PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Sparkplug B Protocol Fuzzing with AI Assistance

bishopfox.com | blog | #ai-security | #fuzzing | #ics | #scada | #sparkplug-b | #mqtt | #ai-assisted
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox releases a Sparkplug B protocol fuzzer — the first public one covering all 9 message types, 19 data types, and 87+ field paths — built with AI assistance for ICS and SCADA deployments.
Published
Collected

Related coverage

blog · bugcrowd.com
Three AI security assumptions that will break in 2026
Three assumptions will break in 2026: AI won't simplify security decisions, it widens the vulnerability gap, and AI-enabled attacks will first hit the least prepared targets, from ICS/SCADA on down.
blog · blog.viettelcybersecurity.com
Modbus và một số công cụ kiểm thử
A hands-on walkthrough of Modbus RTU and TCP frame structures for ICS/SCADA systems, demonstrating how to write and compare several fuzzing tools built for the protocol.
blog · bishopfox.com
YoSmart YoLink Hub version 0382
Bishop Fox found three flaws in the YoSmart YoLink Hub v0382: insufficient authorization controls, unencrypted MQTT traffic, and improper session management; YoLink later confirmed server-side fixes.
blog · bishopfox.com
Next-Level Fingerprinting: Tools, Logic, and Tactics
Leveling up fingerprinting for recon: combine AI-assisted research with real-world data, normalize signatures against CPEs to map services to CVEs, and close existing tools' accuracy gaps.
blog · blog.quarkslab.com
Internship Offers for the 2026-2027 Season
The internship 2026-2027 season at Quarkslab is open! Our internship positions cover a wide range of topics and expertise, and aim at tackling new challenges in various fields.
blog · xbow.com
How Attackers Are Using AI & What Defenders Must Do
Attackers are running AI driven attack chains from recon to exploitation in minutes. Here’s what actually changed, and why defenders need AI pentesting to keep pace.
Back