Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Mobile App Penetration Test

Vulnerabilities in GraphQL - Overview and Case Studies

This disclosure capability of GraphQL is both strength and weakness at the same time and should be tested accordingly.
Fabian Gold
Fabian Gold
7 min read
Web/API Penetration Test

Error Culture in the IT Department - How an Open Approach to Errors Promotes the Security Level of Companies

An open error culture in IT departments promotes security awareness and helps companies address vulnerabilities more effectively.
Jan Kahmen
Jan Kahmen
9 min read
Penetration Test

Data Protection and Data Security - Account Deletion within Apps Soon Mandatory

A new feature is mandatory account deletion: If users are asked to set up an account for an app, it must also be possible to delete it.
Jan Kahmen
Jan Kahmen
9 min read
Mobile App Penetration Test

The Penetration Testing Execution Standard (PTES) Simply Explained

PTES is a guide that enables testers to perform effective penetration testing.
Jan Kahmen
Jan Kahmen
8 min read
Penetration Test

DOM Invader - The New Feature of Burp Suite

Burp Suite quickly and easily detects the XSS issue in DOM-based Cross Site Scripting executed directly in the browser.
Jan Kahmen
Jan Kahmen
8 min read
Mobile App Penetration Test

FORCEDENTRY: iMessage Zero-Click Exploit in Check

An analysis of a Saudi Arabian activist's smartphone revealed that NSO Group used a zero-click exploit against iMessage.
Jan Kahmen
Jan Kahmen
8 min read