Blog on Trustial - Federico Maggi's Space

I wanted to build a personalized PCB badge for DEF CON, just for the heck of it.

The security industry is catching up fast to AI agents.

This is the second post in a series on how to design, debug, reverse engineer, and deliver talks that land with impact in the high-stakes world of cybersecurity.

This is the first post in a series on how to design, debug, reverse engineer, and deliver talks that land with impact in the high-stakes world of cybersecurity.

I’ve embarked on a brief journey to learn RISC-V and I ended up finding a niche of interesting material on security research on fuzzing, so I pivoted my attention to that.

My son was asked to build a compound machine as science project.

Yesterday, the news broke that firmware code leaked from Lenovo, which included Intel Alder Lake reference code.

I want to release my very personal and opinionatedly organized infosec/cybersec sources in one OPML file.

I guess it’s not unique to the cyber-security world, but research and media move pretty fast here, so it’s easy to end up with hundreds of seemingly interestingly articles or blog posts to read every day.

Despite this little beast known as COVID-19 pandemic is about to turn 1 year old, many people still feel strange when wearing masks.

Reading long texts has always been a daunting task to me.

How do we secure a smart manufacturing system, or a smart factory?

RFQuack is the only versatile RF-analysis tool that quacks!

After having analyzed the several RF protocols for industrial applications, distributed by global vendors, we discovered that none of them had sufficient security features to prevent an attacker from hijacking the communication and manoeuvre the controlled

Given the multiple releases around this topic and project, I’ve decided to put together a summary.

Many vulnerabilities in one shot, yet several pre-conditions for a target to be actually exploitable.

Industrial robots are complex cyber-physical systems used for manufacturing, and a critical component of any modern factory.

CAN-based protocols are vulnerable to bit-flipping attacks at the link layer.

The goal of this project is to extract signatures that capture the WebInject behavior of trojans.

Industrial routers play a very crucial role: a single vulnerability can grant the attacker access to an entire network of critical machines.

The day before the EyePyramid case exploded, I received a confidential email with a PDF.

I’ve started this project while advising a Master student who was interested in machine learning.

We started this project because we wanted to analyze banking and credit-card transactions and, with as little knowledge as possible, predict whether new ones are fraudulent or not (e.g., due to a banking trojan working on the victim’s computer, made by a…

We wanted to create a malware tracker similar to ZeusTracker, but for mobile bankers.

A simple and effective Java Library that you can easily add to your Android projects to perform secure dynamic class loading operations.

Sono stato invitato dal Garante per la Protezione dei Dati alla giornata europea della privacy, con richiesta di fare un po’ di chiarezza sul fenomeno IoT.

The main goal of this project is to provide a dashboard to analyze and monitor the spreading of Android malware in marketplaces.

Spying on a person is an easy and effective method to obtain sensitive information, even when the victim is well protected against common digital attacks.