4F404 Foundersin404-founders.com·Sep 4 · 6 min readCRA Secure by Default: What Manufacturers Need to Remove Before December 2027CRA Secure by Default: What Manufacturers Need to Remove Before December 2027 A device can be fully patched and still ship with an avoidable attack surface. A management port is open on every interfac00
JKJeevitha kumarswamyinjeevitha-13.hashnode.dev·Aug 26 · 5 min readMIRAI BOTNET 2016: A case study on IoT SecurityTHE ATTACK AT A GLANCE: This is a major IoT + DDoS attack that occurred in 2016. MIRAI, a self-replicating worm, infected lakhs of IoT devices and launched a large-scale DDoS attack that affected popu00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Aug 18 · 5 min readTryHackMe : Bugged - WriteupOverview Bugged is an easy TryHackMe box built around an MQTT broker (Mosquitto) that allows anonymous connections. The broker exposes normal-looking IoT device telemetry alongside a hidden backdoor t00
ĐĐĐăng Đỗiniot-security-lab.hashnode.dev·Aug 6 · 1 min readI Built a Password Strength Checker - My First Security ToolWhy I built this Year 2 Cybersecurity, just finished TryHackMe Pre Security. I wanted a small win before jumping into IoT Lab. Workflow I use: GitHub = code + overview, Hashnode = detailed story. What00
SSaguninsagunwrites.hashnode.dev·Aug 5 · 8 min readMiraiWhat if thousands of devices connected to the Internet suddenly stopped being ordinary devices? What if they became part of a massive network controlled by someone else? That is essentially what happe00
SSaguninsagunwrites.hashnode.dev·Aug 1 · 4 min readWhat Is IoT Malware?Your phone isn't the only device connected to the internet. Cameras, smart TVs, routers, watches, speakers, printers, appliances, and even industrial equipment can communicate over networks. Together,00
YBYash Bhardwajindata-privacy.hashnode.dev·Jul 30 · 6 min readIoT Security: Best Practices for Protecting Connected Devices and Smart SystemsThe Internet of Things (IoT) has transformed how organisations operate by connecting sensors, cameras, industrial equipment, medical devices, vehicles, and countless other systems to the internet. The00
COCarlos Osorioinosorio.hashnode.dev·May 6 · 20 min readMy ESP32 sent <script>alert(1)</script> to my dashboard. Not from a web request. From a temperature sensor. I didn't write that code.A corrupted sensor payload did. Let me explain how that happened — and why it means most IoT dashboards are one corrupted sensor reading away from a security incident. The Khymera dashboard under10
JCJim Chundevalelinaccidentalcomplexity.hashnode.dev·Apr 26 · 5 min readPart 5 - Nebula Sync: Keeping Two Pi-holes in SyncThe Sync Problem Two Pi-hole pods, two separate NFS PVCs, and two completely isolated SQLite databases. Yes, this is how the NFS multi-writer corruption crisis was averted. But it creates a new proble00
JCJim Chundevalelinaccidentalcomplexity.hashnode.dev·Apr 25 · 17 min readPart 1 - The Problem, The Plan, and The FoundationBecause one Pi-hole was too simple, and apparently so was one Raspberry Pi. A multi-part journey into highly available, encrypted, ad-blocking DNS on a K3s Raspberry Pi cluster. The Problem with Home00
