I took this wind farm picture southeast of Paris France.

I made the highlight reel in Riyadh! 😁 www.linkedin.com/posts/montae...

The winners of the final challenge in the SCADA security class I taught in Riyadh. We had a lot of fun this week! #ICS410 @sansinstitute.bsky.social #SANS_EMEA

#hardwareHacking @sansinstitute.bsky.social

Riyadh - June 22, 5:30 PM AST How attackers break into industrial control systems, recent examples of real attacks. Always a enjoyable event Free SANS Community Night, in person or virtually. Hope to see you there. Register: lnkd.in/eGndRR9P @sansinstitute.bsky.social #HardwareHacking

Proof that AI is effective at finding vulnerabilities in important software. The vulns, found and patched in OpenSSL were not previously discovered by various external code audits. www.linkedin.com/posts/montae...

Let's explore techniques in critical infrastructure security in Disneyland at the EnergySec Conference in August. Join me there. It will be fun, promise! :) #HardwareHacking #EnergySec #SANS

:( Inspector general finds NIST mistakes have made vulnerability database ineffective | The Record from Recorded Future News share.google/WdMjyfVhUN3E...

I don't need AI to be smarter I just want it to be faster. Working on a wifi/RF project with Claude code. It can even SSH into a Raspi to make config changes for me. 🙂 I'm over being amazed at how good AI is at doing a lot of the grunt work. I just want it to grunt faster.

Come join me in Disneyland this August to learn about hidden wireless communication in critical infrastructure devices. It'll be fun, I promise. :) @EnergySec #HardwareHacking @SANSICS

If you've been in one of my classes in the last decade you've heard about this. hackaday.com/2026/05/15/h... #HardwareHacking

Glad they figured out that making patches illegal would make the devices less secure. www.tomshardware.com/networking/r...

Another fun day at the IEEE International Symposium on Hardware-Oriented Security and Trust Conference (HOST). :)

Useful. Probably AI generated. Do you see any errors? #HardwareHacking

Received this challenge coin at the Energy Emergency Working Group for the State of North Carolina, for covering new cyberthreats to Energy systems (Think electric, fossil fuels, wind, solar, pipelines etc.) :) (Presentation was TLP-Amber) @sansinstitute.bsky.social #SANSICS #HardwareHacking

If you have been in a class of mine in the last decade or so you've heard me rant about these devices. #HardwareHacking www.darkreading.com/ics-ot-secur...

@patrickcmiller.bsky.social @agreenberg.bsky.social arstechnica.com/tech-policy/...

This is going to get interesting since I can't find any US made Wi-Fi routers. Do you know of any? #HardwareHacking Everything You Need to Know About the FCC Ban | PCMag share.google/nnl81l9KzijK...

Do you need a #HardwareHacking Merit Badge sticker? Stop me at RSA (or anywhere) and I'll give you one of these.

This is my other RSAC event, a birds of a feather session. I'd love you hear your thoughts about unexpected or undocumented wireless in devices. Wednes 2:25 p.m. PDT Moscone West room 3000 #HardwareHacking

If you are in San Francisco at the RSA conference; come to my workshop with a laptop and walk away with a free microcontroller you've programmed to be a malicious keyboard emulation device. @SANSInstitute @SANSICS #HardwareHacking

#HardwareHacking #CalibrationFail Cyberattack on vehicle breathalyzer company leaves drivers stranded across the US | TechCrunch share.google/clnUc4IiWhux...

Repeat after me: routers are computers running software that may be vulnerable. #HardwareHacking -- Law enforcement shuts down botnet made of tens of thousands of hacked routers | TechCrunch share.google/8YDTmTcb3WTN...

I had a great time on Jim's podcast discussing malware analysis, reverse engineering, working at Dragos, and a little bit of my personal history. www.youtube.com/watc...

Important notice for OT environments. “Users have reported their devices were updated from Windows 11 version 24H2 to 25H2 without authorization.” share.google/yFQ66466QPr5...

Interesting. What do you think? -- Memory bit flips cause up to 15% of Firefox crashes, asserts Mozilla engineer — figure inferred from 470,000 auto-submitted crash reports | Tom's Hardware share.google/da5YE7ab1UxV...

Today is a good day to check ALL of your edge protection. Cisco Drops 48 New Firewall Vulnerabilities, 2 Critical share.google/GPrycC23G9i1...

Location information provided by the apps you install on your phone is available for sale to anyone. Feds Used Online Advertising Data to Track the Public's Phone Locations share.google/GeebTCOsGMdT...

Come join my Birds of a Feather (BOF) session at RSA where we discuss unexpected wireless hardware in our equipment. How to find it, what to do about it. It's a open discussion. I'd like to hear your thoughts. path.rsaconference.com/flow/rsac/us... #SANSInstitute #RSAC2026 #SansICS

Good security info here. Maybe the basics aren't so basic after all? Or just not particularly common. Attackers keep finding the same gaps in security programs - Help Net Security share.google/1QGED52NW61q...

I would bet this is based on "experience" from intelligence agencies. Locations to affect operations is easier when the device has "forever days".* *Forever day, kind of like a zero day except it will never be patched. www.bleepingcomputer.com/news/securit...

Don't pay these attackers Don't fund their second houses. Don't make their boat payments. Don't finance their retirement. If you pay them, they will come. Even if you pay them you still have to do the security. And sometimes paying them doesn't work. www.theregister.com/2026/02/04/n...

Working with RF and a commercial($$$) Faraday cage is tricky. My SDR radio is sealed inside. Watch as RF is radiated from me to the laptop traveling the USB cable into the Faraday cage and the SDR receiver. photos.app.goo.gl/6GzoNdygezMn... @sansinstitute.bsky.social #HardwareHacking #SEC617

These are the high scorers in my SCADA security class in D.C. last month. What a great bunch of folks! @sansinstitute.bsky.social #SANSICS #ScadaSecurity

#Bluetooth #HardwareHacking Denmark Orders Public Officials to Turn Off Their Bluetooth Due to High Risk of Being Spied on by U.S. Intelligence share.google/nBgXDPRRKxaq...

Hardware Hacking Workshop at RSA. Attend my hands-on hardware hacking workshop: program a microcontroller to attack a computer, and keep the device when you're done. #HardwareHacking #SANS

I am alternately amazed by AI's grunt work and appalled by its stupidity. It always teases me in programming projects by getting to 80% done very quickly and 100% done frequently never...

I'm excited about getting my new bread rack put together in my below ground lair.  It’s giving me more space for upcoming projects. #HardwareHacking #BelowGroundLair #LaBORatory

#HarwareHacking, a little out of the ordinary. A Wall-e robot repair. #walle #Robot #Repair www.linkedin.com/pulse/hardwa... Hat tip to @randirain.bsky.social

China using a more redundant approach to PNT, position navigation and timing, including ground stations as opposed to only space-based "GPS" as most countries do. breakingdefense.com/2026/01/chin...

In Washington DC teaching a cyber security class for critical infrastructure. My workshop after class was a lot of fun and a big hit. A participant said: "The highlight? Monta Elkins's hands-on workshop, where we programmed a $4 microcontroller to execute USB HID attacks. "

Curious. FBI looking for unjammable drones. The FBI is hunting for 'unjammable' drones – and these flying cameras use one very old-school trick to stop remote attacks | TechRadar share.google/i43iIVcIQHfF...

I hear there's a really good talk happening Tuesday night, live and online. :) #HardwareHacking. Sign up here: www.sans.org/orlando-fall...

"Shutdown Sparks 85% Increase in US Gov't Cyberattacks" share.google/cfhUcXE7JlIK...

Hardware hacking always wins. Hacking a casino card shuffling machine. #HardwareHacking www.wired.com/story/how-ha...

:0

If you've been in my classes, we've talked about this. -- Cache poisoning vulnerabilities found in 2 DNS resolving apps - Ars Technica share.google/61TQ9VlXy6iJ...

Electric sector critical infrastructure protection audit issues in 2025. -- FERC 2025 CIP Audit Findings: AMPYX CYBER share.google/WY1HSRXdnBcP... @ampyxcyber.com

Repeat after me: switches are computers running software that may be vulnerable. If you've ever been in one of my classes you already know this. #HardwareHacking Cisco Warns of Actively Exploited SNMP Vuln Allowing RCE or DoS in IOS Software share.google/W7KPY69grqZ1...