CVE-2025-20281: Cisco ISE API Unauthenticated Remote Code Execution Vulnerability

July 25, 2025 | Bobby Gould CONTINUE READING

A Trio of Bugs Used to Exploit Inductive Automation at Pwn2Own Miami

Blog post

A Trio of Bugs Used to Exploit Inductive Automation at Pwn2Own Miami

June 11, 2020
Pwn2Own, SCADA, Inductive Automation

Pwn2Own Miami 2020 - Schedule and Live Results

Blog post

Pwn2Own Miami 2020 - Schedule and Live Results

January 21, 2020
Pwn2Own, SCADA, ICS, Results

Reliably Finding and Exploiting ICS/SCADA Bugs

Blog post

Reliably Finding and Exploiting ICS/SCADA Bugs

January 16, 2020
SCADA, Advantech, Research

Pwn2Own Miami – Bringing ICS into the Pwn2Own World

Blog post

Pwn2Own Miami – Bringing ICS into the Pwn2Own World

October 28, 2019
Pwn2Own, ICS, SCADA, Miami

(Web)Access (Un)Control

Blog post

(Web)Access (Un)Control

March 07, 2019
Advantech, SCADA, Research

Pivot! PIVOT! – Reaching Unreachable Vulnerable Code in Industrial IoT Platforms

Blog post

Pivot! PIVOT! – Reaching Unreachable Vulnerable Code in Industrial IoT Platforms

September 13, 2018
Research, Advantech, SCADA, Industrial IoT

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface

Blog post

Down the Rabbit Hole - A Deep Dive into an attack on an RPC interface

June 07, 2018
Advantech, SCADA, Research, Exploit

Simple to Find, Simple to Fix – Locating Weak File Permissions in Advantech WebAccess

Blog post

Simple to Find, Simple to Fix – Locating Weak File Permissions in Advantech WebAccess

September 13, 2017
Research, SCADA, Advantech

Hacker Machine Interface – The State of SCADA HMI Security

Blog post

Hacker Machine Interface – The State of SCADA HMI Security

May 23, 2017
Whitepaper, SCADA