Hardware Security
BadUSB Controls for Engineering Teams
BadUSB controls that survive contact with engineering teams — USB device control, HID allowlisting, USBGuard and WDAC, plus detection that does not block real work.
#hardware-security
7 articles
Hardware Security
Evil Twin Access Points: Defensive Controls
Evil twin access point defenses for blue teams — detect rogue APs with a WIDS, why 802.1X server-cert validation and WPA3 matter, plus a captive-portal DNS signal.
Hardware Security
WiFi Deauthentication Detection Guide
A WiFi deauthentication detection guide — spot deauth floods with a WIDS, why 802.11w PMF and WPA3 help (and where they fall short, CVE-2023-21061), plus hardening.
Hardware Security
USB Rubber Ducky Detection Patterns
USB Rubber Ducky detection patterns for blue teams — spotting HID injection with Sigma, USB device control and AppLocker hardening, and MITRE ATT&CK mapping.
Hardware Security
Proxmark3 RFID Security for Defenders
A defender's guide to Proxmark3 RFID security — auditing 125 kHz and MIFARE Classic credentials, detecting cloned badges, and migrating to DESFire EV3 and AES.
Hardware Security
Flipper Zero NFC Risk: What Teams Should Know
The real Flipper Zero NFC risk for security teams — what it can and cannot clone, MIFARE Classic weaknesses, access-control detection, and credential hardening.
Hardware Security
HackRF One for Defensive RF Awareness
How blue teams use HackRF One for defensive RF awareness — spectrum baselining, rogue-transmitter detection, a WIDS monitoring approach, and RF hardening.