Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Penetration Test

Why an Automated Scan Is Not a Penetration Test

Vulnerability scans are often passed off as penetration tests. However, there is a huge difference between these packages.
Fabian Gold
Fabian Gold
6 min read
Penetration Test

OWASP Mobile Top 10 - More Security for Mobile Applications

The OWASP Mobile Top 10 is a list of the most urgent vulnerabilities you should protect mobile applications from.
Jan Kahmen
Jan Kahmen
9 min read
Penetration Test

What Happens During a DDoS Attack?

When cyber criminals launch a DDoS attack, they wantonly cause an overload in the attacked IT infrastructure.
Jan Kahmen
Jan Kahmen
9 min read
Cloud Security

What Is Cross-Site Request Forgery?

Cross-site request forgery (CSRF/XSRF) is an attack that forces an end user to perform an unwanted action in a web application.
Fabian Gold
Fabian Gold
8 min read
Cloud Security

Time-based User Enumeration

Since the classical enumeration of user names is often no longer possible, a time-based approach must be taken to get this information.
Fabian Gold
Fabian Gold
6 min read
Cloud Security

No Secure Application Without a Security Concept

Today, IT security is more important than ever. After all, data breakdowns, system failures and even hacker attacks put a strain on the IT infrastructure.
Jan Kahmen
Jan Kahmen
9 min read