🔐 aramido makes IT secure.

Further information

All blog articles on the subject of Hardening

Niklas Fuhrberg

Published on 25.08.2024 in the category Communication Security published.

What is the NIS 2 Directive? (Part 1)

In response to the increasing number of cyberattacks, the EU is introducing new measures. Among these is NIS 2, which sets new requirements for companies. (read more)

BSI Business Continuity Management (BCM) Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Secure Coding Security Audit Security Concepts Threat Modeling Company

Niklas Fuhrberg

Published on 20.08.2024 in the category Communication Security published.

Who is affected by NIS 2? (Part 2)

Approximately 30,000 companies in Germany are affected by NIS 2. Find out when a company must comply with NIS 2 requirements. (read more)

BSI Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Security Concepts Company

Niklas Fuhrberg

Published on 19.08.2024 in the category Communication Security published.

NIS 2: What do companies need to do? (Part 3)

As a first step, responsibilities within the company should be established. In addition to a coordinating body, such as an Information Security Officer, the executive management must also fulfill specific obligations. (read more)

Andreas Sperber

Published on 09.10.2019 in the category Data Security published.

Cold Boot Attack: Farewell Disk Encryption

aramido demonstrates the current state of the Cold Boot attack and shows how disk encryption can be bypassed. (read more)

Advanced Persistent Threats (APT) Bitlocker Cold Boot Data Theft Data Carrier Digital Forensics • IT Forensics FileVault Hardening Cryptology • Cryptography LUKS Encryption

Andreas Sperber

Published on 21.11.2018 in the category Web Application Security published.

What are the OWASP Top 10 - 2017?

The OWASP Top 10 - 2017 describes the ten most common security risks for web applications. They help developers implement applications securely. (read more)

Authentication Authorization • Access Control Best Practice Guide Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening Secure Coding Session Management SQL Injections Web Application

Regina Okun

Published on 18.09.2018 in the category Web Application Security published.

PHP Security Podcasts on phpdevradio.de

In PHPDevRadio "The Podcast for PHP", Michael Döhler (PHPDevRadio Crew) and Andreas Sperber (aramido) talk about current PHP security topics (read more)

Regina Okun

Published on 19.06.2018 in the category aramido published.

PHP Secure Coding Training: aramido launches external seminar offerings

Following the great success of the PHP Secure Coding training as an in-house seminar, the training can now also be booked as an external seminar. (read more)

Authentication Authorization • Access Control Brute Force Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Hardening Cryptology • Cryptography Live Hacking Secure Coding Session Hijacking Session Management Training Workshop Event

Andreas Sperber

Published on 15.05.2018 in the category Software Security published.

Efail - Encryption is Still Alive

Efail announced an attack on encrypted emails, which allegedly could crack the encryption. Reason for concern? (read more)

Data Theft E-Mail Hardening Man-In-The-Middle (MIM) PGP • GPG Monitoring

Regina Okun

Published on 15.02.2018 in the category Communication Security published.

What is Payment Diversion?

Two internet giants fell for the Payment Diversion scam – could the same thing happen to your company? (read more)

Authentication Best Practice Guide E-Mail Hardening Social Engineering Company

Andreas Sperber

Published on 01.01.2018 in the category Web Application Security published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits

Regina Okun

Published on 09.11.2017 in the category aramido published.

Keynote: IT Symposium at Haigerloch Castle

aramido delivered the keynote at the 15th IT Symposium at Haigerloch Castle: four paradigms for tomorrow's information security. (read more)

BSI-Grundschutz Business Continuity Management (BCM) Digital Forensics • IT Forensics DSGVO Hardening Incident Response ISO 27001 IT Risk Management Live Hacking Social Engineering Company Event Economic Espionage

Andreas Sperber

Published on 23.10.2016 in the category Penetration Testing published.

What is the Purpose of a Penetration Test?

A penetration test checks the attack potential on IT systems. Vulnerabilities are remediated, thereby increasing IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) BSI-Grundschutz Data Theft DDoS Hardening ISO 27001 IT Risk Management Live Hacking Malware Man-In-The-Middle (MIM) Social Engineering Spear Phishing SQL Injections SSL-Stripping Economic Espionage xt:Commerce

Andreas Sperber

Published on 01.08.2016 in the category Penetration Testing published.

What is a Penetration Test?

IT is an integral part of our lives. Hackers exploit vulnerabilities to profit. Penetration tests improve IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) Authentication BSI Cross Site Scripting (XSS) Data Theft DDoS Hardening IT Risk Management PHP Social Engineering Spear Phishing SQL Injections Web Application Economic Espionage Zero-Day-Exploits

Andreas Sperber

Published on 20.04.2016 in the category Network Security published.

Five Myths About Secure WLAN Networks

There are many recommendations for secure WLAN networks. Some should be followed, while others are considered myths. We show what is true and what is not. (read more)

DHCP Evil Twin Hardening KARMA KeePass MAC Address Password Probe Request Radio Relay SSID Encryption WLAN WPA2 WPS

Armin Harbrecht

Published on 15.04.2016 in the category Web Application Security published.

Piwik Security – Securely Analyzing Web Applications

The aramido best practice for Piwik shows what to look out for when using the web analytics tool. The Piwik security checklist helps you secure your Piwik installation. (read more)

Apache Best Practice Guide Checklist • Cheat Sheet Hardening Piwik Web Analytics