🔐 aramido makes IT secure.

All blog articles on the subject of Security Concepts

Matthias Schmidt

Published on 22.06.2026 in the category Web Application Security published.

security.txt - How security researchers report vulnerabilities securely

Without clear reporting paths, vulnerabilities remain risky. A standardized security.txt provides security researchers with crucial information for contacting the affected parties. (read more)

Authentication Authorization • Access Control Cross Site Request Forgery (CSRF) Ethical Hacker Information Security Ransomware Responsible Disclosure Vulnerability Management Vulnerability Disclosures Vulnerability Scan Secure Coding Security Concepts Threat Modeling Company Web Application Zero-Day-Exploits

Niklas Fuhrberg

Published on 25.08.2024 in the category Communication Security published.

What is the NIS 2 Directive? (Part 1)

In response to the increasing number of cyberattacks, the EU is introducing new measures. Among these is NIS 2, which sets new requirements for companies. (read more)

BSI Business Continuity Management (BCM) Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Secure Coding Security Audit Security Concepts Threat Modeling Company

Niklas Fuhrberg

Published on 20.08.2024 in the category Communication Security published.

Who is affected by NIS 2? (Part 2)

Approximately 30,000 companies in Germany are affected by NIS 2. Find out when a company must comply with NIS 2 requirements. (read more)

BSI Hardening Incident Response Information Security ISMS IT Risk Management Employee Awareness NIS-2 Emergency Management Risk Analysis Security Concepts Company

Niklas Fuhrberg

Published on 19.08.2024 in the category Communication Security published.

NIS 2: What do companies need to do? (Part 3)

As a first step, responsibilities within the company should be established. In addition to a coordinating body, such as an Information Security Officer, the executive management must also fulfill specific obligations. (read more)

Fabienne Hofsäß

Published on 05.06.2024 in the category Communication Security published.

Steganography: The Art of Hidden Communication

Encrypted communication dates back to antiquity. Much has changed since then, and the way we communicate has become significantly more secure. (read more)

Information Security Cryptology • Cryptography Employee Awareness Security Concepts Encryption

Christian Birker

Published on 27.01.2023 in the category Software Security published.

What Could (Possibly) Go Wrong? - Designing Threat Modeling with a Card Game

To make the threat modeling process more playful, aramido developed a card game. This helps development teams with Security by Design. (read more)

Secure Coding Security Concepts Threat Modeling Web Application Webshop

Oliver Werner

Published on 04.03.2022 in the category Communication Security published.

Phishing, SMiShing, Vishing, ... Tishing!

In addition to email and SMS, Microsoft Teams represents a new channel for phishing attacks. How do they work and how can you protect yourself? (read more)

Employee Awareness Phishing Security Concepts Social Engineering Social Hacking Spear Phishing

Hannah Schneider

Published on 10.06.2021 in the category aramido published.

Secure by System: Cybinar on Information Security Management Systems

Do I need an Information Security Management System (ISMS)? aramido consultants provide practical tips based on a case study on July 14 (read more)

BSI-Grundschutz Information Security Officer ISMS ISO 27001 PCI-DSS Security Concepts TISAX Company VdS 10000 Event

Benjamin Pokrant

Published on 06.05.2020 in the category Security Advisories published.

HTML Injection Vulnerability in WordPress Plugin WPForms

A security vulnerability in the WordPress plugin WPForms allowed attacks via HTML injection. How does this vulnerability affect systems and how can it be closed? (read more)

Cross Site Scripting (XSS) Secure Coding Security Concepts Spear Phishing Web Application WordPress Zero-Day-Exploits

Elisabeth Apicella

Published on 20.12.2018 in the category Security Advisories published.

Security Advisory: Three Findings at prescreen.io and jobbase.io

As aramido discovered, the cloud-based applicant management software of the company Prescreen had several security deficiencies. (read more)

Authorization • Access Control Data Theft Security Concepts Web Application

Elisabeth Apicella

Published on 07.11.2018 in the category Security Advisories published.

Reflected HTML Injection in CRM Software

A security vulnerability in the web software CRM+ by Brainformatik allowed attacks via HTML injection. Who is affected and what should you do now? (read more)

CRM+ Cross Site Scripting (XSS) Defacement Secure Coding Security Concepts