 where they will describe their Pioneer Pwn2Own chain and demonstrate a proof-of-concept vehicle spyware implant
4
16
4,881
This Saturday Alex Plaskett (@alexjplaskett) and McCaulay Hudson (@_mccaulay) from NCC EDG will present Revving Up: The Journey to Pwn2Own Automotive 2024 at @cybersaiyanIT in Rome, Italy.
1
6
2,728
Don't forget tomorrow at 17:00GMT @alexjplaskett and @_mccaulay will present at @44con on Charging Ahead: Exploiting an EV Charger Controller at Pwn2Own 2024! #Pwn2Own #CyberSecurity #infosec #EVSecurity #VulnerabilityResearch
5
8
3,734
Our latest research findings and articles are now live on the NCC Group website! Dive into cutting-edge cybersecurity insights here: nccgroup.com/us/research-blo… 🔍 Stay updated by subscribing to our RSS feed: nccgroup.com/us/research-blo… 📡 #Cybersecurity #Research
1
1
3
1,727
Today at 11:20am @alexjplaskett and @robHerrera_ will demonstrate remote compromise of a Sonos device and audio capture implant at @BlackHatEvents. #BHUSA
4
1,307
Don't forget! Tomorrow, on the 8th at 11:20am PST @alexjplaskett and @robHerrera_ present Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap at @BlackHatEvents #BHUSA
4
1
14
2,254
Charging Ahead: Exploiting an EV Charger Controller at Pwn2Own 2024 will be presented at 44CON 44con.com/44con-2024-talks-a… in September by Alex Plaskett (@alexjplaskett) & McCaulay Hudson (@_mccaulay) #44CON #CyberSecurity #InfoSec #EVSecurity #SecurityResearch

44CON 2024 Talks and Workshops | 44CON

44con.com
1
13
1,962
Alex Plaskett (@alexjplaskett) & McCaulay Hudson (@_mccaulay) will be presenting "Revving up: the journey to pwn2own automotive 2024" at RomHack in September romhack.io/romhack-conferenc… #RomHack #CyberSecurity #AutomotiveSecurity #TechTalks #InfoSec #CarHacking #SecurityResearch

RomHack Conference 2024 - Agenda

This is the agenda of the 7th edition of RomHack conference that will take place on Saturday, 28 September 2024

romhack.io
1
1
8
1,660
Check out this trick that allows you to run binaries on embedded Linux without crosscompiling research.nccgroup.com/2024/0… #security #cybersecurity #infosec #linux

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

nccgroup.com
2
1
29
3,118
Cryptopals Guided Tour Episode 17 just went live (!!) youtube.com/watch?v=6yHM19rQ… #infosec #cybersecurity #cryptopals #learning #cyrptography #ohhnoithasmath
3
1,466
Do you want to learn more about Windows Exploit Engineering? @saidelike will be performing in-person training in Paris at @hexacon_fr on the 30th Sept-3rd of Oct hexacon.fr/trainer/halbronn/
4
10
2,605
Listen up! @alexjplaskett and @robHerrera_ will present Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap at BlackHat USA 2024 @BlackHatEvents They will demonstrate remote compromise and microphone capture! #BHUSA blackhat.com/us-24/briefings…
2
13
2,308
Checkout the new NanoMIPS plugin/blog post that aided in reverse engineering a Mediatek-based 5G modem image! research.nccgroup.com/2024/0… #cybersecurity #infosec #tech
2
7
23
6,545
Have you ever heard that 1 + 1 does not always equal 2? That's the case with prompt injection. In this post, @JoseSelvi describes the non-deterministic nature of prompt injection and how to avoid missdetecting such vulnerability. research.nccgroup.com/2024/0…
1
4
8
2,070
An update (1.5.1) has been released for Phoenix Contact CHARX SEC-3100 EV Charging Controllers which addresses vulnerabilities NCC Group EDG (@alexjplaskett @_mccaulay) exploited at Pwn2Own Automotive 2014. cert.vde.com/en/advisories/V… phoenixcontact.com/en-gb/pro…
1
2
4
2,934
Mark Tedman introduces a Telco Attack Testing Tool designed to enhance security testing methodologies within the telecommunications industry. research.nccgroup.com/2024/0… #CyberSecurity #Telecommunications #InfoSec #NetworkSecurity

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

nccgroup.com
1
1
7
1,454
Recent investigations by NCC Group’s Digital Forensics and Incident Response Team in APAC have uncovered significant deviations in Lorenz’s Tactics, Techniques, and Procedures, shedding light on the group’s evolving strategies research.nccgroup.com/2024/0…
1
2
1,549
A race in time to find a replacement bug for Pwn2Own Toronto 2022! EDG (@_mccaulay @alexjplaskett @saidelike @FidgetingBits) found and exploited another Netgear WAN command injection bug. Blog: research.nccgroup.com/2024/0…
1
8
19
3,175
Load more