NCC Group Research & Technology

Technical account for global cyber security & resilience provider, NCC Group. This account is run alongside the @NCCGroupplc corporate account.

[NCC Group Research & Technology @NCCGroupInfosec]

Our research paper by @daniel_rome covers the attack surface with practical hardening guidance for XBee module deployments
https://t.co/F0kikbtxbv
#IoTSecurity #DigiMesh #OT #CyberSecurity

[NCC Group Research & Technology @NCCGroupInfosec]

🧀🐀💰"A Telegram from Pyongyang" New @FoxIT research exposes how #Lazarus deploys 3 different RATs to target financial & cryptocurrency companies. #PondRAT #ThemeForestRAT #RemotePE IOCs & technical details ⬇️ https://t.co/WvjqhToPX1

[NCC Group Research & Technology @NCCGroupInfosec]

NCC Group EDG @alexjplaskett and @_mccaulay will present Pioneering Zero Days at Pwn2Own Automotive 2024 where they will describe their Pioneer Pwn2Own chain and demonstrate a proof-of-concept vehicle spyware implant

[NCC Group Research & Technology @NCCGroupInfosec]

This Saturday Alex Plaskett (@alexjplaskett) and McCaulay Hudson (@_mccaulay) from NCC EDG will present Revving Up: The Journey to Pwn2Own Automotive 2024 at @cybersaiyanIT in Rome, Italy.

[NCC Group Research & Technology @NCCGroupInfosec]

Don't forget tomorrow at 17:00GMT @alexjplaskett and @_mccaulay will present at @44con on Charging Ahead: Exploiting an EV Charger Controller at Pwn2Own 2024!
#Pwn2Own #CyberSecurity #infosec #EVSecurity #VulnerabilityResearch

[NCC Group Research & Technology @NCCGroupInfosec]

Our latest research findings and articles are now live on the NCC Group website! Dive into cutting-edge cybersecurity insights here: https://t.co/gXMsbCJ9YQ 🔍

Stay updated by subscribing to our RSS feed: https://t.co/m8cDjKNt11 📡 #Cybersecurity #Research

[NCC Group Research & Technology @NCCGroupInfosec]

Today at 11:20am @alexjplaskett and @robHerrera_ will demonstrate remote compromise of a Sonos device and audio capture implant at @BlackHatEvents. #BHUSA

[NCC Group Research & Technology @NCCGroupInfosec]

Don't forget! Tomorrow, on the 8th at 11:20am PST @alexjplaskett and @robHerrera_ present Listen Up: Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap at @BlackHatEvents #BHUSA

[NCC Group Research & Technology @NCCGroupInfosec]

Charging Ahead: Exploiting an EV Charger Controller at Pwn2Own 2024 will be presented at 44CON https://t.co/xcDVN4PPCu in September by Alex Plaskett (@alexjplaskett) & McCaulay Hudson (@_mccaulay) #44CON #CyberSecurity #InfoSec #EVSecurity #SecurityResearch

[NCC Group Research & Technology @NCCGroupInfosec]

Alex Plaskett (@alexjplaskett) & McCaulay Hudson (@_mccaulay) will be presenting "Revving up: the journey to pwn2own automotive 2024" at RomHack in September https://t.co/J7H1NF2Hnk #RomHack #CyberSecurity #AutomotiveSecurity #TechTalks #InfoSec #CarHacking #SecurityResearch

[NCC Group Research & Technology @NCCGroupInfosec]

Check out this trick that allows you to run binaries on embedded Linux without crosscompiling https://t.co/LiPUcCYAIV #security #cybersecurity #infosec #linux

[NCC Group Research & Technology @NCCGroupInfosec]

Cryptopals Guided Tour Episode 17 just went live (!!) https://t.co/x7kgGNBAfV
#infosec #cybersecurity #cryptopals #learning #cyrptography #ohhnoithasmath

[NCC Group Research & Technology @NCCGroupInfosec]

Do you want to learn more about Windows Exploit Engineering? @saidelike will be performing in-person training in Paris at @hexacon_fr on the 30th Sept-3rd of Oct https://t.co/eMhW5BkB0f

[NCC Group Research & Technology @NCCGroupInfosec]

Listen up! @alexjplaskett and @robHerrera_ will present Sonos Over-The-Air Remote Kernel Exploitation and Covert Wiretap at BlackHat USA 2024 @BlackHatEvents They will demonstrate remote compromise and microphone capture! #BHUSA
https://t.co/wE8zs58tM3

[NCC Group Research & Technology @NCCGroupInfosec]

Checkout the new NanoMIPS plugin/blog post that aided in reverse engineering a Mediatek-based 5G modem image! https://t.co/OwlQmtbFlx #cybersecurity #infosec #tech

[NCC Group Research & Technology @NCCGroupInfosec]

Have you ever heard that 1 + 1 does not always equal 2? That's the case with prompt injection. In this post, @JoseSelvi describes the non-deterministic nature of prompt injection and how to avoid missdetecting such vulnerability. https://t.co/0xmfecq4F0

[NCC Group Research & Technology @NCCGroupInfosec]

An update (1.5.1) has been released for Phoenix Contact CHARX SEC-3100 EV Charging Controllers which addresses vulnerabilities NCC Group EDG (@alexjplaskett @_mccaulay) exploited at Pwn2Own Automotive 2014.

https://t.co/afh3jNnPAF

https://t.co/aCu2fZFyG7

[NCC Group Research & Technology @NCCGroupInfosec]

Mark Tedman introduces a Telco Attack Testing Tool designed to enhance security testing methodologies within the telecommunications industry. https://t.co/3vxDFH8vXb #CyberSecurity #Telecommunications #InfoSec #NetworkSecurity

[NCC Group Research & Technology @NCCGroupInfosec]

Recent investigations by NCC Group’s Digital Forensics and Incident Response Team in APAC have uncovered significant deviations in Lorenz’s Tactics, Techniques, and Procedures, shedding light on the group’s evolving strategies
https://t.co/ryuYxc0SgI

[NCC Group Research & Technology @NCCGroupInfosec]

A race in time to find a replacement bug for Pwn2Own Toronto 2022!

EDG (@_mccaulay @alexjplaskett @saidelike @FidgetingBits) found and exploited another Netgear WAN command injection bug.

Blog: https://t.co/LYzURYQToF