🔐 aramido makes IT secure.

Further information

All blog articles on the subject of Data Theft

Fabienne Hofsäß

Published on 09.09.2024 in the category Communication Security published.

Who's Afraid of the Big Bad Wolf? Voice Cloning and Modern Deception

Many of us know the fairy tale of the Big Bad Wolf, who uses clever tricks to deceive his victims. Today, artificial intelligence (AI) can deceive us in a similar way. (read more)

Checklist • Cheat Sheet Data Theft E-Mail Ethical Hacker Live Hacking Man-In-The-Middle (MIM) Employee Awareness Password Phishing Social Engineering Spear Phishing Training Workshop Event

Moritz Kaumanns

Published on 01.02.2021 in the category Security Advisories published.

Security Advisory: Amazon Secret Key Publicly Accessible (CVE-2020-28199)

A security vulnerability in an Amazon Pay plugin for Shopware 5 allows the unauthorized reading of the Amazon Secret Key (CVE-2020-28199). (read more)

Amazon Pay Authorization • Access Control Data Theft Information Disclosure Security Audit Shopware

Gil Talebian

Published on 15.10.2020 in the category Communication Security published.

Protection Against Phishing, Vishing & Co. - Seven Golden Rules Against Social Engineering

aramido demonstrates how to protect yourself against phishing and other social engineering attacks - our contribution to the European Cyber Security Month (ECSM). (read more)

Checklist • Cheat Sheet Cold Boot Data Theft E-Mail European Cyber Security Month (ECSM) Employee Awareness Phishing Social Engineering Training Workshop

Moritz Kaumanns

Published on 23.07.2020 in the category Communication Security published.

FIDO2 and WebAuthn: Login without a Password

FIDO2 and WebAuthn allow a secure and phishing-resistant authentication for web services in order to avoid data leakage. (read more)

Authentication Authorization • Access Control Challenge-Response Procedure Data Theft FIDO2 Social Engineering Social Hacking Spear Phishing WebAuthn Two-Factor Authentication (2FA)

Hannah Schneider

Published on 17.02.2020 in the category aramido published.

Save the Date: Cooling Spray, Popcorn, and Live Hacking at the IT Cinema

aramido demonstrates the Cold Boot attack at the BWG IT Cinema, showing how a disk encryption can be bypassed. (read more)

Bitlocker Cold Boot Data Theft Data Carrier Digital Forensics • IT Forensics FileVault Live Hacking LUKS Employee Awareness Pentester Event Encryption

Martin Nuß

Published on 28.10.2019 in the category aramido published.

November Events: aramido leads you safely through the digital wonderland

Get to know the dangerous sides of the digital wonderland with aramido on November 7 and 14, and get active yourself by building useful gadgets. (read more)

Data Theft E-Mail Ethical Hacker Live Hacking Employee Awareness Password Social Engineering Social Hacking Event

Andreas Sperber

Published on 09.10.2019 in the category Data Security published.

Cold Boot Attack: Farewell Disk Encryption

aramido demonstrates the current state of the Cold Boot attack and shows how disk encryption can be bypassed. (read more)

Advanced Persistent Threats (APT) Bitlocker Cold Boot Data Theft Data Carrier Digital Forensics • IT Forensics FileVault Hardening Cryptology • Cryptography LUKS Encryption

Regina Okun

Published on 03.04.2019 in the category aramido published.

aramido at KA-IT-Si: Hacking on Ice

„Cold-Boot“ live hacking with aramido and subsequent buffet networking on April 11, 2019, at 6 PM in Karlsruhe (read more)

Bitlocker Cold Boot Data Theft Data Carrier FileVault Linux Live Hacking LUKS Ubuntu Company Event Encryption

Elisabeth Apicella

Published on 20.12.2018 in the category Security Advisories published.

Security Advisory: Three Findings at prescreen.io and jobbase.io

As aramido discovered, the cloud-based applicant management software of the company Prescreen had several security deficiencies. (read more)

Authorization • Access Control Data Theft Security Concepts Web Application

Andreas Sperber

Published on 21.11.2018 in the category Web Application Security published.

What are the OWASP Top 10 - 2017?

The OWASP Top 10 - 2017 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Best Practice Guide Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening Secure Coding Session Management SQL Injections Web Application

Andreas Sperber

Published on 15.05.2018 in the category Software Security published.

Efail - Encryption is Still Alive

Efail announced an attack on encrypted emails, which allegedly could crack the encryption. Reason for concern? (read more)

Data Theft E-Mail Hardening Man-In-The-Middle (MIM) PGP • GPG Monitoring

Regina Okun

Published on 24.01.2018 in the category aramido published.

Live Hacking of a Company - In the Minefield of the Internet

Live hacking at Innotec Pforzheim on February 7, 2018, with Andreas Sperber from aramido (read more)

Data Theft Live Hacking Company Event

Andreas Sperber

Published on 01.01.2018 in the category Web Application Security published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits

Armin Harbrecht

Published on 14.02.2017 in the category aramido published.

Live Hacking for Hoteliers

IT security is playing an increasingly important role in the hospitality industry. In the DEHOGA seminar on data security, it will be shown how to secure your hotel. (read more)

Data Theft Live Hacking Training Workshop Event WLAN

Andreas Sperber

Published on 28.01.2017 in the category aramido published.

aramido at the 18th Industry Fair i+e 2017

aramido is an exhibitor at the Industry Fair i+e 2017 in Freiburg: visitors can receive information security consulting on February 1st and 2nd. (read more)

Advanced Persistent Threats (APT) Data Theft ISO 27001 IT Risk Management Security Audit Company Event Economic Espionage

Armin Harbrecht

Published on 18.01.2017 in the category aramido published.

Live Hacking at the "Produkte suchen Produzenten" Trade Fair

Experience IT security firsthand at the next Live Hacking event by aramido GmbH in Karlsruhe on January 27, 2017. (read more)

Data Theft Live Hacking Spear Phishing Company Event VPN WLAN

Armin Harbrecht

Published on 14.11.2016 in the category Penetration Testing published.

How Much Does a Penetration Test Cost?

As penetration testers, we are often asked about the cost of a penetration test. The answer depends on several factors. (read more)

Advanced Persistent Threats (APT) Data Theft IT Risk Management Security Audit Social Engineering Company Web Application

Andreas Sperber

Published on 23.10.2016 in the category Penetration Testing published.

What is the Purpose of a Penetration Test?

A penetration test checks the attack potential on IT systems. Vulnerabilities are remediated, thereby increasing IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) BSI-Grundschutz Data Theft DDoS Hardening ISO 27001 IT Risk Management Live Hacking Malware Man-In-The-Middle (MIM) Social Engineering Spear Phishing SQL Injections SSL-Stripping Economic Espionage xt:Commerce

Armin Harbrecht

Published on 30.09.2016 in the category aramido published.

Meet aramido at the Information Market "The New Suction Principle"

aramido will be present on October 11, 2016, at the Cyberforum Information Market in Karlsruhe. We look forward to meeting you there. (read more)

Data Theft Economic Espionage Company Event

Andreas Sperber

Published on 27.09.2016 in the category Data Security published.

Workshop: IT Security for SMEs at IHK Gießen-Friedberg

IT security expert Andreas Sperber speaks at IHK Gießen-Friedberg on October 6, 2016, on the topic of IT Security for SMEs and presents possible approaches. (read more)

Advanced Persistent Threats (APT) Data Theft Incident Response IT Risk Management Training Workshop Company Event Economic Espionage

Andreas Sperber

Published on 19.09.2016 in the category aramido published.

RoundTable: Give Me Your Data!

Long-term customer success for your SaaS solution through IT security and data protection - a presentation with live hacking by aramido and eknowvation (read more)

Advanced Persistent Threats (APT) Data Theft IT Risk Management Security Audit Training Workshop Company Event Economic Espionage

Andreas Sperber

Published on 18.08.2016 in the category Penetration Testing published.

Eight Reasons for a Penetration Test

A penetration test checks the vulnerability of systems. We provide eight reasons why penetration tests are important for companies. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) BSI-Grundschutz Data Theft DDoS ISO 27001 IT Risk Management PCI-DSS Social Engineering Spear Phishing SQL Injections SSL-Stripping Monitoring Company Economic Espionage Zero-Day-Exploits

Armin Harbrecht

Published on 03.08.2016 in the category Data Security published.

More IT Security Needed for Hotels

IT security is a critical issue for hotels. The IT Security for Hotels initiative helps protect credit card data and WLAN networks. (read more)

Data Theft Defacement Encryption Trojan • Cryptotrojan Incident Response IT Risk Management Security Audit Company

Andreas Sperber

Published on 01.08.2016 in the category Penetration Testing published.

What is a Penetration Test?

IT is an integral part of our lives. Hackers exploit vulnerabilities to profit. Penetration tests improve IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) Authentication BSI Cross Site Scripting (XSS) Data Theft DDoS Hardening IT Risk Management PHP Social Engineering Spear Phishing SQL Injections Web Application Economic Espionage Zero-Day-Exploits

Armin Harbrecht

Published on 01.07.2016 in the category Data Security published.

What Hotels Need to Consider When Handling Credit Card Data

As a collection point for vast amounts of personal data, hotels are in the crosshairs of criminals. We explain what hoteliers must do to protect their guests' data. (read more)

Best Practice Guide Data Theft E-Mail PCI-DSS Security Audit Company WLAN