The Log4Shell zero-day vulnerability is considered highly security-critical. It allows attackers to execute arbitrary code.
MoreIT Security Blog by turingpoint
Blog posts about IT security in general, penetration testing, cloud security and red teaming from our team.
blog.categories
The man-in-the-browser attack is a form of man-in-the-middle attack in which an attacker takes control of the browser.
More
The new coalition agreement aims to strengthen the law on the Internet and advance society in terms of cyber security.
More
There are three new categories in the OWASP Top 10 and the prioritization of some already known categories has changed.
More
Numerous versions you can use for the Node Package Manager update may be contaminated with malicious code, according to repository officials.
More
This disclosure capability of GraphQL is both strength and weakness at the same time and should be tested accordingly.
More
The reasons for penetration testing are numerous and yet, from a legal perspective, they are often in a gray area.
More