# Red Balloon Security

> Defend From Within

> Generated by All in One SEO Pro v5.0.3, this is an llms.txt file, used by LLMs to index the site.

## Sitemaps

- [XML Sitemap](https://redballoonsecurity.com/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [ICS-CERT vulnerability analysis](https://redballoonsecurity.com/ics-cert-vulnerability-analysis/): We analyzed National Vulnerability Database data on ICS devices to measure how much of the attack surface host-based, on-device defenses can cover.
- [Ransomware installation on embedded devices is possible, because we’ve done it](https://redballoonsecurity.com/ransomware-installation-on-embedded-devices-is-possible-because-weve-done-it/): Red Balloon Security research demonstrates ransomware installation on a protection relay. The process is repeatable and general to embedded devices.
- [DHS, Department of Commerce get it right: Firmware security is “overlooked,” — and a genuine cybersecurity risk](https://redballoonsecurity.com/dhs-department-of-commerce-get-it-right-firmware-security-is-overlooked-and-a-genuine-cybersecurity-risk/): A new report on ICT supply chains helps frame the ongoing threats to the essential code in embedded devices.
- [RBS’s Satellite 2022 Conference quick take on cybersecurity: Increasing urgency, few immediate solutions](https://redballoonsecurity.com/rbss-satellite-2022-conference-quick-take-on-cybersecurity-increasing-urgency-few-immediate-solutions/): The Ukrainian conflict amplified serious questions about satellite security in this year's conference. Red Balloon Security's quick take from Satellite 2022.
- [Why embedded device security is essential to ICS systems](https://redballoonsecurity.com/why-embedded-device-security-is-essential-to-ics-systems/): The missing layer in ICS protection: firmware-level defense for industrial control systems and critical infrastructure. Learn more from Red Balloon Security.
- [DEF CON 30 Badge Fun with OFRAK](https://redballoonsecurity.com/def-con-30-badge-fun-with-ofrak/): The TL;DR? We used OFRAK to rewrite the badge firmware so that it auto-plays the solution for Challenge 1. Check out our video and full breakdown.
- [Red Balloon Security Wins 2022 NSF Convergence Accelerator Award for Proposed Improvements to 5G Cybersecurity Through Hardening of Embedded Devices](https://redballoonsecurity.com/red-balloon-security-wins-2022-nsf/): Red Balloon Security received a $682,000 NSF Convergence Accelerator award, one of 16 teams chosen to enhance the secure operation of 5G infrastructure.
- [OFRAK: A BOON TO THE CYBER SECURITY COMMUNITY, EMBEDDED DEVICE MANUFACTURERS, AND END USERS, IN 7 QUESTIONS](https://redballoonsecurity.com/ofrak-a-boon-to-the-security/): The release of RBS’s firmware reverse-engineering tool is consistent with government and industry calls for higher security standards. Click to learn more.
- [Baets by Der](https://redballoonsecurity.com/baets/): Red Balloon Security A quick purchase at the corner store leads to an investigation into digital-analog connection manipulation, and (yet another) reason to avoid buying knockoff products. Click to learn more.
- [NAND Flash Dumps Made Easier with OFRAK ](https://redballoonsecurity.com/flash-dump/): It is now possible to unpack, modify, and repack a raw flash dump while utilizing all of the power of current OFRAK. Learn more.
- [Exploring OFRAK’s Minimap View](https://redballoonsecurity.com/ofraks-minimap-view/): A bird’s eye view of firmware binaries can helps an engineer situate themselves and accelerates analysis with OFRAK's Minimap view.
- [How to Instantly Accomplish Your New Year’s Resolution to Try Out OFRAK](https://redballoonsecurity.com/try-out-ofrak/): Discover how recent updates to the OFRAK Python package simplify dependency management and accelerate installation for security researchers.
- [Brief Tour of OFRAK 2.2.1](https://redballoonsecurity.com/brief-tour-of-ofrak-2-2-1/): We published OFRAK 2.2.1 to PyPI on March 8, 2023. As always, a detailed list of changes can be viewed in the OFRAK Changelog.
- [Symbiote Injection Process](https://redballoonsecurity.com/symbiote-injection-process/): RBS’s core technology is effective within any embedded device environment without access to source code or hardware modifications
- [Critical Architectural Vulnerabilities in Siemens SIMATIC S7-1500 Series Allow for Bypass of All Protected Boot Features](https://redballoonsecurity.com/siemens-discovery/): Critical architectural vulnerabilities in Siemens SIMATIC S7-1500 series PLCs could allow attackers to bypass all protected boot features.
- [Hacking Randomized Linux Kernel Images at the DEF CON 33 Car Hacking Village](https://redballoonsecurity.com/2025-def-con-chv-ctf/): Red Balloon Security's DEF CON 33 Car Hacking Village CTF write-up: unpacking firmware, cracking a repeating-key XOR, and exploiting an ARM64 buffer overflow.
- [Introducing RASPUTIN: Automated Hardware Reversing by Red Balloon Security](https://redballoonsecurity.com/introducing-rasputin/): Introducing RASPUTIN, the human-on-the-loop automated hardware reversing platform from Red Balloon Security. Launched in May 2025.
- [Hacking Secure Software Update Systems at the DEF CON 32 Car Hacking Village](https://redballoonsecurity.com/dc32-car-hacking-ctf/): DC32 Car Hacking CTF - Read about Red Balloon's CTF at DEF CON 32's Car Hacking Village, highlighting secure software updates.
- [Hacking In-Vehicle Infotainment Systems with OFRAK 3.2.0 at DEF CON 31](https://redballoonsecurity.com/ofrak-at-defcon31/): Red Balloon Security attended DEF CON 31 in Las Vegas, Nevada where we contributed two challenges to the Car Hacking Village Capture the Flag (CTF) competition.
- [Red Balloon Security Identifies Critical Vulnerability in Kratos NGC-IDU](https://redballoonsecurity.com/red-balloon-security-identifies-a-critical-vulnerability-in-the-kratos-ngc-idu/): Red Balloon Security identifies vulnerabilities regularly. Recently, discovered CVE-2023-36670 affects Kratos NGC-IDU 9.1.0.4. Click to read the full blog post.
- [The Power of ChatGPT, in the Palm of My OFRAK](https://redballoonsecurity.com/the-power-of-chatgpt-in-the-palm-of-my-ofrak/): Transform Cisco output strings into engaging visuals with ChatGPT and OFRAK. Elevate your network troubleshooting skills - learn how in our latest blog.
- [In OFRAK 3.0.0, the App Writes the Code for You](https://redballoonsecurity.com/ofrak-3-0-0/): Exciting news for OFRAK users! Our latest feature lets you view a Python script version of your actions within the OFRAK GUI! Stay tuned for updates.
- [How to Patch Functions with OFRAK's FunctionReplacementModifier](https://redballoonsecurity.com/how-to-patch-functions/): OFRAK's FunctionReplacementModifier provides an easy-to-use API that leverages the PatchMaker to replace one or more functions in a binary.
- [A security assessment of protection relays uncovers cybersecurity weaknesses](https://redballoonsecurity.com/a-security-assessment-of-protection-relays-uncovers-cybersecurity-weaknesses/): A security assessment of protection relays uncovers cybersecurity weaknesses January 12, 2022 The electrical grid depends on protection relays. Our analysis of the hardware and firmware in three models should raise concerns about the state of the industry’s overall security — and safety. Ask any Texan who endured the power outages during a severe winter
- [Shmancybear Funsomware Request](https://redballoonsecurity.com/shmancybear/): SHMANCYBEAR: A RANSOMWARE PROOF OF CONCEPT Watch this video for a short-take of our ground-breaking research, which was covered in Bloomberg, TechCrunch, ISS Source, Smart Energy International and elsewhere. This is a demonstration that should push embedded devices to the forefront of cybersecurity discussions.
- [Adventures of Captain Obvious Issue #17.5](https://redballoonsecurity.com/adventures-of-captain-obvious-issue-17-5/): ADVENTURES OF CAPTAIN OBVIOUS ISSUE #17.5 The Cybersecurity Chronicles: Red Balloon Security’s graphic depiction of real-world questions.
- [Embedded Systems and Aerospace & Satellite Cybersecurity](https://redballoonsecurity.com/embedded-systems-and-aerospace-satellite-cybersecurity/): Red Balloon Security White Paper Defending From Within: Why Embedded Systems Are the Essential to Achieving Space and Satellite Cybersecurity Table of Contents: Executive Summary State of Cybersecurity in Space and Satellite Systems The Global Landscape 3 Shaping a Safer Future RedBalloonSecurity Investigations CyberLeo 2022 Defend from Within: Symbiote Embedded Defense for Satellite
- [Adventures of Captain Obvious Issue #24.2](https://redballoonsecurity.com/adventures-of-captain-obvious-issue-24-2/): ADVENTURES OF CAPTAIN OBVIOUS ISSUE #24.2 The Cybersecurity Chronicles: Red Balloon Security’s graphic depiction of real-world questions.
- [Brief Tour of OFRAK 3.1.0](https://redballoonsecurity.com/ofrak-310/): The latest version of OFRAK 3.1.0 on PyPI includes a range of new and experimental features. Click here t our full breakdown and demo clip.

## Pages

- [Home](https://redballoonsecurity.com/): Red Balloon Security protects embedded devices against cyber threats through dynamic runtime defenses and static firmware hardening for critical systems.
- [Funtenna](https://redballoonsecurity.com/research/funtenna/): Learn about Red Balloon Security’s original research, Funtenna, a software-only technique that demonstrates the exploitability of air-gapped networks.
- [BADFET](https://redballoonsecurity.com/research/badfet/): Learn about Red Balloon Security’s BADFET, an electromagnetic fault injection (EMFI) platform created to democratize EMFI research on embedded systems.
- [A Monitor Darkly](https://redballoonsecurity.com/research/a-monitor-darkly/): See how Red Balloon Security demonstrated methods of exploiting on-screen-display controllers in a computer monitor by loading and executing arbitrary code.
- [HSBC&L](https://redballoonsecurity.com/research/hsbcl/): Learn about Red Balloon Security’s research into ATM security, and how the company disclosed and demonstrated a method for remote service without credentials.
- [LADS](https://redballoonsecurity.com/research/lads/): Learn about Red Balloon Security’s contribution to DARPA’s LADS program, which uses analog functionality to create a fully segregated and protected system.
- [Thrangrycat](https://redballoonsecurity.com/research/thrangrycat/): Learn about Red Balloon Security’s Thrangrycat, which defeated Cisco’s Trust Anchor module and exposed a serious security flaw in many communications devices.
- [PIADC Facility](https://redballoonsecurity.com/research/piadc-facility/): Learn about Red Balloon Security’s engagement at PIADC, which led to innovations for governmental and commercial BMS and industrial control systems.
- [Careers](https://redballoonsecurity.com/careers/): Join Red Balloon Security. We are hiring elite security researchers and engineers for advanced cybersecurity roles, with remote options available.
- [DARPA RADICS PROGRAM](https://redballoonsecurity.com/research/darpa-radics-program/): Learn about Red Balloon Security’s contributions to the DARPA RADICS program, which is working towards security electrical grids even during a cyberattack.
- [Blog](https://redballoonsecurity.com/blog/): Read about Red Balloon Security’s latest innovations, insights, and research and stay current on company developments 🎈
- [News](https://redballoonsecurity.com/news/): Stay updated with Red Balloon Security. Explore the latest news, media coverage, and expert insights on embedded device security and evolving cyber threats.
- [Research](https://redballoonsecurity.com/research/): Research from the Red Balloon Security team, including CVE disclosures and work funded by DARPA, NAVSEA, and AFRL across U.S. DoD and DHS programs.
- [Contact Us](https://redballoonsecurity.com/contact/): Contact Red Balloon Security to request a demo of our embedded device security solutions, or reach the team at sales@redballoonsecurity.com.
- [Resources](https://redballoonsecurity.com/resources/): Explore Red Balloon Security’s published research, media appearances and original thought leadership.
- [Industry Solutions](https://redballoonsecurity.com/industry-solutions/): Learn how ICS, BMS, electrical grids, automotive and government installations directly benefit from Red Balloon Security's embedded device security and monitoring solutions.
- [Products](https://redballoonsecurity.com/products/): Symbiote runtime defense and firmware hardening protect embedded devices in critical infrastructure, automotive, defense, and medical systems.
- [Runtime Protection for Medical Devices](https://redballoonsecurity.com/industry-solutions/medical/): Medical device cybersecurity built into the firmware. Symbiote verifies that fielded devices still run the code and clinical parameters you shipped.
- [Runtime Protection for Embedded Devices](https://redballoonsecurity.com/runtime-defense/): Runtime protection for embedded devices: Symbiote hardens firmware at runtime and AESOP adds fleet-wide visibility — proven across 150+ billion device-hours.
- [PRESS MENTIONS](https://redballoonsecurity.com/press-mentions/): Coverage of Red Balloon Security's embedded security research, vulnerability disclosures, and products in the technology and security press.
- [Automotive Solutions](https://redballoonsecurity.com/industry-solutions/automotive/): Secure modern vehicles with our automotive ECU security solutions, featuring ECU-level runtime protection and continuous integrity attestation for firmware.
- [Company](https://redballoonsecurity.com/company/): Access the About, Careers, and Contact pages through this link. Learn more about our mission, explore job opportunities, and find out how to contact us.
- [Newsletter](https://redballoonsecurity.com/newsletter/): Browse past issues of the Embedded Defense Brief—bite-sized embedded security takes on early-boot flaws, firmware hardening, and real-world research.
- [Platforms](https://redballoonsecurity.com/platforms/): Explore Red Balloon Security's platforms for embedded systems: Symbiote runtime defense, AESOP monitoring and telemetry, and Bitwise FPGA assurance.
- [Hardening for Unmanned Aerial Systems (UAS)](https://redballoonsecurity.com/industry-solutions/uas/): Protect unmanned aircraft and ground control systems from firmware tampering and remote attacks. Hardened security solutions for UAS and drone ecosystems.
- [Embedded Security Consulting](https://redballoonsecurity.com/consulting/): Partner with our experts for embedded security consulting to identify vulnerabilities, assess risks, and implement tailored defense strategies.
- [Firmware Hardening for Embedded Devices](https://redballoonsecurity.com/firmware-hard/): Red Balloon Security's binary-level firmware hardening reduces and randomizes attack surface on embedded devices, with no performance impact.
- [About](https://redballoonsecurity.com/about/): Red Balloon Security provides firmware hardening, runtime protection, and security consulting services to manufacturers to secure embedded devices and systems.
- [Hardware Reversing](https://redballoonsecurity.com/hardware-reversing/): Discover the power of RASPUTIN, the first human-on-the-loop hardware reversing robot by Red Balloon Security. This platform automates vital steps in embedded hardware analysis using precision robotics and high-resolution imaging for efficient device scanning and component identification. Whether for supply-chain assurance, device forensics, or adversary research, RASPUTIN improves efficiency and accuracy. Join us in transforming hardware security—request beta access today!
- [AliExpress Conflict Oracle](https://redballoonsecurity.com/aliexpressconflictoracle/): WIRED spotlights low-cost drone add-ons sold on Temu and AliExpress. See Red Balloon Security’s protocol- and firmware-level UAS hardening solutions.
- [Case Studies](https://redballoonsecurity.com/case-studies/): Read our embedded security case studies. Discover how our proven firmware solutions protect critical infrastructure and devices from advanced zero-day threats.
- [Red Balloon Security at COVESA — AutoTech Detroit 2026](https://redballoonsecurity.com/covesa/): Red Balloon Security at COVESA AutoTech Detroit 2026. Explore our connected vehicle research, demos, and runtime defense for the software-defined vehicle.
- [Industrial & BMS Embedded Security](https://redballoonsecurity.com/industry-solutions/industrial-bms/): Protect PLCs, building controllers, gateways, and HMIs with device-layer firmware hardening, runtime protection, and monitoring.
- [NyanSat](https://redballoonsecurity.com/research/nyansat/): Learn how Red Balloon Security research led to workshops with U.S. DDS and Air Force, and advanced understanding of satellite vulnerabilities and defense.
- [Publications](https://redballoonsecurity.com/publications/): RESOURCES PUBLICATIONS The collective vision, passion and hard work of the Red Balloon Security researchers has made universally compatible security for embedded systems a reality. // Featured Research Publications Members of the Red Balloon Security team have spearheaded DoD-funded research initiatives. SEE ALL > Siemens S7-1500: Critical Vulnerabilities Discovered Critical vulnerabilities researched in Siemens SIMATIC
- [Press Releases](https://redballoonsecurity.com/press-releases/): PRESS RELEASES June 5, 2024 Securing embedded devices with the 'Defend from Within' approach to firmware security - Red Balloon Security & DARPA's OFRAK in Commercial Market. PR Web Read Article → Nov. 30, 2023 Red Balloon Security joins Arm Partner Program Digital Journal Read Article → Jan. 12, 2023 Red Balloon Security Discloses Multiple
- [Defense and Aerospace](https://redballoonsecurity.com/industry-solutions/defense-and-aerospace/): Security for Defense and Aerospace Defense for the most sensitive systems on earth and in space Satellites, telecommunications equipment and spacecraft are mission-critical to government agencies and many commercial interests. Ensuring the cybersecurity of the devices within and supporting these deployments is one of the most important tasks over the coming decades. Since its inception,
- [Defend From Within](https://redballoonsecurity.com/defend-from-within/): CONTACT US DEFEND FROM WITHIN Secure firmware is the core of secure systems. Give your customers the defense they demand, even when perimeter defenses fail. EXPLORE OUR INDUSTRY SOLUTIONS Red Balloon Security provides embedded security for critical infrastructure throughout ICS, BMS, energy, automotive, and aerospace systems for commercial and government enterprises. DEFENSE & AEROSPACE INDUSTRIAL&
- [Protecting the Software Defined Vehicle](https://redballoonsecurity.com/covesa/software-defined-vehicle/): Runtime Defense & Monitoring Reduce Risk, Cost, and Compliance Exposure Contain Field Issues& Liability Exposure Runtime enforcement helps prevent tampering from becoming a recall, warranty, or litigation issue Stabilize Lifetime Software Security Spend Planned protection reduces emergency patching, reactive service actions, and lifetime remediation costs De-Risk Compliance & Protect Market Access Runtime evidence supports audits,
- [Runtime Defense and Monitoring](https://redballoonsecurity.com/covesa/runtime-defense/): Runtime Defense and Monitoring Continuous protection and attestation for embedded devices in production — purpose-built to defend connected vehicles, ECUs, and zonal architectures from runtime compromise. WHY RUNTIME DEFENSE MATTERS Three commercial outcomes Runtime Defense delivers Contain Recall & Liability Exposure Patch firmware in-field without callbacks. Reduce warranty risk and post-sale defect liability. Stabilize Lifetime
- [Automotive Embedded Defense](https://redballoonsecurity.com/automotive-embedded-defense/): INDUSTRY SOLUTIONS Automotive Embedded Security for Connected Vehicles ECU‑level runtime defense with continuous integrity attestation—built for OEMs and Tier‑1 suppliers. Request a demo View capabilities // AUTOMOTIVE THREAT LANDSCAPE The evolving in‑vehicle attack surface Connectivity, OTA updates, and expanded infotainment increase exposure across modern vehicle architectures. A compromise may start outside the ECU—but it often
- [Privacy Policy](https://redballoonsecurity.com/privacy-policy/): Privacy Policy Last Updated: Jul 18, 2025 Introduction Red Balloon Security, Inc (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website www.redballoonsecurity.com, including any other media form, media channel, mobile website, or mobile application related
- [Electrical Grid](https://redballoonsecurity.com/industry-solutions/electrical-grid/): INDUSTRY SOLUTIONS Taking electrical grid security to the next level Request a demo Learn more // Embedded System Solutions A solution to protect power delivery in every grid Electrical grids are becoming more connected every year as power generation is distributed and interconnections between systems proliferate. Yet grids are filled with legacy edge devices that