Blog

Stay up to date with our information security blog.

  2. Blog
Gil Talebian

Published on 15.10.2020 in the category Communication Security published.

Protection Against Phishing, Vishing & Co. - Seven Golden Rules Against Social Engineering

aramido demonstrates how to protect yourself against phishing and other social engineering attacks - our contribution to the European Cyber Security Month (ECSM). (read more)

Checklist • Cheat Sheet Cold Boot Data Theft E-Mail European Cyber Security Month (ECSM) Employee Awareness Phishing Social Engineering Training Workshop
Hannah Schneider

Published on 09.10.2020 in the category aramido published.

When Dolphins Outsmart the Smart Home - InnovationFestival @karlsruhe.digital

aramido demonstrates live how smart home devices can be covertly attacked using voice commands in the ultrasonic range (read more)

Colorful Night of Digitalization Dolphin Attack Ethical Hacker Internet of Things Live Hacking Employee Awareness Monitoring Event White Hat Hacker
Andreas Sperber

Published on 14.09.2020 in the category Security Advisories published.

Security Advisory: 1CRM Insufficient Data Protection (CVE-2020-15958)

A security vulnerability in the 1CRM software allowed unauthorized users to access sensitive files and system backups. (read more)

1CRM Insecure Direct Object Reference Pentester Secure Coding SugarCRM
Moritz Kaumanns

Published on 23.07.2020 in the category Communication Security published.

FIDO2 and WebAuthn: Login without a Password

FIDO2 and WebAuthn allow a secure and phishing-resistant authentication for web services in order to avoid data leakage. (read more)

Authentication Authorization • Access Control Challenge-Response Procedure Data Theft FIDO2 Social Engineering Social Hacking Spear Phishing WebAuthn Two-Factor Authentication (2FA)
Tristan Wagner

Published on 09.07.2020 in the category Security Advisories published.

Two Vulnerabilities in TeamBeam

aramido was able to identify two vulnerabilities in the data exchange platform TeamBeam. (read more)

Cross Site Scripting (XSS) Secure Coding Web Application