Our most recent blog peeks behind the scenes of our hardware security research - how custom PCBs & small-scale circuit assembly allows us to explore new attack surfaces. We hope that sharing this enables other people to learn from our tips-and-tricks: riverloopsecurity.com/blog/2…

Take a look at #ninjadiff, our newly released an open source binary diffing plugin for BinaryNinja! You can read about how it works and get it via riverloopsecurity.com/blog/2… Submit issues, pull requests, and give us feedback!!! Great work led by @TheWizard0f0dd CC @vector35

We recently shared some of our research on #hardware implants for the TPM bus - specifically FPGA decoding/modification on LPC bus TPMs. Come read a brief overview on what our team shared at #ieee PAINE. riverloopsecurity.com/blog/2…

We are proud to support Howard County General Hospital's Heros in Healthcare campaign during this time! youtu.be/-hSRyoGnuXk?t=422 Our team who tests medical devices for security issues has deep experience in health: designing medical devices, as clinical providers, & scaling EHRs.

Check out @krx__'s latest post on our Hardware Hacking 101 blog post series. He takes apart an Amazon Echo step by step and shows basic techniques for in-situ and chip-lift memory dumping for eMMC. riverloopsecurity.com/blog/2…

Interested in a simple introduction to hardware hacking? We've shared the first of a Hardware Hacking 101 series -- showing you step-by-step what UART is, how to find it, and how to interact with it -- to get a shell! Follow along at home with riverloopsecurity.com/blog/2….

Today we released Hashashin, a tool which combines basic block & graph aware hashing to allow porting #BinaryNinja annotations from one binary to another. Part 2 of our blog series shares the design decisions, where to get it on @github, & how to use it: riverloopsecurity.com/blog/2…

The second blog post in our series explaining #RF4CE & security is up at riverloopsecurity.com/blog/2…. It explains how RF4CE devices pair and how payloads are encrypted and protected - and some of the security problems with the protocol!

After a week of great "exclusively offense" thanks to @InfiltrateCon, we wanted to share an exclusively defensive tool that we think can help embedded developers use the (old) lessons-learned from SDL: riverloopsecurity.com/blog/2…

We're sharing our reactions to the @US_FDA guidance on premarket submissions for med device security (read: what is expected of device manufacturers). Largely positive, but some notes we feel are important. Read at riverloopsecurity.com/blog/2….

Given the recent news articles about hardware #implants - given our focus on #hardwaresecurity consulting, we've taken a step back from just the latest news and posted a few important points for those caring about #supplychain security to think about. riverloopsecurity.com/blog/2…