Blog

Stay up to date with our information security blog.

Moritz Kaumanns

Published on 23.07.2020 in the category Communication Security published.

FIDO2 and WebAuthn: Login without a Password

FIDO2 and WebAuthn allow a secure and phishing-resistant authentication for web services in order to avoid data leakage. (read more)

Authentication Authorization • Access Control Challenge-Response Procedure Data Theft FIDO2 Social Engineering Social Hacking Spear Phishing WebAuthn Two-Factor Authentication (2FA)

Tristan Wagner

Published on 09.07.2020 in the category Security Advisories published.

Two Vulnerabilities in TeamBeam

aramido was able to identify two vulnerabilities in the data exchange platform TeamBeam. (read more)

Cross Site Scripting (XSS) Secure Coding Web Application

Benjamin Pokrant

Published on 06.05.2020 in the category Security Advisories published.

HTML Injection Vulnerability in WordPress Plugin WPForms

A security vulnerability in the WordPress plugin WPForms allowed attacks via HTML injection. How does this vulnerability affect systems and how can it be closed? (read more)

Cross Site Scripting (XSS) Secure Coding Security Concepts Spear Phishing Web Application WordPress Zero-Day-Exploits

Jonas Lehmann

Published on 03.04.2020 in the category Security Advisories published.

How can IT managers ensure a secure home office during the coronavirus pandemic?

A six-step guide for information security in the home office and tips for financial support. (read more)

IT Governance Employee Awareness Company WLAN

Hannah Schneider

Published on 17.02.2020 in the category aramido published.

Save the Date: Cooling Spray, Popcorn, and Live Hacking at the IT Cinema

aramido demonstrates the Cold Boot attack at the BWG IT Cinema, showing how a disk encryption can be bypassed. (read more)

Bitlocker Cold Boot Data Theft Data Carrier Digital Forensics • IT Forensics FileVault Live Hacking LUKS Employee Awareness Pentester Event Encryption