🔐 aramido makes IT secure.

Further information

All blog articles on the subject of Man-In-The-Middle (MIM)

Fabienne Hofsäß

Published on 09.09.2024 in the category Communication Security published.

Who's Afraid of the Big Bad Wolf? Voice Cloning and Modern Deception

Many of us know the fairy tale of the Big Bad Wolf, who uses clever tricks to deceive his victims. Today, artificial intelligence (AI) can deceive us in a similar way. (read more)

Checklist • Cheat Sheet Data Theft E-Mail Ethical Hacker Live Hacking Man-In-The-Middle (MIM) Employee Awareness Password Phishing Social Engineering Spear Phishing Training Workshop Event

Patrick Stracke

Published on 14.05.2024 in the category aramido published.

Artificial Intelligence and Social Engineering: The Ingredients for a Hackathon

In today's world, Artificial Intelligence (AI) and Social Engineering are two powerful forces that affect us humans in different ways. (read more)

Artificial Intelligence (AI) Ethical Hacker Live Hacking Man-In-The-Middle (MIM) Phishing Social Engineering Social Hacking Event

Fabienne Hofsäß

Published on 04.03.2024 in the category Penetration Testing published.

Active Directory Hacked – How Does It Work?

An attack on the "central nervous system" of corporate networks. This is how quickly an attacker can gain full control. (read more)

Active Directory (AD) Ethical Hacker Live Hacking Man-In-The-Middle (MIM) Password Phishing Red Team Social Engineering Windows Two-Factor Authentication (2FA)

Leonard Otto

Published on 27.04.2023 in the category aramido published.

Become a Domain Admin in 30 Minutes

On May 4, 2023, we will demonstrate at a live hacking event how attackers can take over an entire network within 30 minutes. (read more)

Active Directory (AD) Ethical Hacker Live Hacking Man-In-The-Middle (MIM) Password Phishing Social Engineering Event Windows Two-Factor Authentication (2FA)

Andreas Sperber

Published on 09.07.2019 in the category Communication Security published.

HTTP Security Headers Protect Your Visitors

Security headers protect website users and expand the defense-in-depth strategy. We demonstrate how they are implemented and their specific impact. (read more)

Click-Jacking Cross Site Scripting (XSS) HTTP Strict Transport Security (HSTS) JavaScript Man-In-The-Middle (MIM) Secure Coding Social Engineering SSL-Stripping Encryption

Andreas Sperber

Published on 15.05.2018 in the category Software Security published.

Efail - Encryption is Still Alive

Efail announced an attack on encrypted emails, which allegedly could crack the encryption. Reason for concern? (read more)

Data Theft E-Mail Hardening Man-In-The-Middle (MIM) PGP • GPG Monitoring

Andreas Sperber

Published on 01.01.2018 in the category Web Application Security published.

Five good resolutions for secure IT systems in 2018

At the latest after a serious hacking incident, everyone becomes active. To prevent this from happening, aramido presents five security measures for web applications. (read more)

Apache Backup • Data Security Click-Jacking Cross Site Request Forgery (CSRF) Cross Site Scripting (XSS) Data Theft DDoS Defacement Hardening HTTP Strict Transport Security (HSTS) Incident Response Joomla Man-In-The-Middle (MIM) Secure Coding SQL Injections SSL-Stripping Web Application Zero-Day-Exploits

Andreas Sperber

Published on 21.07.2017 in the category Communication Security published.

Using HTTP Public Key Pinning Securely

Public Key Pinning restores trust in the PKI. However, this powerful method must be used correctly, otherwise serious dangers may arise. (read more)

Authentication HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Monitoring Encryption

Andreas Sperber

Published on 21.03.2017 in the category Communication Security published.

Why Do We Trust Certificate Authorities?

Certificate authorities are an essential component of today's World Wide Web. We place great trust in them despite worrying incidents. (read more)

Authentication Blockchain Certificate Transparency (CT) DANE DNS-based Authentication of Named Entities HTTP Strict Transport Security (HSTS) Man-In-The-Middle (MIM) Public Key Infrastructure (PKI) Encryption X.509

Andreas Sperber

Published on 23.10.2016 in the category Penetration Testing published.

What is the Purpose of a Penetration Test?

A penetration test checks the attack potential on IT systems. Vulnerabilities are remediated, thereby increasing IT security. (read more)

Active Directory (AD) Advanced Persistent Threats (APT) BSI-Grundschutz Data Theft DDoS Hardening ISO 27001 IT Risk Management Live Hacking Malware Man-In-The-Middle (MIM) Social Engineering Spear Phishing SQL Injections SSL-Stripping Economic Espionage xt:Commerce

Armin Harbrecht

Published on 19.10.2016 in the category Web Application Security published.

HTTPS on the Rise - Why everyone must switch their site to HTTPS in 2017

Encrypted communication via HTTPS was long only for highly secure web applications. Soon, however, Google will penalize unencrypted websites. (read more)

Apache Man-In-The-Middle (MIM) nginx Public Key Infrastructure (PKI) SSL-Stripping Encryption Webserver X.509