Blog

Stay up to date with our information security blog.

  2. Blog
Hannah Schneider

Published on 10.06.2021 in the category aramido published.

Secure by System: Cybinar on Information Security Management Systems

Do I need an Information Security Management System (ISMS)? aramido consultants provide practical tips based on a case study on July 14 (read more)

BSI-Grundschutz Information Security Officer ISMS ISO 27001 PCI-DSS Security Concepts TISAX Company VdS 10000 Event
Hannah Schneider

Published on 12.02.2021 in the category aramido published.

On a Growth Path: aramido moves into new premises at Durlacher Allee

Your company can also benefit from this: aramido is renting out large, bright office units in a separate area for subtenants. (read more)

Information Security Officer IT Security Officer Job Live Hacking Training Workshop Company Event
Moritz Kaumanns

Published on 01.02.2021 in the category Security Advisories published.

Security Advisory: Amazon Secret Key Publicly Accessible (CVE-2020-28199)

A security vulnerability in an Amazon Pay plugin for Shopware 5 allows the unauthorized reading of the Amazon Secret Key (CVE-2020-28199). (read more)

Amazon Pay Authorization • Access Control Data Theft Information Disclosure Security Audit Shopware
Hannah Schneider

Published on 30.11.2020 in the category Software Security published.

How the Dolphin Attack Opens Doors and Windows in the Smart Home

aramido demonstrated live at the Innovation Festival how smart home devices controlled by voice assistants can be attacked unnoticed (read more)

Colorful Night of Digitalization Dolphin Attack Internet of Things Live Hacking Employee Awareness Monitoring Event
Jan Weil

Published on 21.11.2020 in the category Communication Security published.

OCSP Stapling: The Good, the Bad, and the Ugly

When hackers have compromised a certificate, the Online Certificate Status Protocol (OCSP) with the Must-Staple extension is often the last line of defense for your own protection. (read more)

OCSP-Responder OCSP-Stapling Online Certificate Status Protocol (OCSP) Public Key Infrastructure (PKI) Webbrowser Webserver X.509