The global leader in research-fueled cybersecurity services
Ioactive
- Tweets 9,877
- Following 2,422
- Followers 11,026
- Likes 1,096
That's a wrap on September's #hacksoho! Thanks to everyone who joined us in London and helped this community keep growing. Huge thanks to Nick Dunn for a great talk on data-bouncing exfiltration.
88
Internet-exposed OT. Different threat actors. The same fundamental risk.
IOActive examines the NCSC’s latest OT Alert alongside AA26-097A — without conflating attribution — and what CNI operators should prioritise next. ioactive.com/one-exposure-ma…
#OTSecurity #ICS #IOActive
1
211
We're just a couple of hours from going live with this month's hack::soho.
IOActive Senior Security Consultant Nick Dunn will present "A Stealth and Safety Issue: Exfiltration Using Data Bouncing," followed by an open discussion.
Tune in live! piped.video/live/TmDx1q3hTxM
292
Last call: hack::soho is TOMORROW (24 Sept). Nick Dunn is showing how "data bouncing" lets attackers exfiltrate data under the radar. Great talk, great crowd. Grab your spot! eventbrite.com/e/hacksoho-se…
#hacksoho #cybersecurity #infosec #RedTeam
292
Organizations managing risk reactively are nearly twice as likely to suffer a breach. These benchmarks show what separates mature IT risk management strategies from vulnerable ones. ioactive.com/it-risk-managem…
198
Check out our upcoming events! ioactive.com/events/
🌟 Sept. 24 | hack::soho | A Stealth and Safety Issue | Nick Dunn - eventbrite.com/e/hacksoho-se…
🌟 Oct. 1 – 3 | CornCon 2026 - corncon.net/
🌟 Oct. 29 – 30 | LASCON - lascon.org/
217
Sun, tapas, and hardware hacking — our Madrid Summer Fiesta had it all. 🎉 Thank you to everyone who came out, and huge props to our team for the great presentations and hosting. Good food, great people, unforgettable day. 🙌 #IOActive #MadridHardwareLab
1
2
308
A UK generator was offline for 4 days after a cyberattack. No confirmed attribution. No disclosed vector. What IS known: attack surface is measurable — and CISA, NCSC, DESNZ and Ofgem are all pointing the same direction.
Our breakdown 🧵 ioactive.com/internet-expose…
3
3
320
Hola!! La semana que viene tenemos un pequeño sarao en el lab de Madrid; habra charlas, comida, bebida y networking! No dudéis en apuntaros y compartirlo.
Podéis apuntaros aquí: eventbrite.com/e/ioactive-su…
Made with AI
241
Not all cybersecurity tests ask the same question. Compare the top cybersecurity testing methodologies, from vulnerability assessments to Red Teaming, and find the right fit. ioactive.com/cybersecurity-t…
239
Check out our upcoming events! info.ioactive.com/acton/fs/b…
🌟 9/17 | IOA Summer Fiesta - eventbrite.com/e/ioactive-su…
🌟 9/17 | OWASP Scotland Chapter Meeting - meetup.com/owasp-scotland-ch…
🌟 9/24 | hack::soho - eventbrite.com/e/hacksoho-se…
🌟 10/1 – 3 | CornCon 2026 - corncon.net/
Made with AI
1
1
213
CISA just confirmed the July water sector cyberattack was 3x bigger than first reported: 100+ systems, 12 states — not ~30 in Minnesota.
A second advisory (AA26-231A) flags AI-generated exploit scripts targeting Siemens S7 PLCs across 6 sectors. ioactive.com/worse-than-firs…
2
1
239
hack::soho is back Sept 24 in London 🇬🇧
IOActive's Nick Dunn presents "data bouncing" — a stealthy new DNS-based exfiltration technique flying under most defenses' radar. eventbrite.com/e/hacksoho-se…
1
381
Most software vulnerabilities start at design, not deployment. Security leaders use these SDLC practices to embed controls at every phase: threat modeling, code analysis, and supply chain integrity. ioactive.com/secure-software…
223
REMINDER: Our Madrid Summer Fiesta is right around the corner and taking place next week, 9/17! Invite those in your network in the are for some delicious food and to check out some amazing cybersecurity research! eventbrite.com/e/ioactive-su…
1
375
Check out our upcoming events! ioactive.com/events/
🌟 9/17 | IOA Summer Fiesta - eventbrite.com/e/ioactive-su…
🌟 9/17 | OWASP Scotland Chapter Meeting - meetup.com/owasp-scotland-ch…
🌟 10/1 – 3 | CornCon - corncon.net/
🌟 10/29 – 30 | LASCON - lascon.org/
Made with AI
243
IOA Consultant Elvin G. breaks down what SetWindowDisplayAffinity actually stops (PrtSc, casual screen shares) vs. what it doesn't (admin-level process injection, RDP, a phone camera) — 3 tiers of bypass, no exploit dev required for most of them. ioactive.com/the-drm-flag-th…
3
3
382
IOActive's Colin Cassidy talks windfarm security at @OWASP Scotland's Autumn Session, Sep 17 in Edinburgh. Real ICS attacks, over-reliance on "security boxes," and what happens after an attacker takes control. 🌬️🔒
meetup.com/owasp-scotland-ch…
413