aDolus Blog

3 min read

Software Validation malware Supply Chain Management

Don’t Judge an Ebook by Its Cover

By Ron Brash on May 12, 2020

Interesting times lead to interesting opportunities. The current pandemic is proving no exception, but, sadly, it’s an opportunity for some attackers who have laid a rather cunning trap. As...

Sniffing Out Fakes: From Saffron in Marrakech to Digital Certificates

4 min read

Code Signing Software Validation malware

Sniffing Out Fakes: From Saffron in Marrakech to Digital Certificates

By Eric Byres on October 8, 2019

Eric Byres in Morocco

When the Security Researchers Come Knocking, Don’t Shoot the Messenger

3 min read

medical hacking malware vulnerability disclosure Vulnerability Tracking

When the Security Researchers Come Knocking, Don’t Shoot the Messenger

By Eric Byres on November 8, 2018

Our own Jonathan Butts and Billy Rios were interviewed this month on the CBS Morning News about their research showing that medical devices like pacemakers and insulin pumps can be hacked...

Who Infected Schneider Electrics’ Thumbdrive?

3 min read

chain of trust ICS USB 3rd Party Components malware industrial control system Supply Chain Management

Who Infected Schneider Electrics’ Thumbdrive?

By Eric Byres on September 12, 2018

On 24 August 2018 Schneider Electric issued a security notification alerting users that the Communications and Battery Monitoring devices for their Conext Solar Energy Monitoring Systems...

Building (or Losing) Trust in our Software Supply Chain

3 min read

Dragonfly chain of trust ICS malware pharmaceutical Havex industrial control system Trojan energy Supply Chain Management

Building (or Losing) Trust in our Software Supply Chain

By Eric Byres on May 10, 2018

Back in 2014, when I was managing Tofino Security, I became very interested in the Dragonfly attacks against industrial control systems (ICS). I was particularly fascinated with the ways...