Blog

Stay up to date with our information security blog.

Elisabeth Apicella

Published on 03.04.2019 in the category aramido published.

How Do I Find a Job in Information Security?

Information security: an exciting field with social relevance and promising earning prospects. What should interested parties bring to the table? (read more)

Ethical Hacker Information Security Officer IT Security Job Offer IT Security Officer Job Linux Pentester Python Social Engineering Encryption White Hat Hacker

Elisabeth Apicella

Published on 20.12.2018 in the category Security Advisories published.

Security Advisory: Three Findings at prescreen.io and jobbase.io

As aramido discovered, the cloud-based applicant management software of the company Prescreen had several security deficiencies. (read more)

Authorization • Access Control Data Theft Security Concepts Web Application

Andreas Sperber

Published on 21.11.2018 in the category Web Application Security published.

What are the OWASP Top 10 - 2017?

The OWASP Top 10 - 2017 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Best Practice Guide Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening Secure Coding Session Management SQL Injections Web Application

Elisabeth Apicella

Published on 07.11.2018 in the category Security Advisories published.

Reflected HTML Injection in CRM Software

A security vulnerability in the web software CRM+ by Brainformatik allowed attacks via HTML injection. Who is affected and what should you do now? (read more)

CRM+ Cross Site Scripting (XSS) Defacement Secure Coding Security Concepts

Regina Okun

Published on 01.10.2018 in the category aramido published.

Understanding Hacker Attacks - A Workshop for Ethical Hackers

Full-day hacker workshop as a Capture The Flag (CTF game) in Jeopardy mode. How can I as an ethical hacker test my own applications? (read more)

Capture The Flag (CTF) Ethical Hacker Juice Shop Live Hacking Symfony Training Workshop Event Web Application White Hat Hacker