Billy Rios

Security Researcher and Founder of

[Billy Rios @XSSniper]

@digitalbond @0psys @kjhiggins Oh man! Blast from the past!

[Billy Rios @XSSniper]

@iblueconnection If I recall correctly, you can do a firmware update via Bluetooth.

[Billy Rios @XSSniper]

@iblueconnection I looked at this device. It has Bluetooth correct? I wanted to dig deeper, but didn’t have time. Many of the program executables are written in Mono, so you can decompile then back to source! Shoot me an email address and I’ll send you what I have!

[Billy Rios @XSSniper]

I tried (and failed) to kill VBScript when I was the Security PM at Internet Explorer. Nice work @MicrosoftEdge! https://t.co/t05Y2I12ey

[Reza Kabiri-Moridifar @R3K4M0]

Just passed my GIAC Global Industrial Cyber Security Professional (GICSP). Very pleased and such releif. Thanks @SANSInstitute. @XSSniper

[Billy Rios @XSSniper]

@blowdart Ha! Awesome! Gifar continues to live on!

[Rob Joyce @RGB_Lights]

The cybersecurity community lost a great asset to a long fight with cancer. Mike Asante will be missed. He was ahead of his time with speacilized focus on SCADA and industrial controls.

https://t.co/hojJYSt79Q

[Billy Rios @XSSniper]

@shaundnichols @barnaby_jack @jradcliffe02 No. If the radio features are turned on, we can take over the insulin pump features.

[Billy Rios @XSSniper]

I’m proud to have carried on @barnaby_jack & @jradcliffe02’s security research on insulin pumps! They are the true trailblazers in medical device cyber security - https://t.co/6FhFcW2Acg

[Billy Rios @XSSniper]

@shaundnichols @barnaby_jack @jradcliffe02 The vulnerabilities affect the radio features. They use a custom radio protocol and the vulnerabilities were exploited through the use of Software Defined Radios

[Billy Rios @XSSniper]

@lfservin @barnaby_jack @jradcliffe02 My coworkers will describe the vulnerabilities in detail and demo the exploits this July at the Cyber Security Summit in Brazil

[Billy Rios @XSSniper]

@ryanaraine We demo’d an exploit against these pumps at Blackhat USA 2018. The radio features are pretty dangerous https://t.co/8YCow1ig4g

[Billy Rios @XSSniper]

@invlpgtbl Sure, DM me your email addy and I'll put them on Box for you!

[Billy Rios @XSSniper]

@blowdart It's the gif that keeps on giving

[AnnaWerner @annawerner]

Medical devices like pacemakers and insulin pumps vulnerable to hacking: researchers @XSSniper and Jonathan Butts talk to us about their findings on @Medtronic devices:
https://t.co/bYiF2GVjrg

[Billy Rios @XSSniper]

@UliRies Yes, we reverse engineered the firmware update process for two different pacemakers.

[Billy Rios @XSSniper]

@sallyshin This is not true. Medtronic is confusing two different vulnerabilities. There is no security patch from Medtronic for the issue we demonstrated today.

[Billy Rios @XSSniper]

Oh snap! Congrats man! https://t.co/QOjcQ7feIV

[mdowd @mdowd]

Excited to announce that Azimuth Security has been acquired! https://t.co/oLEhjagjGA

[Billy Rios @XSSniper]

@lcamtuf Congrats man! Good luck on your next endeavor!

[Billy Rios @XSSniper]

@Doc_Butts and I found vulnerabilities in a pacemaker programmer. Honestly, I'm disappointed in how @Medtronic handled the entire process. I'll be releasing timelines, vulnerability details, and our analysis later this year! https://t.co/6FjLchkDo3