Cyber Security Blog

Blog posts about Cyber Security, Pentesting, Cloud Security and Red Teaming from our team.

Red Teaming

Security Testing in the Context of the MITRE ATT&CK Framework

Cyberattacks follow recurring patterns. The MITRE ATT&CK Framework systematically catalogs these patterns and provides organizations with a common language.
Jan Kahmen
Jan Kahmen
11 min read
Penetration Test

BSI TR-03161: Comprehensive Security Standard for Healthcare Applications

BSI TR-03161: Security standard for healthcare applications with mobile, web and backend components
Jan Kahmen
Jan Kahmen
11 min read
Penetration Test

Google Tag Manager: Risks Posed by Custom JS

If misused, custom JS tags in GTM can access data, manipulate users, or reload third-party domains.
Jan Kahmen
Jan Kahmen
4 min read
Penetration Test

Physical Penetration Tests

Physical penetration testing is a procedure used to check the effectiveness of a company's physical security measures. It involves simulating a real attack in order to uncover potential vulnerabilities.
Jan Kahmen
Jan Kahmen
4 min read
ISMS

GAP Analysis According to NIS2

A GAP analysis is a structured process for comparing the current status of IT security and compliance measures with the NIS2 Directive.
Jan Kahmen
Jan Kahmen
3 min read
DevSecOps

What Is DSOMM?

DSOMM stands for DevSecOps Maturity Model and is a maturity model that helps to integrate measures into modern DevOps processes in a structured manner.
Jan Kahmen
Jan Kahmen
3 min read