AI
📕 A Worm in the Apple: Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices 🖥️
offensive securitymobile and iot security
Topic
Mobile & IoT Security
Phones, things, and the firmware they run on — Android/iOS, IoT protocols, automotive, medical, and industrial device security.
- mobile application security
- Android security
- iOS security
- mobile malware
- MDM
- IoT security
- smart device hacking
- IoT firmware analysis
- MQTT
- CoAP
- Zigbee
- BLE
- automotive security
- connected vehicle security
- medical device security
- wearable security
- smart home security
- industrial IoT
- edge device security
59
Talks
6
Conferences
BSidesSF 2026
3 talks📙 From pocket to Pwn: How we hacked a multinational Corp for $200 with what's in our pockets 🏗️
offensive securitymobile and iot security
📗 Gettings PCAPs from Stingrays for $20 with Rayhunter
mobile and iot securitynetwork and infrastructure
DefCamp 2025
2 talksDemocratizing IoT Security Research and Training Through Advanced Instrumentation
mobile and iot securityoffensive security
Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT
mobile and iot securityoffensive security
OWASP Global AppSec USA 2025
1 talkPeeling Back the Plastic: Finding 0-Days in IoT Devices
mobile and iot securityoffensive securitynetwork and infrastructure
DEF CON® 33 Hacking Conference
37 talksHow AI + Hardware can Transforming Point-of-Care Workflows
mobile and iot securityai security
Breakin 'Em All – Overcoming Pokemon Go's Anti-Cheat Mechanism
offensive securitymobile and iot security
Smart Bus Smart Hacking: From Free WiFi to Total Control
mobile and iot securityoffensive securitynetwork and infrastructure
Reverse Engineering Marine Engines: How to make powerboats do your bidding
network and infrastructuremobile and iot security
AppleStorm - Unmasking the Privacy Risks of Apple Intelligence
ai securitymobile and iot security
Silent Signals: Exploiting Security and Privacy Side-Channels in End-to-End Encrypted Messengers
cryptographyoffensive securitymobile and iot security
Vibe School: Making dumb devices smart with AI
mobile and iot securityai security
Modern Odometer Manipulation
mobile and iot securitynetwork and infrastructure
Unveiling IoT Vulnerabilities: From Backdoors to Bureaucracy
offensive securitymobile and iot security
What is Dead May Never Die: The Immortality of SDK Bugs
mobile and iot securityoffensive security
Siri-ously Leaky: Exploring Overlooked Attack Surfaces Across Apple's Ecosystem
offensive securitymobile and iot security
Cash, Drugs, and Guns: Why Your Safes Aren't Safe
offensive securitymobile and iot security
Never enough about cameras - The firmware encryption keys hidden under the rug
mobile and iot securityoffensive security
Hacking Reality: HoloConnect AI and the Rise of Offline Holograms in Medical Devices
ai securitymobile and iot security
Badgelife Panel: Lessons from Years of Do’s, Don’ts, and Last-Minute Saves
offensive securitymobile and iot security
Hacking a head unit with malicious PNG
offensive securitymobile and iot security
Ask EFF
defensive securitymobile and iot securitygovernance and risk
Hacking Hotspots: Pre-Auth Remote Code Execution, Arbitrary SMS & Adjacent Attacks on 5G and 4G/LTE Routers
offensive securitymobile and iot security
The Power(Point) Glove
mobile and iot security
One Modem to Brick Them All: Exploiting Vulnerabilities in the EV Charging Communication
offensive securitymobile and iot securitynetwork and infrastructure
How Not to IoT: Lessons in Security Failures
mobile and iot securityoffensive security
Unexpected Connections: How a vulnerability in obscure dealer software could have unlocked your car from anywhere
mobile and iot securityapplication security
Context Aware Anomaly Detection in Automotive CAN Without Decoding
network and infrastructuremobile and iot security
Unmasking the Snitch Puck: the creepy IoT surveillance tech in the school bathroom
mobile and iot securityoffensive security
How Extra Features In Contactless Payments Break Security And What We Can Do About it.
mobile and iot securitycryptography
So you want to make a badge? Badge Creation 101, from SAO to full #badgelife
network and infrastructuremobile and iot security
Dead Made Alive Again: Bypassing Intent Destination Checks and Reintroducing LaunchAnyWhere Privilege Escalation
offensive securitymobile and iot security
Emulating Embedded Linux Devices at Scale with Light-Touch Firmware Rehosting
network and infrastructuremobile and iot security
HaKCing OBD-II Emissions Testing
mobile and iot securityoffensive security
Gateways to Chaos - How We Proved Modems Are a Ticking Time Bomb That Hackers Can Access Everywhere
mobile and iot securitynetwork and infrastructure
Diamonds Are For Hackers - Building the first fully open source and hackable Quantum Sensor
network and infrastructuremobile and iot security
Countering Forensics Software by Baiting Them
defensive securitymobile and iot security
How API flaws led to admin access to over 1,000 USA dealers and control over your car
application securitymobile and iot security
Smart Devices, Dumb Resets? Testing Firmware Persistence in Commercial IoT
mobile and iot securityoffensive security
Turning Camera Surveillance on its Axis
offensive securitymobile and iot security
DEF CON Groups (DCGs): Keeping the Signal Alive All Year Long
mobile and iot securitysecurity leadership
Bare Metal Reverse Engineering
malware and threat intelmobile and iot security
Black Hat USA 2025
13 talksA Worm in the Apple - Wormable Zero-Click RCE in AirPlay Impacts Billions of Apple and IoT Devices
offensive securitymobile and iot security
Dead Pixel Detected - A Security Assessment of Apple's Graphics Subsystem
offensive securitymobile and iot security
Black Hat USA 2025 | Analyzing Smart Farming Automation Systems for Fun and Profit
mobile and iot securityoffensive security
Adversarial Fuzzer for Teleoperation Commands: Evaluating Autonomous Vehicle Resilience
mobile and iot securityai security
Black Hat USA 2025 | Leveraging Jamf for Red Teaming in Enterprise Environments
offensive securitymobile and iot security
Peril at the Plug: Investigating EV Charger Security and Safety Failures
offensive securitymobile and iot securitynetwork and infrastructure
Ransomware, Tracking, DoS, and Data Leaks on Xiaomi Electric Scooters
mobile and iot securityoffensive security
Uncovering 'NASty' 5G Baseband Vulnerabilities through Dependency-Aware Fuzzing
offensive securitymobile and iot security
Decoding Signal: Understanding the Real Privacy Guarantees of E2EE
cryptographymobile and iot security
Smart Charging, Smarter Hackers: The Unseen Risks of ISO 15118
mobile and iot securitynetwork and infrastructure
Watch Your (Lock)Step: Glitching into Automotive Processors
offensive securitymobile and iot security
Weaponization of Cellular Based IoT Technology – Leveraging Smart Devices to Gain a Foothold
mobile and iot securityoffensive security
Black Hat USA 2025 | Weaponizing Apple AI for Offensive Operations
offensive securitymobile and iot security
OWASP Global AppSec USA 2024
3 talksOWASP Mobile Application Security (MAS)
mobile and iot securityapplication security
OWASP IoT Security Testing Guide (ISTG)
mobile and iot securityoffensive security
Kernel Alchemy: Crafting Mobile Kernel Code to Evade Modern RASP Protections
mobile and iot securityoffensive securityapplication security