Moritz Abrell

IT Security Enthusiast; Penetration Tester; Security Researcher

[Moritz Abrell @moritz_abrell]

Finally published the blog post about abusing @Zoom for remote attacks on endponits:

https://t.co/ExkeyYooBM

It was fun to present this at @BlackHatEvents

[Ray Maker @dcrainmakerblog]

An interesting wrap-up presentation from the security researcher who found the COROS watch security vulnerabilities last year. Worth a watch if you're into geekery: https://t.co/dA7G5zWHnO

[Moritz Abrell @moritz_abrell]

Great work and write-up!

[Matthias Deeg @matthiasdeeg]

Today, a tech blog article by my colleague Christian Zäske titled "MeshHacks: Exploiting Linksys Intelligent Mesh from the Internet" concerning six security vulnerabilities in different Linksys routers was published.

https://t.co/WURPqYK3hl

[Moritz Abrell @moritz_abrell]

Had a great time at @hardwear_io 2025. Awesome conference!

https://t.co/2QTDOrCaRb

[Matthias Deeg @matthiasdeeg]

Today, I have published a new YouTube video about browser swapping attacks, demonstrating and explaining a security issue in OAuth 2.0 that my colleague Jonas Primbs found.

https://t.co/pxydaAKMIJ

[hardwear.io @hardwear_io]

⌚ A sports watch you trust on every run…or do you?

At #hw_ioNL2025 Moritz Abrell takes us behind the scenes of the #COROSPACE3, where a routine BLE assessment spiralled into discovering hidden vulnerabilities & a public wake-up call for the vendor.

👉https://t.co/NqVUh0XkU5

[Matthias Deeg @matthiasdeeg]

I'm back home from the beautiful city of Bergamo and the awesome @nohatcon.

Today, we have published the security advisories concerning the Verbatim security update I was talking about on Saturday in my presentation "Your Security Update is Not Secure Enough".

[Gerhard Klostermeier @iiiikarus]

The talk recording can now be found on YouTube https://t.co/8ZbGW6bOlB

[Moritz Abrell @moritz_abrell]

Excited to contribute to the content of this year‘s @hardwear_io . Looking forward to Amsterdam!
https://t.co/HjnjkyPDP6

[Matthias Deeg @matthiasdeeg]

Today, my colleague @moritz_abrell published a new tech blog article titled "Automated Patch Diff Analysis using LLMs", and it's about what its title suggests. 😄

If you're interested in LLM-based workflows and IT security, you should read it here:

https://t.co/XGbRcZ5YA6

[Memfault @Memfault]

Our favorite articles & learnings from July by @moritz_abrell, @azonenberg, @iarsystems, @koehlma, @linuxfoundation, @cratesiostatus, @Raspberry_Pi, @EbenUpton, @qtproject, @JLCPCB, @ZephyrIoT, and more!

Read our latest monthly roundup on Interrupt, Memfault's developer blog & community: https://t.co/UAwzX07l7g

#embedded #embeddedsystems #firmware #hardware #iot

[0xor0ne @0xor0ne]

Introduction to Voltage Glitching (STM32L051 microcontroller)

https://t.co/7xBgAHkXC2

Credits @BartimaeusvUruk

#hardware #infosec

[Moritz Abrell @moritz_abrell]

@dcrainmakerblog Thanks for sharing

[Moritz Abrell @moritz_abrell]

@runnersworld Check this out:

https://t.co/4ZR2kqUt35

[Moritz Abrell @moritz_abrell]

Today we published the blog post about the BLE analysis of a COROS PACE3 sports watch:

https://t.co/4ZR2kqUt35

#CVE #Vulnerability #BLE #COROS

[Moritz Abrell @moritz_abrell]

Check out the discovery and analysis of CVE-2025-33073 by my colleagues.
A vulnerability with real-world impact.

https://t.co/fHkgXs6Vzx

[Matthias Deeg @matthiasdeeg]

Today, my new blog article titled "Voltage Glitching with the Pico Glitcher and Findus" was published.

You can find it on the SySS Tech Blog:
https://t.co/4jifAWrE1I

[Moritz Abrell @moritz_abrell]

Check out our today published CVEs on @AudioCodes Session Border Controller and One Voice Operation Center.
Unauthenticated path traversal, hard-coded keys and unauthenticated persistent XSS.
https://t.co/7W9SDuryak

CVE-2024-52883
CVE-2024-52882
CVE-2024-52884
CVE-2024-52881

[Matthias Deeg @matthiasdeeg]

Today, I've published the security advisory SYSS-2024-085 (CVE-2024-38499) concerning a security vulnerability in the desktop and server management software CA Client Automation by @broadcom.

You can find further informationen in the SySS Pentest blog:
https://t.co/RAIhYTEnqo

[Matthias Kesenheimer @BartimaeusvUruk]

I am currently working on version 2 of the PicoGlitcher (https://t.co/v9x5aaKkPD) to perform #FaultInjection and #VoltageGlitching. Here is a teaser what it can achieve. Version 2 is capable of basic pulse-shaping.

[Matthias Deeg @matthiasdeeg]

Today, SySS published several security vulnerabilities concerning the SICK products InspectorP61x, InspectorP62x, and TiM3xx. These issues were found by my colleagues Manuel Stotz and Tobias Jäger.

You can find further information in the SySS blog:
https://t.co/QLu9u25SgX