Firmware to Root in 30 Minutes: How AI is Changing Threat Intelligence 2026-10-13 75 Amir Zaltzman True Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers 2026-07-31 78 Amir Zaltzman True Chilling Discoveries: Unpacking Vulnerabilities in Copeland XWEB Pro Controllers 2026-07-31 75 Amir Zaltzman True A Cyber-Psychological Operation: Iran-Linked Attackers Target Warning Systems 2026-06-23 85 True Turning Up the Heat: Hacking Trane HVAC Controllers 2026-06-05 86 Amir Zaltzman True Attacking UPS Network Cards to Take Down Data Centers 2026-06-05 85 Vera Mens True Hands Free: What LLM Driven Vulnerability Research Looks Like 2026-06-01 75 Tomer Goldschmidt True Exploiting EnOcean SmartServer to Attack Connected Building Management Systems 2026-04-28 80 Amir Zaltzman True The Risky Road Bringing Building Management Systems Online: Exploring the CEA-852 Standard 2026-04-08 75 Amir Zaltzman True Examining the Legacy BMS LonTalk Protocol 2026-02-19 60 Amir Zaltzman True New Architecture, New Risks: One-Click to Pwn IDIS IP Cameras 2026-01-21 75 Vera Mens True Roaring Access: Exploiting a Pre-Auth Root RCE on Sixnet RTUs 2025-11-12 85 Nitsan Litov True Turning Camera Surveillance on its Axis 2025-08-03 78 Noam Moshe True Cascading Chaos: A GOT-Oriented Exploit Story 2025-07-25 60 Tomer Goldschmidt True Attention, High Voltage: Exploring the Attack Surface of the Rockwell Automation PowerMonitor 1000 2025-05-28 90 Vera Mens True Delving into Windows CE, Part 4: Vulnerability Research into a Windows CE-Based HMI Used in the Wild 2025-05-06 75 Tomer Goldschmidt True Team82 Finds Critical Flaws in OPC Protocol Implementations 2025-04-17 78 Uri Katz True OT Operators Slow to Update Vulnerable Remote Access Devices 2025-04-10 70 Tal Keren; Sharon Brizinov True Vendors Affected by Wibu CodeMeter Vulnerabilities 2025-04-10 60 True Do the CONTEC CMS8000 Patient Monitors Contain a Chinese Backdoor? The Reality is More Complicated… 2025-02-26 75 True Hack The Emulated Planet: Vulnerability Hunting on Planet WGS-804HPT Industrial Switches 2025-01-22 70 Tomer Goldschmidt True Inside a New IoT/OT Cyberweapon: IOCONTROL 2024-12-20 70 True Inside a New OT/IoT Cyberweapon: IOCONTROL 2024-12-16 90 True The Insecure IoT Cloud Strikes Again: RCE on Ruijie Cloud-Connected Devices 2024-12-09 78 Noam Moshe; Tomer Goldschmidt True The Problem with IoT Cloud-Connectivity and How it Exposed All OvrC Devices to Hijacking 2024-11-12 75 Uri Katz True MMS Under the Microscope: Examining the Security of a Power Automation Standard 2024-10-07 75 Mashav Sapir; Vera Mens True From Exploits to Forensics: Unraveling the Unitronics Attack 2024-08-07 80 True Bypassing Rockwell Automation Logix Controllers’ Local Chassis Security Protection 2024-08-01 75 Sharon Brizinov True Pwn2Own: Pivoting from WAN to LAN to Attack a Synology BC500 IP Camera, Part 2 2024-07-16 70 Sharon Brizinov; Uri Katz; Tomer Goldschmidt; Noam Moshe True Pwn2Own: WAN-to-LAN Exploit Showcase, Part 1 2024-07-15 75 Sharon Brizinov; Noam Moshe; Tomer Goldschmidt True Hacking a $100K Gas Chromatograph without Owning One 2024-06-24 72 Vera Mens True OPC-UA Deep Dive Series (Part 10): Security Tips for Asset Owners 2024-05-20 55 True Exploiting Honeywell ControlEdge VirtualUOC 2024-05-16 85 Uri Katz True OPC UA Deep Dive: A Complete Guide to the OPC UA Attack Surface 2024-05-01 70 True Exploiting a Classic Deserialization Vulnerability in Siemens SIMATIC Energy Manager 2024-04-24 90 Noam Moshe True Unpacking the Blackjack Group's Fuxnet Malware 2024-04-15 78 True Practical and Theoretical Attacks in the Industrial Landscape (Part 2) 2024-03-11 70 Tomer Goldschmidt True OPC UA Deep Dive Series (Part 9): Chaining Vulnerabilities to Exploit Softing OPC UA Integration Server 2024-01-30 85 Uri Katz True Synology NAS DSM Account Takeover: When Random is not Secure 2024-01-19 30 Sharon Brizinov True OPC UA Deep Dive Series (Part 8): Gaining Client-Side Remote Code Execution 2023-12-21 75 Noam Moshe True OPC UA Deep Dive Series (Part 6): OPC UA Exploit Framework 2023-12-21 72 Sharon Brizinov; Uri Katz True DICOM Demystified: Exploring the Underbelly of Medical Imaging 2023-11-29 82 Noam Moshe True OPC UA Deep Dive Series (Part 7): Practical Denial of Service Attacks 2023-11-07 60 True Critical Vulnerabilities Found in Rockwell FactoryTalk AssetCentre 2023-10-31 90 Amir Preminger; Sharon Brizinov True Boost Your Network with Team82's boofuzz OPC UA Fuzzer 2023-10-31 65 Vera Mens True OPC UA Deep Dive Series (Part 4): Targeting Core OPC UA Components 2023-10-30 70 True Software-Based PLC Flaws Enable Windows Box Code Execution 2023-10-30 75 Mashav Sapir True Security Flaws Exposed in QuickBlox Chat And Video Framework 2023-10-30 80 Amir Preminger; Sharon Brizinov; Itay Cohen; Oleg Ilushin True OPC UA Deep Dive Series (Part 5): Inside Team82’s Research Methodology 2023-10-30 70 True Exploiting Cloud Connectivity to PWN your NAS: Synology DS920 2023-10-24 75 Vera Mens; Sharon Brizinov True 
