GRIMM is a cybersecurity research and consulting firm. We harden critical systems, fortify corporate networks, and innovate across industries.https://grimmcyber.com/https://grimmcyber.com/hack-the-capitol-2023/https://grimmcyber.com/hack-the-capitol-2023/GRIMM is a founding sponsor of ICS Village and we’re working on a ton of cool stuff for Hack the Capitol 6.0!Wed, 19 Apr 2023 00:00:00 GMTAMACritical InfrastructureCyber-ThreatsCybersecurityEvents & Conferenceshttps://grimmcyber.com/embracing-a-culture-of-cybersecurity/https://grimmcyber.com/embracing-a-culture-of-cybersecurity/Authors: GRIMM CEO Jennifer Tisdale and Senior Principal ResearcherMatt Carpenter Cyber adversaries are becoming more skilled -- and more ruthless.Wed, 12 Apr 2023 00:00:00 GMTCritical InfrastructureCyPhy™Cyber-ThreatsCybersecurityNews at GRIMMhttps://grimmcyber.com/questions-to-ask-your-penetration-testing-partner/https://grimmcyber.com/questions-to-ask-your-penetration-testing-partner/Contributor: Skip Duckwall A penetration test doesn't stop at simply uncovering vulnerabilities: it goes the next step to actively exploit those vulnerabilities to prove…Thu, 30 Mar 2023 00:00:00 GMTCyPhy™CybersecurityPenetration Testinghttps://grimmcyber.com/grimm-and-ampere-form-alliances-and-pledge-to-secure-critical-infrastructure/https://grimmcyber.com/grimm-and-ampere-form-alliances-and-pledge-to-secure-critical-infrastructure/CEDAR RAPIDS, MI – February 1, 2023 – GRIMM, a forward-looking cybersecurity organization led by industry experts, and Ampere, a security consulting firm specializing in…Wed, 01 Feb 2023 00:00:00 GMTCritical InfrastructurePress Releasehttps://grimmcyber.com/does-chatgpt-change-infosec/https://grimmcyber.com/does-chatgpt-change-infosec/Author: Sylvia Killinen | Security Engineer | GRIMM It’s been widely commented that ChatGPT generates bullshit.Thu, 26 Jan 2023 00:00:00 GMTChatGPThttps://grimmcyber.com/6-cybersecurity-predictions-for-2023/https://grimmcyber.com/6-cybersecurity-predictions-for-2023/The world is rapidly changing, and with it, so is how we approach and protect ourselves from cybersecurity threats.Wed, 04 Jan 2023 00:00:00 GMTCyPhy™Cyber-ThreatsNewshttps://grimmcyber.com/professional-evil-threat-actors/https://grimmcyber.com/professional-evil-threat-actors/There are plenty of articles detailing the uses of patience, creativity, and above all, learning from your failures.Wed, 07 Dec 2022 00:00:00 GMTCyPhy™Cyber-Threatshttps://grimmcyber.com/why-you-should-care-about-infrastructure-security-month/https://grimmcyber.com/why-you-should-care-about-infrastructure-security-month/November is Critical Infrastructure Security & Resilience Month, a nationwide effort to raise awareness and reaffirm the commitment to keep our nation's critical infrastructure secure and resilient.Wed, 09 Nov 2022 00:00:00 GMTCyPhy™Cyber-ThreatsNewshttps://grimmcyber.com/the-power-of-public-private-partnerships/https://grimmcyber.com/the-power-of-public-private-partnerships/By: Jennifer Tisdale Public-Private Partnerships (P3) are often thought of in terms of large-scale, long-term relationships between a government agency and a private…Wed, 02 Nov 2022 00:00:00 GMTCyPhy™Cyber-ThreatsNewsVulnerability Researchhttps://grimmcyber.com/ask-me-anything-what-is-ransomware/https://grimmcyber.com/ask-me-anything-what-is-ransomware/What is "ransomware"? This came up a couple of times for me this morning, so I thought there might be folks who would benefit from an answer.Tue, 01 Nov 2022 00:00:00 GMTAMACyPhy™Cyber-Threatshttps://grimmcyber.com/inside-quality-assurance-mindset/https://grimmcyber.com/inside-quality-assurance-mindset/Test Mindset It’s a bit cliche that security testing is just really aggressive QA. However, there’s enough truth there to make it worthwhile for security engineers to…Tue, 11 Oct 2022 00:00:00 GMTVulnerability Researchhttps://grimmcyber.com/no-hardware-no-problem-emulation-and-exploitation/https://grimmcyber.com/no-hardware-no-problem-emulation-and-exploitation/Vulnerability Hunting for Sport If you've been following our blog, you might notice some favoritism when it comes to embedded targets...Fri, 22 Apr 2022 00:00:00 GMTVulnerability Researchhttps://grimmcyber.com/connecting-the-dots-for-connected-security/https://grimmcyber.com/connecting-the-dots-for-connected-security/By: Naki Carter It is undeniable that organizations, government agencies, and critical infrastructure providers face evolving cyber threats with increased volume and complexity.Tue, 05 Apr 2022 00:00:00 GMTCyPhy™Cyber-ThreatsHardwarehttps://grimmcyber.com/seamlessly-discovering-netgear-universal-plug-and-pwn-upnp-0-days/https://grimmcyber.com/seamlessly-discovering-netgear-universal-plug-and-pwn-upnp-0-days/A Vulnerability Researcher’s Favorite Stress Relief Continuing in our series of research findings involving Netgear1 products,2 this blog post describes a…Tue, 16 Nov 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/escalating-xss-to-sainthood-with-nagios/https://grimmcyber.com/escalating-xss-to-sainthood-with-nagios/If you’re running a big enough network, chances are you have a monitoring server tucked away somewhere, silently watching and waiting to let you know if something goes wrong.Tue, 02 Nov 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/mama-always-told-me-not-to-trust-strangers-without-certificates/https://grimmcyber.com/mama-always-told-me-not-to-trust-strangers-without-certificates/This blog post details a vulnerability, the exploitation of which results in Remote Code Execution (RCE) as root, that impacts many modern Netgear Small Offices/Home Offices (SOHO) devices.Tue, 21 Sep 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/geeking-out-on-ibm-i-part-2/https://grimmcyber.com/geeking-out-on-ibm-i-part-2/(This is part 2 of a three part series. To view part 1, click here) Network Configuration This part in the three-part "Geeking Out on IBM i" series focused on network…Thu, 09 Sep 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/geeking-out-on-ibm-i-part-1/https://grimmcyber.com/geeking-out-on-ibm-i-part-1/I remember the first time I tried to work on Linux. Having spent most of my computer-time on DOS, Windows, and OS/2, many things on Linux were foreign to me.Tue, 03 Aug 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/old-dog-same-tricks/https://grimmcyber.com/old-dog-same-tricks/Introduction When enterprise software gets old, should we consider it tried-and-true, or decrepit and a threat, like the superglue holding the soles of my running shoes together?Wed, 07 Jul 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/the-walls-have-ears/https://grimmcyber.com/the-walls-have-ears/Modern business often relies heavily on the Internet and software resources such as Zoom or Skype to support daily operations.Tue, 08 Jun 2021 00:00:00 GMTVulnerability Researchhttps://grimmcyber.com/pulse-secure-april-attack/https://grimmcyber.com/pulse-secure-april-attack/Pulse Connect Secure vulnerability CVE-2021-22893 and other old vulnerabilities are being actively exploited.Tue, 20 Apr 2021 00:00:00 GMTCyber-Threatshttps://grimmcyber.com/time-for-an-upgrade/https://grimmcyber.com/time-for-an-upgrade/Cleaning your domain clock Sometimes we grow to like the old software we’ve become familiar with over the years, but because as users we only see the facade of an…Tue, 06 Apr 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/get-ahead-of-the-unknown/https://grimmcyber.com/get-ahead-of-the-unknown/GRIMM is pleased to announce the launch of their new Private Vulnerability Disclosure (PVD) program.Mon, 29 Mar 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/new-old-bugs-in-the-linux-kernel/https://grimmcyber.com/new-old-bugs-in-the-linux-kernel/Dusting off a few new (old) vulns Have you ever been casually perusing the source code of the Linux kernel and thought to yourself "Wait a minute, that can’t be right"?Fri, 12 Mar 2021 00:00:00 GMTUncategorizedhttps://grimmcyber.com/patrick-miller-joins-grimm-as-director-of-software-security/https://grimmcyber.com/patrick-miller-joins-grimm-as-director-of-software-security/Patrick Miller was brought into GRIMM because he has the experience to help organizations understand what they need to do to stay safe, and help them do it.Thu, 31 Dec 2020 00:00:00 GMTNews at GRIMMhttps://grimmcyber.com/automated-struct-identification-with-ghidra/https://grimmcyber.com/automated-struct-identification-with-ghidra/At GRIMM, we do a lot of vulnerability and binary analysis research.Wed, 04 Nov 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/launching-the-grimm-red-team/https://grimmcyber.com/launching-the-grimm-red-team/Since GRIMM’s inception, our dedicated teams have helped build confidence in clients’ underlying security posture -- largely through demonstrating the business impact of vulnerable systems during client engagements.Tue, 04 Aug 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/dji-privacy-analysis-validation/https://grimmcyber.com/dji-privacy-analysis-validation/Given the recent controversy with DJI drones, a defense and public safety technology vendor sought to investigate the privacy implications of DJI drones within the Android DJI GO 4 application.Fri, 31 Jul 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/ibm-i-security-demystified-blog-episode-1/https://grimmcyber.com/ibm-i-security-demystified-blog-episode-1/I. Introduction “Nobody Can Hack an AS/400.” “Never in my 40 years in the business has anyone hacked an AS/400!” “AS/400’s don’t have hacking problems like Windows computers.” “AS/400’s are bullet-proof.Tue, 23 Jun 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/while-teleworking-work-life-balance-are-in-conflict-a-personal-story/https://grimmcyber.com/while-teleworking-work-life-balance-are-in-conflict-a-personal-story/The corona-virus pandemic has fundamentally changed the way many people and organizations operate.Fri, 19 Jun 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/grimm-2020-summer-internships/https://grimmcyber.com/grimm-2020-summer-internships/Program History The GRIMM Intern program began three years ago. Interns work on billable client and research projects.Mon, 15 Jun 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/soho-device-exploitation/https://grimmcyber.com/soho-device-exploitation/After a long day of hard research, it’s fun to relax, kick back, and do something easy.Mon, 15 Jun 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/trike/https://grimmcyber.com/trike/Sparked from a question on our public discord channel What does GRIMM's threat modeling process look like?Wed, 20 May 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/maritime-cyberthreats/https://grimmcyber.com/maritime-cyberthreats/Hacking Floaty Things In July 2019 the U.S. Coast Guard issued a safety alert urging civilian mariners to get their cyber-poop in a group, encouraging the most basic of cyber-opsec on ships and supporting computer systems.Mon, 23 Mar 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/analyzing-suid-binaries/https://grimmcyber.com/analyzing-suid-binaries/In our spare time, we hunt for bugs in various pieces of software.Tue, 17 Mar 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/analyzing-the-linux-kernel-in-userland-with-afl-and-klee/https://grimmcyber.com/analyzing-the-linux-kernel-in-userland-with-afl-and-klee/At GRIMM we do a lot of vulnerability research and one of our favorite techniques for finding bugs in software is to repurpose or extend security tools from one area of research to another.Fri, 31 Jan 2020 00:00:00 GMTUncategorizedhttps://grimmcyber.com/power-architecture-research-collaboration/https://grimmcyber.com/power-architecture-research-collaboration/The National Motor Freight Traffic Association, Inc. (NMFTA), NXP® Semiconductors and GRIMM, a cybersecurity research firm, recently partnered to conduct an R&D project…Tue, 03 Sep 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/iot-is-even-more-of-a-risk-than-you-thought/https://grimmcyber.com/iot-is-even-more-of-a-risk-than-you-thought/GRIMM purchased a GeoVision camera that arrived off-the-shelf with security vulnerabilities like most consumer IOT devices.Mon, 01 Jul 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/know-your-enemy-botnet-command-and-control-architectures/https://grimmcyber.com/know-your-enemy-botnet-command-and-control-architectures/What would you do if your company’s IT devices were discovered to be part of a botnet?Thu, 06 Jun 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/scythe-goes-atomic/https://grimmcyber.com/scythe-goes-atomic/The SCYTHE team is excited to announce that our latest release gives you the power of Atomic Red Team with all the automation and ease of use of the SCYTHE platform.Mon, 06 May 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/modern-authentication-bypasses/https://grimmcyber.com/modern-authentication-bypasses/Introduction hacker voice “I’m in” is a Hollywood-esque phrase you’ve probably heard before.Tue, 02 Apr 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/five-cybersecurity-questions-for-boards-or-investors/https://grimmcyber.com/five-cybersecurity-questions-for-boards-or-investors/Boards of Directors and investors do not need to be technical experts to oversee or discover cybersecurity risk in organizations.Thu, 21 Mar 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/the-purple-team-organization-or-exercise/https://grimmcyber.com/the-purple-team-organization-or-exercise/As the cybersecurity industry continues to evolve, the use of certain terminology is changing and becoming more prevalent; such as the increased mention of Red Teams and Blue Teams inside boardrooms and IT departments.Fri, 15 Feb 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/dni-threat-assessment-practical-guidance-for-your-company/https://grimmcyber.com/dni-threat-assessment-practical-guidance-for-your-company/Last week the Director of National Intelligence released a Worldwide Threat Assessment.Mon, 04 Feb 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/scythe-starting-2019-with-linux-and-attck/https://grimmcyber.com/scythe-starting-2019-with-linux-and-attck/The SCYTHE team has been hard at work on our new release and we are proud to present the next major evolution of the SCYTHE Continuous Red Team Automation platform.Fri, 18 Jan 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/fileless-malware-and-the-threat-of-convenience/https://grimmcyber.com/fileless-malware-and-the-threat-of-convenience/Many of the conveniences brought via modern tools, operating systems, and applications also bring means for an adversary to execute actions while under the guise of a valid service.Wed, 16 Jan 2019 00:00:00 GMTUncategorizedhttps://grimmcyber.com/paintball-at-the-wmcat-hub-debut/https://grimmcyber.com/paintball-at-the-wmcat-hub-debut/Paintball with a purpose. That was the theme for the 6th Annual Purple Event, hosted by the West Michigan Cyber Security Consortium (WMCSC) on October 10th at the West…Mon, 03 Dec 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/dont-get-comfortable-yet-the-declining-fear-of-ransomware/https://grimmcyber.com/dont-get-comfortable-yet-the-declining-fear-of-ransomware/With the news that ransomware attacks are on the decline, in favor of crypto-mining (aka “crypto-jacking”), it is tempting to now reshuffle your enterprise’s defensive priorities based on the adversary trends.Tue, 16 Oct 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/what-is-scythes-origin-story/https://grimmcyber.com/what-is-scythes-origin-story/When I started GRIMM, I had a vision to tackle the greatest cybersecurity challenges that face our clients, industry and the greater business and government communities.Wed, 03 Oct 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/scythe-announces-3-million-in-initial-financing-round-led-by-gula-tech-adventures/https://grimmcyber.com/scythe-announces-3-million-in-initial-financing-round-led-by-gula-tech-adventures/Earlier today we announced that we raised $3 million in an initial funding round led by the co-founder of Tenable, Ron Gula of Gula Tech Adventures.Mon, 17 Sep 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/malicious-command-execution-via-bash-completion-cve-2018-7738/https://grimmcyber.com/malicious-command-execution-via-bash-completion-cve-2018-7738/Note: This was a parallel discovery where we found the bug and later found out it already had a CVE from Tenable.Fri, 14 Sep 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/alpc-task-scheduler-0-day/https://grimmcyber.com/alpc-task-scheduler-0-day/On Monday (August 27, 2018) a Local Privilege Escalation (LPE) 0-day was released which reportedly affects Windows 10 and Server 2016, at a minimum.Thu, 30 Aug 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/breach-reality-check-get-more-realistic-with-the-latest-in-attack-simulation/https://grimmcyber.com/breach-reality-check-get-more-realistic-with-the-latest-in-attack-simulation/Today, SCYTHE unveiled unique enhancements to the SCYTHE attack simulation platform.Wed, 29 Aug 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/grimm-announces-cyber-partnership-with-michigan-educational-non-profit-square-one-focused-on-new-high-school-curriculum-for-automotive-cybersecurity/https://grimmcyber.com/grimm-announces-cyber-partnership-with-michigan-educational-non-profit-square-one-focused-on-new-high-school-curriculum-for-automotive-cybersecurity/Earlier this month, GRIMM’s embedded security team joined Michigan’s Governor, Rick Snyder, (pictured above) along with SAE, Michigan educational non-profit, Square One…Wed, 01 Aug 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/getting-ready-for-black-hat/https://grimmcyber.com/getting-ready-for-black-hat/August is right around the corner, our favorite time of the year – Black Hat and DEF CON!Wed, 25 Jul 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/crash-triage-process/https://grimmcyber.com/crash-triage-process/People tend to think that when a fuzzer finds a bunch of crashes that it’s exciting and fun, and it is… the first time.Wed, 18 Jul 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/delta-debugging/https://grimmcyber.com/delta-debugging/Have you ever been fuzzing a program and received a crash, only to find the input file was huge?Wed, 20 Jun 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/grimms-new-michigan-cybersecurity-research-lab/https://grimmcyber.com/grimms-new-michigan-cybersecurity-research-lab/GRIMM has been a long time advocate of building Connected and Automated Vehicles (CAV) with a security-by-design approach.Wed, 23 May 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/guided-fuzzing-with-driller/https://grimmcyber.com/guided-fuzzing-with-driller/At GRIMM, we are always trying out new tools to build our capabilities in vulnerability research.Wed, 16 May 2018 00:00:00 GMTUncategorizedhttps://grimmcyber.com/these-scars-must-be-worth-something/https://grimmcyber.com/these-scars-must-be-worth-something/A summary of wisdom from years of learning the hard way. Excerpted from a keynote I gave at Rochester Institute of Technology to the RC3 Security Club.Sun, 15 Apr 2018 00:00:00 GMThttps://grimmcyber.com/see-you-in-san-francisco-for-rsac/https://grimmcyber.com/see-you-in-san-francisco-for-rsac/GRIMM and SCYTHE are packing our bags and heading to the RSA Conference. We have a busy week planned and are excited to see new and familiar faces.Tue, 10 Apr 2018 00:00:00 GMThttps://grimmcyber.com/heap-overflow-in-the-necp_client_action-syscall/https://grimmcyber.com/heap-overflow-in-the-necp_client_action-syscall/One of the things that is important to us at GRIMM is making sure there is time to experiment, and explore new ways of approaching problems.Fri, 06 Apr 2018 00:00:00 GMThttps://grimmcyber.com/hax-goes-international/https://grimmcyber.com/hax-goes-international/The eyes of the world were recently focused on PyeongChang, South Korea for the 2018 Winter Olympics.Thu, 08 Mar 2018 00:00:00 GMThttps://grimmcyber.com/jennifer-tisdale-joins-grimm-as-a-cyber-advocate-for-connected-mobility-and-infrastructure/https://grimmcyber.com/jennifer-tisdale-joins-grimm-as-a-cyber-advocate-for-connected-mobility-and-infrastructure/Connected Mobility and Infrastructure are taking Detroit by storm; timing is critical for adopting strong security practices at this nascent point in the technology and the industry.Wed, 28 Feb 2018 00:00:00 GMThttps://grimmcyber.com/understanding-the-real-cost-of-pen-testing-red-teaming-and-blue-teaming/https://grimmcyber.com/understanding-the-real-cost-of-pen-testing-red-teaming-and-blue-teaming/The void in the cybersecurity workforce is compounding the level of risk faced by enterprises.Thu, 18 Jan 2018 00:00:00 GMThttps://grimmcyber.com/practical-advice-for-real-world-problems/https://grimmcyber.com/practical-advice-for-real-world-problems/Introduction Have you ever been trying to solve a systemic problem, like users getting infected by malware, and the only advice you get is completely impractical, such…Thu, 21 Dec 2017 00:00:00 GMThttps://grimmcyber.com/blockchain-technology/https://grimmcyber.com/blockchain-technology/Financial technology (Fintech) has a long history of innovation, but there have been interesting changes now that Bitcoin has demonstrated the possibility of having a trustworthy system even when dealing with untrusted parties.Thu, 09 Nov 2017 00:00:00 GMThttps://grimmcyber.com/the-launch-of-scythe-and-crossbow/https://grimmcyber.com/the-launch-of-scythe-and-crossbow/When I started GRIMM, I had a vision to tackle the greatest cybersecurity challenges that face our clients, industry, and the greater business and government communities.Mon, 16 Oct 2017 00:00:00 GMThttps://grimmcyber.com/besttechworkculture/https://grimmcyber.com/besttechworkculture/Last night, GRIMM attended the 3rd Annual DC Timmy Awards.Fri, 29 Sep 2017 00:00:00 GMThttps://grimmcyber.com/hax-and-grimms-internship-programs/https://grimmcyber.com/hax-and-grimms-internship-programs/One of the reasons I chose to come to GRIMM after leaving federal service earlier this year was because of one of the core principles held by the rest of the GRIMM Leadership team.Fri, 22 Sep 2017 00:00:00 GMThttps://grimmcyber.com/a-three-step-approach-to-threats-what-all-organizations-should-know-but-equifax-doesnt/https://grimmcyber.com/a-three-step-approach-to-threats-what-all-organizations-should-know-but-equifax-doesnt/Within the context of historical cyber breaches, this can be classified as a massive attack: Equifax, one of the “big three” credit-rating agencies, announced earlier…Mon, 18 Sep 2017 00:00:00 GMThttps://grimmcyber.com/grimm-named-finalist-for-the-dc-timmy-awards-best-tech-work-culture/https://grimmcyber.com/grimm-named-finalist-for-the-dc-timmy-awards-best-tech-work-culture/GRIMM is excited to be named a finalist in the Best Tech Work Culture category for the DC Timmy Awards.Thu, 31 Aug 2017 00:00:00 GMTUncategorizedhttps://grimmcyber.com/howdy-neighbor-smart-house/https://grimmcyber.com/howdy-neighbor-smart-house/“Howdy Neighbor” is GRIMM’s Internet of Things (IoT) Capture the Flag (CTF)-like challenge.Fri, 21 Jul 2017 00:00:00 GMTUncategorizedhttps://grimmcyber.com/what-is-3po/https://grimmcyber.com/what-is-3po/“3PO” is GRIMM’s mobile car hacking lab.Mon, 17 Jul 2017 00:00:00 GMTUncategorizedhttps://grimmcyber.com/lisa-wiswell-is-a-young-afcea-40-under-40-winner/https://grimmcyber.com/lisa-wiswell-is-a-young-afcea-40-under-40-winner/GRIMM is excited to announce that Lisa Wiswell, Principal for Security Consulting, was selected as a Young AFCEA 40 Under 40 winner for 2017.Tue, 20 Jun 2017 00:00:00 GMTUncategorized