Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

ISMS

Testing Digital Operational Resilience under DORA

It is important for financial organizations to establish and regularly update TLPT to review their digital operational resilience.
Jan Kahmen
Jan Kahmen
5 min read
Red Teaming

Phishing with Flexible HTTP Reverse Proxy

An HTTP reverse proxy can be used to improve phishing simulations by switching between the client and the target server.
Jan Kahmen
Jan Kahmen
3 min read
Red Teaming

What Is Pharming?

The term "pharming" refers to the attempt to fraudulently obtain personal information such as credit card details through fake websites. This involves manipulating the DNS queries of web browsers.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

Version 2022 of the ISO 27001

The International Accreditation Forum (IAF) published the new and improved ISO/IEC 27001:2022 in October 2022.
Jan Kahmen
Jan Kahmen
3 min read
ISMS

DORA - Digital Operational Resilience Act

The Digital Operational Resilience Act (DORA (EU) 2022/2554) solves an important problem in EU financial regulation. Financial institutions must now also follow rules for the protection, detection, containment, recovery and repair of ICT-related incidents.
Jan Kahmen
Jan Kahmen
4 min read
Penetration Test

Classification of Pentests According to BSI

Penetration tests, penetration testing or pentest(ing) for short, differ not only in the object of investigation (web, mobile, infrastructure, etc.) or depth of testing. There are six criteria that can influence the implementation of a pentest.
Jan Kahmen
Jan Kahmen
7 min read