Zoltan Balazs

Head of Vulnerability Research Lab

Ethical hacker and IT security researcher with more than 15 years of experience. Apart from an MSc Degree, ten technical certs, including OSCE or CISSP. Former speaker at DEFCON, SAS, AusCERT, Shakacon, and many more.

All posts by Zoltan Balazs

October 17, 2024October 17, 2024•5 min read

Android Set-top Box Lies about Its OS Version, Comes Pre-infected with Malware

Cybersecurity IoT Labs

April 12, 2024April 30, 2024•6 min read

Finding a Secure Baby Monitor Is Much Harder Than You’d Think

Cybersecurity IoT

February 9, 2024February 9, 2024•8 min read

The Story About Three Million Toothbrushes Used in a DDoS Attack Is Not True

IoT Labs

December 8, 2023December 8, 2023•9 min read

The Anatomy of a Spear Phishing Attack With OSINT Tips and an Almost Disappointing Ending

Cybersecurity Labs

October 25, 2023November 5, 2023•9 min read

SpeedHacking CTF at Hacktivity 2023 – Behind the Scenes

Labs

October 2, 2023October 6, 2023•2 min read

Win a PS5 at Our Speed Hacking CTF @ Hacktivity

Labs

September 29, 2023October 1, 2023•5 min read

I Sent Glitter, an AirTag, and Some Love to Facebook Marketplace Scammers

Cybersecurity Labs

May 22, 2023August 27, 2023•5 min read

Don’t Get Scammed Again: No One Can Recover Your Lost Funds

Cybersecurity

February 28, 2023August 27, 2023•4 min read

IT Security Predictions for 2023

Cybersecurity

February 3, 2023August 27, 2023•11 min read

How I Got $88 from a WhatsApp Scammer And “Forgot” to “Reinvest” It

Cybersecurity

November 21, 2022September 26, 2023•5 min read

Protecting the World, One NFT at a Time

Labs

October 20, 2022February 7, 2024•4 min read

MLSEC 2022 – The Winners and Some Closing Comments

Artificial Intelligence

July 8, 2022February 13, 2024•7 min read

How I Failed Twice… and Finally Passed the Offensive Security OSED 72-hour Exam (EXP-301)

Article

November 24, 2021September 30, 2023•6 min read

This Black Friday, Choose Smart Devices with Cybersecurity in Mind

Cybersecurity IoT

November 10, 2021September 30, 2023•7 min read

Mobile Security: iOS vs Android – Which Is Right for Your Threat Model?

Cybersecurity ISP Security

Cookie	Duration	Description
cli_user_preference	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
cookielawinfo-checkbox-advertisement	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Advertisement".
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other".
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
CookieLawInfoConsent	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie records the default button state of the corresponding category & the status of CCPA.
cujo_cerber_*	1 day	These cookies are set by your website's security and anti-spam plugin. Used to provide protection against hackers, provide technical functions.
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Cookie	Duration	Description
__Secure-*	6 months	These cookies are set by Google to enable YouTube embedded videos and are used to detect spam, fraud, and abuse to help ensure advertisers are not incorrectly charged for fraudulent or otherwise invalid impressions or interactions with ads, and that YouTube creators in the YouTube Partner Program are remunerated fairly. More information about Google's cookies: https://policies.google.com/technologies/cookies/embedded
AEC	6 months	This cookie is set by Google to enable embedded YouTube videos. The cookie is used to detect spam, fraud, and abuse to help ensure advertisers are not incorrectly charged for fraudulent or otherwise invalid impressions or interactions with ads, and that YouTube creators in the YouTube Partner Program are remunerated fairly. More information about Google's cookies: https://policies.google.com/technologies/cookies/embedded
CONSENT	13 months	These cookies are set by Google to enable embedded YouTube videos. The cookie is used to save information about how the visitor uses the web site. More information about Google's cookies: https://policies.google.com/technologies/cookies/embedded
DV	10 minutes	These cookies are set by Google to enable embedded YouTube videos. The cookie stores the visitor's preferences and other information, including their chosen language, the number of search results shown on a page, as well as the choice of whether the filter Google SafeSearch should be activated or not. More information about Google's cookies: https://policies.google.com/technologies/cookies/embedded
SOCS	13 months	Cookie set by Google used to play embedded YouTube videos. Records the user's cookies choice. More information about Google's cookies: https://policies.google.com/technologies/cookies/embedded
Wp-Settings-*	6 months	Cookie set by WordPress used to store user preferences.

Cookie	Duration	Description
AnalyticsSyncHistory	30 days	A non-necessary cookie used to store information about the time a sync took place. Provider: LinkedIn More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
bcookie	1 year	Browser Identifier cookie to uniquely identify devices. Provider: LinkedIn More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
bscookie	1 year	Used to store logged in users verified by two factor authentication and previously logged in on LinkedIn. Provider: LinkedIn More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
JSESSIONID	session	Cookie set by LinkedIn used for Cross Site Request Forgery (CSRF) protection and URL signature validation. More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
lang	session	Cookie set by LinkedIn used to remember a user's language setting. More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
li_alerts	1 year	Cookie set by LinkedIn used to track impressions of LinkedIn alerts, such as the Cookie Banner and to implement cool off periods for display of alerts. More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
li_gc	6 months	Cookie set by LinkedIn used to store consent of guests regarding the use of cookies for non-essential purpose. More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
li_sugr	3 months	Cookie set by LinkedIn used to make a probabilistic match of a user's identity. More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
lidc	24 hours	Cookie set by LinkedIn used to facilitate data center selection More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table
UserMatchHistory	1 month	Used to provide ad delivery or ad retargeting, syncs the LinkedIn Ads ID. Provider: LinkedIn. More information about LinkedIn's cookies: https://www.linkedin.com/legal/l/cookie-table

Zoltan Balazs

All posts by Zoltan Balazs

Android Set-top Box Lies about Its OS Version, Comes Pre-infected with Malware

Finding a Secure Baby Monitor Is Much Harder Than You’d Think

The Story About Three Million Toothbrushes Used in a DDoS Attack Is Not True

The Anatomy of a Spear Phishing Attack With OSINT Tips and an Almost Disappointing Ending

SpeedHacking CTF at Hacktivity 2023 – Behind the Scenes

Win a PS5 at Our Speed Hacking CTF @ Hacktivity

I Sent Glitter, an AirTag, and Some Love to Facebook Marketplace Scammers

Don’t Get Scammed Again: No One Can Recover Your Lost Funds

IT Security Predictions for 2023

How I Got $88 from a WhatsApp Scammer And “Forgot” to “Reinvest” It

Protecting the World, One NFT at a Time

MLSEC 2022 – The Winners and Some Closing Comments

How I Failed Twice… and Finally Passed the Offensive Security OSED 72-hour Exam (EXP-301)

This Black Friday, Choose Smart Devices with Cybersecurity in Mind

Mobile Security: iOS vs Android – Which Is Right for Your Threat Model?

Solutions

Platform

Company

Press