Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Web/API Penetration Test

OWASP Top 10 Mapping: From 2021 to 2025

The OWASP Top 10:2025 introduces two new categories, one rename, and a quiet goodbye to SSRF. What that means for pentest scopes and finding templates.
Jan Kahmen
Jan Kahmen
7 min read
Penetration Test

Grundschutz++ OSCAL Catalog: What the BSI Actually Requires for Pentests

We analyzed the Grundschutz++ OSCAL catalog: 998 requirements, penetration tests only optional. What this means for organizations under NIS-2.
Jan Kahmen
Jan Kahmen
5 min read
Cloud Security

Cloud Attacks 2026: What the IBM X-Force Report Means for Your Cloud Security

IBM X-Force 2026: 44% more attacks on cloud applications, 16M infected devices, identity as the primary risk. What organizations must do now.
Jan Kahmen
Jan Kahmen
7 min read
Penetration Test

BSI-Certified Pentest Providers: Certification, Requirements, and the Current List

Who is authorized to perform IS penetration tests according to BSI? Personal certification, company requirements, and the current BSI list.
Jan Kahmen
Jan Kahmen
4 min read
ISMS

DIN SPEC 27076: Preparation and Implementation for SMEs

What companies need to know about the CyberRisikoCheck based on DIN SPEC 27076: topic areas, scoring, funding, and the path to ISO 27001.
Jan Kahmen
Jan Kahmen
4 min read
ISMS

Protection Requirement Categories in Cyber Security

How organizations use BSI IT-Grundschutz protection requirement categories to prioritize IT security and allocate resources effectively.
Jan Kahmen
Jan Kahmen
4 min read