Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Infrastructure Penetration Test

The New OWASP Top 10 from 2021

There are three new categories in the OWASP Top 10 and the prioritization of some already known categories has changed.
Fabian Gold
Fabian Gold
7 min read
Web/API Penetration Test

Node Package Manager Security - Everything About NPM Package Security

Numerous versions you can use for the Node Package Manager update may be contaminated with malicious code, according to repository officials.
Jan Kahmen
Jan Kahmen
8 min read
Mobile App Penetration Test

Vulnerabilities in GraphQL - Overview and Case Studies

This disclosure capability of GraphQL is both strength and weakness at the same time and should be tested accordingly.
Fabian Gold
Fabian Gold
7 min read
Web/API Penetration Test

Error Culture in the IT Department - How an Open Approach to Errors Promotes the Security Level of Companies

An open error culture in IT departments promotes security awareness and helps companies address vulnerabilities more effectively.
Jan Kahmen
Jan Kahmen
9 min read
Penetration Test

Data Protection and Data Security - Account Deletion within Apps Soon Mandatory

A new feature is mandatory account deletion: If users are asked to set up an account for an app, it must also be possible to delete it.
Jan Kahmen
Jan Kahmen
9 min read
Mobile App Penetration Test

The Penetration Testing Execution Standard (PTES) Simply Explained

PTES is a guide that enables testers to perform effective penetration testing.
Jan Kahmen
Jan Kahmen
8 min read