Todd Hastings

Red Team Operator - Adversary Services - IBM

Todd Hastings has been an IMBer since 2023 and serves as a Red Team Operator for IBM's Adversary Services Team. Todd's career in red teaming spans nearly a decade, leading and executing security engagements for the US Department of Defense, NASA and Fortune 500 companies. Todd resides in Huntsville, Alabama, and in his spare time he can be found behind a keyboard, spending time with friends and family or enjoying the outdoors.

Offensive Security August 8, 2024

IoT exploitation during security engagements

9 min read - During two separate security engagements, I discovered command injection vulnerabilities in two embedded devices. Discovering each vulnerability had its unique challenges. One is a classic command injection vulnerability while the other details a “blind” command injection vulnerability, which provides an…

Adversary Services February 29, 2024

CVE-2023-20078 technical analysis: Identifying and triggering a command injection vulnerability in Cisco IP phones

7 min read - CVE-2023-20078 catalogs an unauthenticated command injection vulnerability in the web-based management interface of Cisco 6800, 7800, and 8800 Series IP Phones with Multiplatform Firmware installed; however, limited technical analysis is publicly available. This article presents my findings while researching this…

Failed to load data

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.

Subscribe today

Analysis and insights from hundreds of the brightest minds in the cybersecurity industry to help you prove compliance, grow business and stop threats.

Cybersecurity News By Topic By Industry Exclusive Series X-Force Podcast Events Contact About Us

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

Todd Hastings

IoT exploitation during security engagements

CVE-2023-20078 technical analysis: Identifying and triggering a command injection vulnerability in Cisco IP phones

{{{title}}}

Topic updates