Blog

Stay up to date with our information security blog.

Hannah Schneider

Published on 30.11.2020 in the category Software Security published.

How the Dolphin Attack Opens Doors and Windows in the Smart Home

aramido demonstrated live at the Innovation Festival how smart home devices controlled by voice assistants can be attacked unnoticed (read more)

Colorful Night of Digitalization Dolphin Attack Internet of Things Live Hacking Employee Awareness Monitoring Event

Jan Weil

Published on 21.11.2020 in the category Communication Security published.

OCSP Stapling: The Good, the Bad, and the Ugly

When hackers have compromised a certificate, the Online Certificate Status Protocol (OCSP) with the Must-Staple extension is often the last line of defense for your own protection. (read more)

OCSP-Responder OCSP-Stapling Online Certificate Status Protocol (OCSP) Public Key Infrastructure (PKI) Webbrowser Webserver X.509

Gil Talebian

Published on 15.10.2020 in the category Communication Security published.

Protection Against Phishing, Vishing & Co. - Seven Golden Rules Against Social Engineering

aramido demonstrates how to protect yourself against phishing and other social engineering attacks - our contribution to the European Cyber Security Month (ECSM). (read more)

Checklist • Cheat Sheet Cold Boot Data Theft E-Mail European Cyber Security Month (ECSM) Employee Awareness Phishing Social Engineering Training Workshop

Hannah Schneider

Published on 09.10.2020 in the category aramido published.

When Dolphins Outsmart the Smart Home - InnovationFestival @karlsruhe.digital

aramido demonstrates live how smart home devices can be covertly attacked using voice commands in the ultrasonic range (read more)

Colorful Night of Digitalization Dolphin Attack Ethical Hacker Internet of Things Live Hacking Employee Awareness Monitoring Event White Hat Hacker

Andreas Sperber

Published on 14.09.2020 in the category Security Advisories published.

Security Advisory: 1CRM Insufficient Data Protection (CVE-2020-15958)

A security vulnerability in the 1CRM software allowed unauthorized users to access sensitive files and system backups. (read more)

1CRM Insecure Direct Object Reference Pentester Secure Coding SugarCRM