Uncategorized

An attacker's playbook built from three recent papers and a Proxmark3, covering keyspace-reduction and relay attacks against MIFARE Ultralight C/AES, NTAG DNA…

How glitching attacks on the Renesas RH850 automotive microcontroller have evolved, from early DIY voltage-glitching rigs to validating the ID-code debug bypass…

A survey of attacks that break STM32 readout protection (RDP), from chip decapsulation and UV light to cold-boot and CPU state tracing,…

A low-cost fault-injection technique that uses a roughly $10 Raspberry Pi Pico to mock bus traffic and glitch microcontrollers, as a cheap…

A roundup of recent vulnerabilities across Unitree robots, chaining BLE Wi-Fi configuration flaws, firmware-update weaknesses and DDS inter-process communication issues into remote…

Notes on the AirSnitch paper (NDSS 2026) showing that Wi-Fi client isolation is not properly standardized and can be bypassed, with an…

A walkthrough of the BLERP research (NDSS 2026) on Bluetooth Low Energy re-pairing: six flaws, four of them new, that let an…

A quick look at PCB Tracer, a tool for mapping pins, power rails and components over a high-resolution board photo for reverse…

A short pointer to a browser-based 3D hardware simulator for prototyping simple electronics (LED projects for now), handy while Arduino's future looks…
![[CVE-2026-0714] TPM-sniffing LUKS Keys on an Embedded Device](https://penthertz.com/downloads/ms_3405-1280x900.jpg)
How LUKS disk-encryption keys can be sniffed from the SPI bus between a CPU and its TPM on an embedded Linux device…