Who We Are
bISCuits is a premier cybersecurity research group operating within the Faculty of Automatic Control and Computers at University Politehnica of Bucharest (UPB). Our name is a playful acronym for bISCuits — blending the rigor of security research with a culture of curiosity and camaraderie.
Building a Harder,
Safer Digital World
We conduct cutting-edge research in offensive and defensive security, with a particular focus on iOS and mobile ecosystems, IoT firmware security, vulnerability disclosure, and applied cryptography.
Our work spans the entire security research lifecycle — from theoretical foundations and tool development to responsible CVE disclosure and academic publication.
We believe that understanding how systems break is the most reliable path to making them resilient. This philosophy drives every project we undertake.
We follow ethical standards and coordinate with vendors before any public release.
Our findings are published at top-tier venues including USENIX, CCS, and IEEE S&P.
We foster open-source tooling and welcome collaboration with industry and academia.
We invest heavily in training the next generation of security researchers.
Our Journey
The group was established by PhD students passionate about mobile security and low-level exploit development.
Disclosed our first coordinated vulnerability in a popular open-source IoT library.
Published foundational research on iOS Secure Enclave attack surfaces.
Moved to dedicated research lab facilities at UPB's Faculty of ACS.
Established research partnerships with European cybersecurity institutes.
Our Affiliation
University Politehnica of Bucharest
Faculty of Automatic Control and Computers (ACS)
UPB is Romania's leading technical university, with a strong tradition in computer science, electrical engineering, and applied mathematics.