Lightnews — Scholar-powered news

InfoSect @infosectcbr.bsky.social · Aug 1

New blog post: Exploiting the Synology TC500 at Pwn2Own Ireland 2024
We built a format string exploit for the TC500 smart cam. It didn’t get used, but it made for a fun case study.
blog.infosectcbr.com.au/2025/08/01/e...

Exploiting the Synology TC500 at Pwn2Own Ireland 2024

Introduction In October 2024, InfoSect participated in Pwn2Own – a bug bounty competition against embedded devices such as cameras, NAS’, and smart speakers. In this blog, I’ll di…

blog.infosectcbr.com.au

2 7

InfoSect @infosectcbr.bsky.social · Jun 1

Court and Rami went to hardwear.io USA last week – thank you to the organisers and speakers for an excellent event.
They also placed 3rd in the CTF – not bad for a two-person team.

1 3

Reposted by InfoSect

silviocesare.bsky.social @silviocesare.bsky.social · Apr 30

We’re hiring Vulnerability Researchers at @infosectcbr.bsky.social that specialise in Linux, OS kernels, Android, and embedded/IoT. With a world class hardware lab, come join our friendly and collaborative team, focusing on research against leading technologies. DM for details.

2 5

InfoSect @infosectcbr.bsky.social · May 22

Proud of the InfoSect team for taking 2nd place in the BSides Adelaide CTF and 1st in the GRC competition! The challenges weren’t geared to our usual strengths, so placing this well is a fantastic result. Thanks to the conference and CTF organisers for a great event!

Reposted by InfoSect

CrikeyCon @crikeycon.bsky.social · Mar 12

CrikeyCon is honoured to have @infosectcbr.bsky.social join us as Gold sponsors this year. The InfoSect crew have been supporters of CrikeyCon since the start - as presenters, contributors, attendees, and most importantly friends of Crikey. To have you sponsor too is a real privilege! Thanks!

2 5

InfoSect @infosectcbr.bsky.social · Mar 13

We’re absolutely stoked to support @crikeycon.bsky.social this year! From the very start, it’s been an incredible conference run by an amazing crew, and we’ve loved being part of it as attendees, presenters, and friends. Can’t wait for another fantastic year!

CrikeyCon @crikeycon.bsky.social · Mar 12

CrikeyCon is honoured to have @infosectcbr.bsky.social join us as Gold sponsors this year. The InfoSect crew have been supporters of CrikeyCon since the start - as presenters, contributors, attendees, and most importantly friends of Crikey. To have you sponsor too is a real privilege! Thanks!

Reposted by InfoSect

BSides Canberra @bsidescbr.bsky.social · Feb 21

Sam speaking at CSides on the Synology TC500 Pwn2Own 2024 attempt by @infosectcbr.bsky.social

2 3

Reposted by InfoSect

silviocesare.bsky.social @silviocesare.bsky.social · Feb 17

See our bug that we exploited that was patched the day before we flew out to Pwn2Own.

BSides Canberra @bsidescbr.bsky.social · Feb 16

CSides is on this Friday, 6pm at the Canberra Rex Hotel with talks on Rust and Smart Cameras. More details here: bsidescbr.com.au/csides.html

BSides Canberra - 25-27th September 2025!

BSides Canberra 2025 - BSides Canberra is a technical community conference focussing on the deep understanding of cyber security topics.

bsidescbr.com.au

1 4

Reposted by InfoSect

silviocesare.bsky.social @silviocesare.bsky.social · Dec 10

Had a vendor demo given at @infosectcbr.bsky.social of the new 3rd generation mantis microscope by vision engineering. Looked pretty good!

2 3

InfoSect @infosectcbr.bsky.social · Dec 9

At #Pwn2Own Ireland, our team successfully exploited vulnerabilities in the Lorex 2K Indoor WiFi Camera. Check out our blog for the full technical breakdown: blog.infosectcbr.com.au/2024/12/expl...