Fidus InfoSecurity

Providing Penetration Testing & consultancy services to global clients, ranging from FTSE 100 companies to SME's.

[Fidus InfoSecurity @FidusInfoSec]

When a new Apple product arrives the team get to put their play hat on 👀

[Fidus InfoSecurity @FidusInfoSec]

XSSLash – A Tale of Playing Quiplash at Work

https://t.co/UX4bvwTMM7

[Fidus InfoSecurity @FidusInfoSec]

Luckily I had the final sleigh on the December budget and chose a slap-up meal for the team. Fortunately, a quick song off fiverr and 1 animation later, I present #FidizNavidad... #MoveOverJohnLewis #DieHardIsAChristmasFilm #StaySafeOnline

[Fidus InfoSecurity @FidusInfoSec]

Great work by the team again! Doing our bit to make the internet a safer place.

[Fidus InfoSecurity @FidusInfoSec]

After our security report yesterday, the team behind the eRosary application have already issued a fix and we can disclose more: https://t.co/mrYuPJFNeO

[Fidus InfoSecurity @FidusInfoSec]

Less than 5 minutes into looking at the eRosary application our research team has developed a full account takeover exploit. Can obtain e-mails, phone numbers, height, weight and other personal data. This has been reported. Luckily it's so new it's not in the wild yet.

[Fidus InfoSecurity @FidusInfoSec]

Tune in to BBC Digital Planet on BBC World Radio (@bbcworldservice) this evening to listen to a member of our team talk about our recent discovery regarding GPS fall detection devices.

#BBC #DigitalPlanet

[TechCrunch @TechCrunch]

Exclusive: Thousands of GPS trackers used to monitor kids and elderly patients can be remotely triggered to disclose their real-time location and can remotely activate its microphone.

Worse, the researchers say there's no fix.
https://t.co/0EEYaCoc0m

[Fidus InfoSecurity @FidusInfoSec]

Exploiting 10,000+ Devices Used by Britain’s Most Vulnerable - One of the most concerning vulnerabilities we've ever identified!

https://t.co/7PZ1cpvoaJ

[Threatpost @threatpost]

A #security flaw in the popular anti-piracy Widevine framework could allow attackers to download premium content, such as #Netflix’s Stranger Things.

https://t.co/WzmjfyawJO

[Fidus InfoSecurity @FidusInfoSec]

Breaking Widevine/DRM's to Download Content from Netflix (and others)

https://t.co/1Dygdk8IjY

[Fidus InfoSecurity @FidusInfoSec]

In this blog post we look at the epidemic of keyless car thefts and how a proactive approach by a single car manufacturer is stopping criminals in their tracks.

https://t.co/cfJq2hSK5l

[Fidus InfoSecurity @FidusInfoSec]

Watch how a proactive approach to security can prevent your car from being stolen, as happened to a friend of Fidus. Tesla implemented security measures, including disabling passive entry, to stop criminals in their tracks. Your signal boosters won't work here.. @Tesla @elonmusk

[Fidus InfoSecurity @FidusInfoSec]

And they still click the link #RedTeam #Phishing #ITSecurity #Hacking

[Fidus InfoSecurity @FidusInfoSec]

This weeks homework for our employees is Film Night (or afternoon!). Every week a hacker themed film will be watched by Fidus employees and discussed afterward. This week it’s #Hackers. #FilmNight #Homework #Cybersecurity #Pentesting #HappyFriday

[Fidus InfoSecurity @FidusInfoSec]

Ever wondered how simple it can be to identify vulnerabilities in IOT devices? Find out here:

https://t.co/wzm2Ujbac3

[Fidus InfoSecurity @FidusInfoSec]

What happens when you take a look at protections against malicious logins? Tears. Tears happen.

https://t.co/2OXQaNKmmn

[Fidus InfoSecurity @FidusInfoSec]

ROP chaining and ASLR bypassing? Yes please..

https://t.co/yO7mryGlhj

[Fidus InfoSecurity @FidusInfoSec]

Interesting in exploit development? Want to see how we achieved code execution without fuzzing?

https://t.co/0EpY1i81V4

[SteelCon @Steel_Con]

Thanks to our Iron sponsors

@amazon
@secureworks
@fidusinfosec
@coopuk

And our Iron supporter

@hsbc_uk