GRIMM Contact Us Today

Research

Blogs + PR

Vulnerability research, reverse engineering, and practical security guidance from the GRIMM team.

· AMA, Critical Infrastructure

Hack the capitol 2023

GRIMM is a founding sponsor of ICS Village and we’re working on a ton of cool stuff for Hack the Capitol 6.0!

Read more

· Critical Infrastructure, CyPhy™

Embracing a Culture of Cybersecurity

Authors: GRIMM CEO Jennifer Tisdale and Senior Principal ResearcherMatt Carpenter Cyber adversaries are becoming more skilled -- and more ruthless.

Read more

· CyPhy™, Cybersecurity

Questions to ask your penetration testing partner

Contributor: Skip Duckwall A penetration test doesn't stop at simply uncovering vulnerabilities: it goes the next step to actively exploit those vulnerabilities to prove…

Read more

· Critical Infrastructure, Press Release

GRIMM and Ampere Form Alliances and Pledge to Secure Critical Infrastructure

CEDAR RAPIDS, MI – February 1, 2023 – GRIMM, a forward-looking cybersecurity organization led by industry experts, and Ampere, a security consulting firm specializing in…

Read more

· ChatGPT

Does ChatGPT Change Infosec?

Author: Sylvia Killinen | Security Engineer | GRIMM It’s been widely commented that ChatGPT generates bullshit.

Read more

· CyPhy™, Cyber-Threats

6 Cybersecurity predictions for 2023

The world is rapidly changing, and with it, so is how we approach and protect ourselves from cybersecurity threats.

Read more

· CyPhy™, Cyber-Threats

Professional evil: a glimpse into the tactics and motivations of malicious threat actors

There are plenty of articles detailing the uses of patience, creativity, and above all, learning from your failures.

Read more

· CyPhy™, Cyber-Threats

Why You Should Care About Infrastructure Security Month

November is Critical Infrastructure Security & Resilience Month, a nationwide effort to raise awareness and reaffirm the commitment to keep our nation's critical infrastructure secure and resilient.

Read more

· CyPhy™, Cyber-Threats

The power of public-private partnerships

By: Jennifer Tisdale Public-Private Partnerships (P3) are often thought of in terms of large-scale, long-term relationships between a government agency and a private…

Read more

· AMA, CyPhy™

Ask me anything: what is ransomware?

What is "ransomware"? This came up a couple of times for me this morning, so I thought there might be folks who would benefit from an answer.

Read more

· Vulnerability Research

Inside a Quality Assurance Mindset

Test Mindset It’s a bit cliche that security testing is just really aggressive QA. However, there’s enough truth there to make it worthwhile for security engineers to…

Read more

· Vulnerability Research

No Hardware, No Problem: Emulation and Exploitation

Vulnerability Hunting for Sport If you've been following our blog, you might notice some favoritism when it comes to embedded targets...

Read more

· CyPhy™, Cyber-Threats

Connecting the Dots for Connected Security

By: Naki Carter It is undeniable that organizations, government agencies, and critical infrastructure providers face evolving cyber threats with increased volume and complexity.

Read more

· Uncategorized

Seamlessly Discovering Netgear Universal Plug-and-Pwn (UPnP) 0-days

A Vulnerability Researcher’s Favorite Stress Relief Continuing in our series of research findings involving Netgear1 products,2 this blog post describes a…

Read more

· Uncategorized

Escalating XSS to Sainthood with Nagios

If you’re running a big enough network, chances are you have a monitoring server tucked away somewhere, silently watching and waiting to let you know if something goes wrong.

Read more

· Uncategorized

Mama Always Told Me Not to Trust Strangers without Certificates

This blog post details a vulnerability, the exploitation of which results in Remote Code Execution (RCE) as root, that impacts many modern Netgear Small Offices/Home Offices (SOHO) devices.

Read more

· Uncategorized

Geeking Out on IBM i - Part 2

(This is part 2 of a three part series. To view part 1, click here) Network Configuration This part in the three-part "Geeking Out on IBM i" series focused on network…

Read more

· Uncategorized

Geeking Out On IBM i - Part 1

I remember the first time I tried to work on Linux. Having spent most of my computer-time on DOS, Windows, and OS/2, many things on Linux were foreign to me.

Read more

· Uncategorized

Old dog, same tricks

Introduction When enterprise software gets old, should we consider it tried-and-true, or decrepit and a threat, like the superglue holding the soles of my running shoes together?

Read more

· Vulnerability Research

The walls have ears

Modern business often relies heavily on the Internet and software resources such as Zoom or Skype to support daily operations.

Read more

· Cyber-Threats

Pulse Secure April Attack

Pulse Connect Secure vulnerability CVE-2021-22893 and other old vulnerabilities are being actively exploited.

Read more

· Uncategorized

Time for an upgrade

Cleaning your domain clock Sometimes we grow to like the old software we’ve become familiar with over the years, but because as users we only see the facade of an…

Read more

· Uncategorized

GET AHEAD OF THE UNKNOWN

GRIMM is pleased to announce the launch of their new Private Vulnerability Disclosure (PVD) program.

Read more

· Uncategorized

New Old Bugs in the Linux Kernel

Dusting off a few new (old) vulns Have you ever been casually perusing the source code of the Linux kernel and thought to yourself "Wait a minute, that can’t be right"?

Read more

· News at GRIMM

Patrick Miller joins GRIMM as Director of Software Security

Patrick Miller was brought into GRIMM because he has the experience to help organizations understand what they need to do to stay safe, and help them do it.

Read more

· Uncategorized

Automated Struct Identification with Ghidra

At GRIMM, we do a lot of vulnerability and binary analysis research.

Read more

· Uncategorized

Launching the GRIMM Red Team

Since GRIMM’s inception, our dedicated teams have helped build confidence in clients’ underlying security posture -- largely through demonstrating the business impact of vulnerable systems during client engagements.

Read more

· Uncategorized

DJI Privacy Analysis Validation

Given the recent controversy with DJI drones, a defense and public safety technology vendor sought to investigate the privacy implications of DJI drones within the Android DJI GO 4 application.

Read more

· Uncategorized

IBM i Security Demystified Blog, Episode 1

I. Introduction “Nobody Can Hack an AS/400.” “Never in my 40 years in the business has anyone hacked an AS/400!” “AS/400’s don’t have hacking problems like Windows computers.” “AS/400’s are bullet-proof.

Read more

· Uncategorized

While teleworking work/life balance are in conflict - a personal story

The corona-virus pandemic has fundamentally changed the way many people and organizations operate.

Read more

· Uncategorized

GRIMM 2020 Summer Internships

Program History The GRIMM Intern program began three years ago. Interns work on billable client and research projects.

Read more

· Uncategorized

SOHO Device Exploitation

After a long day of hard research, it’s fun to relax, kick back, and do something easy.

Read more

· Uncategorized

Trike

Sparked from a question on our public discord channel What does GRIMM's threat modeling process look like?

Read more

· Uncategorized

Maritime CyberThreats

Hacking Floaty Things In July 2019 the U.S. Coast Guard issued a safety alert urging civilian mariners to get their cyber-poop in a group, encouraging the most basic of cyber-opsec on ships and supporting computer systems.

Read more

· Uncategorized

Analyzing SUID Binaries

In our spare time, we hunt for bugs in various pieces of software.

Read more

· Uncategorized

Analyzing the Linux Kernel in Userland with AFL and KLEE

At GRIMM we do a lot of vulnerability research and one of our favorite techniques for finding bugs in software is to repurpose or extend security tools from one area of research to another.

Read more

· Uncategorized

Power Architecture Research Collaboration

The National Motor Freight Traffic Association, Inc. (NMFTA), NXP® Semiconductors and GRIMM, a cybersecurity research firm, recently partnered to conduct an R&D project…

Read more

· Uncategorized

IOT is even more of a risk than you thought

GRIMM purchased a GeoVision camera that arrived off-the-shelf with security vulnerabilities like most consumer IOT devices.

Read more

· Uncategorized

Know Your Enemy: Botnet Command and Control Architectures

What would you do if your company’s IT devices were discovered to be part of a botnet?

Read more

· Uncategorized

SCYTHE Goes Atomic

The SCYTHE team is excited to announce that our latest release gives you the power of Atomic Red Team with all the automation and ease of use of the SCYTHE platform.

Read more

· Uncategorized

Modern Authentication Bypasses

Introduction hacker voice “I’m in” is a Hollywood-esque phrase you’ve probably heard before.

Read more

· Uncategorized

Five Cybersecurity Questions for Boards or Investors

Boards of Directors and investors do not need to be technical experts to oversee or discover cybersecurity risk in organizations.

Read more

· Uncategorized

The Purple Team - Organization or Exercise

As the cybersecurity industry continues to evolve, the use of certain terminology is changing and becoming more prevalent; such as the increased mention of Red Teams and Blue Teams inside boardrooms and IT departments.

Read more

· Uncategorized

DNI Threat Assessment - Practical Guidance for your Company

Last week the Director of National Intelligence released a Worldwide Threat Assessment.

Read more

· Uncategorized

SCYTHE: Starting 2019 with Linux and ATT&CK™

The SCYTHE team has been hard at work on our new release and we are proud to present the next major evolution of the SCYTHE Continuous Red Team Automation platform.

Read more

· Uncategorized

Fileless Malware and the Threat of Convenience

Many of the conveniences brought via modern tools, operating systems, and applications also bring means for an adversary to execute actions while under the guise of a valid service.

Read more

· Uncategorized

Paintball at the WMCAT Hub Debut

Paintball with a purpose. That was the theme for the 6th Annual Purple Event, hosted by the West Michigan Cyber Security Consortium (WMCSC) on October 10th at the West…

Read more

· Uncategorized

Don’t Get Comfortable Yet - The Declining Fear of Ransomware

With the news that ransomware attacks are on the decline, in favor of crypto-mining (aka “crypto-jacking”), it is tempting to now reshuffle your enterprise’s defensive priorities based on the adversary trends.

Read more

· Uncategorized

What is SCYTHE's origin story?

When I started GRIMM, I had a vision to tackle the greatest cybersecurity challenges that face our clients, industry and the greater business and government communities.

Read more

· Uncategorized

SCYTHE Announces $3 Million in Initial Financing Round Led by Gula Tech Adventures

Earlier today we announced that we raised $3 million in an initial funding round led by the co-founder of Tenable, Ron Gula of Gula Tech Adventures.

Read more

· Uncategorized

Malicious Command Execution via bash-completion (CVE-2018-7738)

Note: This was a parallel discovery where we found the bug and later found out it already had a CVE from Tenable.

Read more

· Uncategorized

ALPC Task Scheduler 0-Day

On Monday (August 27, 2018) a Local Privilege Escalation (LPE) 0-day was released which reportedly affects Windows 10 and Server 2016, at a minimum.

Read more

· Uncategorized

Breach Reality Check: Get More Realistic with the Latest in Attack Simulation

Today, SCYTHE unveiled unique enhancements to the SCYTHE attack simulation platform.

Read more

· Uncategorized

GRIMM Announces Cyber Partnership with Michigan Educational Non-Profit, Square One Focused on New High School Curriculum for Automotive Cybersecurity

Earlier this month, GRIMM’s embedded security team joined Michigan’s Governor, Rick Snyder, (pictured above) along with SAE, Michigan educational non-profit, Square One…

Read more

· Uncategorized

Getting ready for Black Hat?

August is right around the corner, our favorite time of the year – Black Hat and DEF CON!

Read more

· Uncategorized

Crash Triage Process

People tend to think that when a fuzzer finds a bunch of crashes that it’s exciting and fun, and it is… the first time.

Read more

· Uncategorized

Delta Debugging

Have you ever been fuzzing a program and received a crash, only to find the input file was huge?

Read more

· Uncategorized

GRIMM’s New Michigan Cybersecurity Research Lab

GRIMM has been a long time advocate of building Connected and Automated Vehicles (CAV) with a security-by-design approach.

Read more

· Uncategorized

Guided Fuzzing with Driller

At GRIMM, we are always trying out new tools to build our capabilities in vulnerability research.

Read more

These Scars Must Be Worth Something

A summary of wisdom from years of learning the hard way. Excerpted from a keynote I gave at Rochester Institute of Technology to the RC3 Security Club.

Read more

See you in San Francisco for RSAc!

GRIMM and SCYTHE are packing our bags and heading to the RSA Conference. We have a busy week planned and are excited to see new and familiar faces.

Read more

Heap overflow in the necp_client_action syscall

One of the things that is important to us at GRIMM is making sure there is time to experiment, and explore new ways of approaching problems.

Read more

HAX goes International

The eyes of the world were recently focused on PyeongChang, South Korea for the 2018 Winter Olympics.

Read more

Jennifer Tisdale joins GRIMM as a Cyber Advocate for Connected Mobility and Infrastructure

Connected Mobility and Infrastructure are taking Detroit by storm; timing is critical for adopting strong security practices at this nascent point in the technology and the industry.

Read more

Understanding the Real Cost of Pen Testing, Red Teaming and Blue Teaming

The void in the cybersecurity workforce is compounding the level of risk faced by enterprises.

Read more

Practical advice for real world problems

Introduction Have you ever been trying to solve a systemic problem, like users getting infected by malware, and the only advice you get is completely impractical, such…

Read more

Blockchain Technology

Financial technology (Fintech) has a long history of innovation, but there have been interesting changes now that Bitcoin has demonstrated the possibility of having a trustworthy system even when dealing with untrusted parties.

Read more

The Launch of SCYTHE and CROSSBOw

When I started GRIMM, I had a vision to tackle the greatest cybersecurity challenges that face our clients, industry, and the greater business and government communities.

Read more

#BestTechWorkCulture

Last night, GRIMM attended the 3rd Annual DC Timmy Awards.

Read more

HAX and GRIMM’s Internship Program's

One of the reasons I chose to come to GRIMM after leaving federal service earlier this year was because of one of the core principles held by the rest of the GRIMM Leadership team.

Read more

A Three-Step Approach to Threats: What All Organizations Should Know (but Equifax Doesn't)

Within the context of historical cyber breaches, this can be classified as a massive attack: Equifax, one of the “big three” credit-rating agencies, announced earlier…

Read more

· Uncategorized

GRIMM Named Finalist for the DC Timmy Awards: Best Tech Work Culture

GRIMM is excited to be named a finalist in the Best Tech Work Culture category for the DC Timmy Awards.

Read more

· Uncategorized

“Howdy Neighbor” Smart House

“Howdy Neighbor” is GRIMM’s Internet of Things (IoT) Capture the Flag (CTF)-like challenge.

Read more

· Uncategorized

What is “3PO”?

“3PO” is GRIMM’s mobile car hacking lab.

Read more

· Uncategorized

Lisa Wiswell is a Young AFCEA 40 Under 40 Winner

GRIMM is excited to announce that Lisa Wiswell, Principal for Security Consulting, was selected as a Young AFCEA 40 Under 40 winner for 2017.

Read more

Contact GRIMM experts

Let us know how we can help.

Tell us what you are building, defending, or worried about. A GRIMM consultant will get back to you.

Contact a Consultant info@grimm-co.com