logo

Our capabilities. A story about what we can achieve

ID: eb1beb5c-1fd1-5e2f-8e25-a5bccdbfc17e

STIX ID: report--eb1beb5c-1fd1-5e2f-8e25-a5bccdbfc17e

Feed Name: Pen Test Partners Blog

Threat Score

Date Published: 2025-07-28

Date Updated: 2026-03-24

Author: Joe Bursell

...
...

This report presents a cross-industry portfolio of security research and red-teaming achievements, including PoC ransomware on IoT devices, reverse engineering that traced the Mirai botnet to vulnerable DVR software, and discoveries of critical weaknesses in aviation EFB/IFE systems, automotive ECUs and apps (e.g., Mitsubishi Outlander), consumer and smart home products (Ring doorbells, Samsung TVs/fridges), EV chargers, kids’ tracking watches, queueing/ticketing platforms, and industrial/shipboard networks. Findings span insecure authentication/authorization, weak/default credentials, missing TLS certificate pinning, sensitive data exposure (e.g., static bearer tokens), exploitable reset flows, and hardware glitching techniques, many of which prompted vendor fixes, regulatory changes, or public safety improvements.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.