Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Penetration Test

Functionality of the TIBER-DE Framework in Detail

The TIBER-DE framework (Threat Intelligence-based Ethical Red Teaming) is a national framework for simulating cyber attacks in Germany.
Jan Kahmen
Jan Kahmen
4 min read
ISMS

Testing Digital Operational Resilience under DORA

It is important for financial organizations to establish and regularly update TLPT to review their digital operational resilience.
Jan Kahmen
Jan Kahmen
5 min read
Red Teaming

Phishing with Flexible HTTP Reverse Proxy

An HTTP reverse proxy can be used to improve phishing simulations by switching between the client and the target server.
Jan Kahmen
Jan Kahmen
3 min read
Red Teaming

What Is Pharming?

The term "pharming" refers to the attempt to fraudulently obtain personal information such as credit card details through fake websites. This involves manipulating the DNS queries of web browsers.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

Version 2022 of the ISO 27001

The International Accreditation Forum (IAF) published the new and improved ISO/IEC 27001:2022 in October 2022.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

DORA - Digital Operational Resilience Act

The Digital Operational Resilience Act (DORA (EU) 2022/2554) solves an important problem in EU financial regulation. Financial institutions must now also follow rules for the protection, detection, containment, recovery and repair of ICT-related incidents.
Jan Kahmen
Jan Kahmen
4 min read