Deral Heiland

I will be @CackalackyCon in Raleigh, NC on May 15–17, where I’ll be speaking cackalackycon.org Also, a couple of my @rapid7 penetration team members and I will be running hands-on hardware hacking exercise. So join us and learn some fun hardware hacking techniques.

Excited to share that I’ll be speaking at @HackSpaceCon on May 9 in Cape Canaveral, Florida! hackspacecon.com

So just got back yesterday from #RSAC where i presented "Exploiting Cellular IoT Pathways to Compromise Trusted Access". I had an amazing time. Also, @CarlotaBindner and I released a new white paper on the subject. Please check it out- rapid7.com/blog/post/tr-n…

Make room in your RSAC itinerary for Principal Researcher (IoT) Deral Heiland's session on how hardware hacking techniques exploit cellular IoT to gain trusted access & how organizations can better defend against these risks. Get the details: r-7.co/3PywfbV | @Percent_X

@dcuthbert He was brilliant mind and will be missed. He once helped me with editing and technical reviewing on a research paper i was writing years ago on exploiting Xerox firmware process attacks. His insight and guidance was amazing.

Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed RIP my friend and thank you

RSAC Conference is less than a month away, and I’m excited to announce that I’ll be speaking on March 24, 2026 at 1:15 PM PDT. 🎤 NCS-T09 – Exploiting Cellular IoT Pathways to Compromise Trusted Access Session details: lnkd.in/evPytdjx I hope to see everyone there !

I have starting to prep the @rapid7 hands-on hardware exercise for @defcon @IoTvillage. I have a plan and have started acquiring the needed devices and tools. More detail will be posted as we get closer to #hackersummercamp

Bug in widely used VoIP phones allows stealthy network footholds, call interception (CVE-2026-2329) - helpnetsecurity.com/2026/02/19/gra… - @rapid7 @stephenfewer @fulmetalpackets @GrandstreamNet #IPphones #SecurityUpdate #SMBs #VoIP #Vulnerability #Cybersecurity #CybersecurityNews

CyberBay Conference in Tampa Florida is only a month away. Please join me on March 12th for a discussion on building out an IoT embedded device security testing program - cyberbay.org

🚨 On 2/6/26, #BeyondTrust disclosed a critical RCE vulnerability affecting its Remote Support (RS) and Privileged Remote Access (PRA) products. The flaw has been assigned CVE-2026-1731 and a near-maximum CVSSv4 score of 9.9. More in the Rapid7 blog: r-7.co/4arAjln

How it started and how it went - check out my CES 2026 review videos: youtu.be/86CpgYTJfGw youtu.be/VYEkjckAlWc #CES2026

@nmatt0 Lol, What could ever go wrong here

This is what we call a target rich environment.

@nmatt0 Me and a @CarlotaBindner have been doing research in this area also, we released a white paper and spoke at @BlackHatEvents rapid7.com/globalassets/_… i.blackhat.com/BH-USA-25/Pres… We will be releasing a white paper soon on weaponization of cellular for RSAC26 Keep up the good work !

Ever wonder how LTE-based IoT devices communicate over the internet? I modified a Chinese GPS tracker that is in common use in the US and got the cell modem to communicate with internet systems other than the GPS tracker's cloud servers.

Attending CES2026 this week and I can now claim officially I have seen it all. A smart vacuum cleaner with its own drone delivery feature. #CES2026

🚨 On 12/19/25, MongoDB Inc. disclosed a critical new vuln. affecting #MongoDB – one of the most popular document-oriented databases. CVE-2025-14847, or #MongoBleed, is a high-severity unauthenticated memory leak. More in the Rapid7 blog: r-7.co/4piWbER

Released a new White paper last week "Multifunction Printer (MFP) Security Concerns within the Enterprise Business Environment" You can link to the white paper from the following @rapid7 blog, Please check it out - rapid7.com/blog/post/ve-n…

It was great time chatting with with Joe Pannone at CyberBay on the “Discipline Conversations” podcast. Please check it out: open.spotify.com/episode/27X8Dr…

I'll be speaking at Queen City Conference 0x3 on Nov 08 , 2025. My talk "So you want to hack on hardware ?" I Hope to see you there! queencitycon.org

Want to get your product or service introduced to security teams in the Greater Cincinnati region? Looking to participate in one of the fastest growing cybersecurity conferences in the Midwest? #QueenCityCon0x3 is it! Sponsorship details: queencitycon.org/sponsorship #QueenCityCon

🚨 Rapid7 has observed increased activity involving a new threat group and #AWS cloud environments. Self-referred to as ‘Crimson Collective’, the group has claimed responsibility for the recent theft of private repositories from the #RedHat GitLab. More: r-7.co/48ltfqS