Security insights

An XML file upload feature returned the same generic error message for every attempt, yet the server’s files could still be read: their contents appeared in one of the audit log’s error messages. This is how the XXE …

A real-world case in which the layers of defence did not cover for each other’s gaps: the lowest-privileged user became an admin in four steps – without a password, phishing or brute force.

Directory listing as a security risk Most attacks do not begin with the discovery of a critical vulnerability. They begin with reconnaissance. In many cases, attackers do not even need specialised tools to gather …

Principle of Least Privilege: The most dangerous access is the one everyone forgot about Cyberattacks begin when vulnerabilities or forgotten, unnecessary privileges remain unaddressed. Domain Admin accounts, Local …

Dangling CNAME records: Hidden DNS security risks for businesses One of the lesser-known yet increasingly relevant security risks in modern web infrastructure is dangling CNAME records. At first glance, these abandoned …

Phishing: The attacker is not hacking your systems – they are hacking your employees Fact: even the most expensive security stack can be bypassed with a well-written email. We wish we could say that it is a poetic …

When should you conduct a penetration test? Many organisations still view penetration testing as a mandatory administrative requirement , something needed for ISO certification, an audit, or a procurement process. In …

Host header injection from a pentester’s perspective: risks, attack paths and mitigation Host header injection is not a new vulnerability. It is a recurring issue that often leads to a critical impact. A single …

Choosing a pentest provider: How to select the right ethical hacking firm? Pentesting is often a formal requirement in organisations. The report is delivered, the project is closed, and the company feels reassured, yet …

Data Protection Guide for Employees from a Senior Pentester’s Perspective There is an uncomfortable truth most organisations prefer not to emphasise: the majority of successful attacks are not caused by technological …

HTTP headers and web application security: an underrated layer of defence Discussions around web application security typically focus on backend logic, authentication, WAFs or vulnerability assessments. However, there is …

Session fixation: An underestimated threat Session fixation rarely receives the same level of attention as vulnerabilities such as XSS or SQL injection. The reason is simple: it’s less visible, harder to understand, and …

What does an ethical hacker do? – And why it is a business question Spoiler: an ethical hacker – aka pentester – is not sitting in a dark basement wearing a black hoodie. Even if Hollywood has done a remarkably good job …

Clickjacking: When a click doesn’t mean what you think In the world of web security, many attacks rely on complex exploits, vulnerable code or poorly configured systems, but clickjacking belongs to a very different …

Password policy explained: What makes a good password? Passwords remain the most widely used authentication mechanism in the digital world. That’s why the “good password” is kinda treated as the Holy Grail. Banking …

A 20-year-old hacker identified a security flaw in the online booking systems of Spanish luxury hotels and managed to reserve rooms and premium apartments for just 1 cent each. The largest single loss exceeded €4,000, …

A poorly configured cookie is often the quiet enabler behind session hijacking, account takeover and cross-site attacks. Not because cookies are inherently insecure, but because their security controls are left at …

Port scanning: Why should you knock on every door? You may think port scanning requires no more expertise than reading a water meter. Port scanning is regularly the foundation of internet hygiene, so it definitely does. …

The Silence Before the Attack: The role of passive OSINT reconnaissance in pentesting A single domain, a few skilled analysts and passive OSINT reconnaissance can already be enough to outline an organisation’s digital …

Data Protection Day is observed every year on 28 January, marking the date on which the Council of Europe adopted Convention 108, the first international treaty on data protection. The purpose of the day is not to …

The admin site is an administration interface for your own employees, where they manage customer orders, documents and data. Does it need testing?…

OWASP’s flagship is the OWASP Top Ten project, which points to the top 10 critical issues affecting web applications…

Web application testing provides an opportunity for the site owner to get an idea of the magnitude of threats to the application. Do I need this?…

The purpose of a grey box test is to obtain a comprehensive picture of the security risks to each element based on partial knowledge of the system…

Red team, blue team, purple team… what do these terms refer to in a vulnerability assessment? What does the red team do? When should it be deployed?…

Source code review is a software quality assurance activity in which experts verify a program primarily by analysing its source code…

An intrusion into a company network can lead to a data breach. All the data is still in place, yet the loss is huge. What can we do to prevent this?…

An external vulnerability assessment with a black-box approach identifies the weak points through which your network can be compromised. Regular testing is essential…

A ransomware attack can have a catastrophic impact on your business and usually results in serious financial loss. You can protect your business!…

Working from home may reveal the flaws of applications and processes in use, so double-checking access controls and privilege escalation possibilities is highly recommended…

When employees demand wireless coverage in the office, they mean it. A lack of Wi-Fi coverage monitoring within the business quarters could lead to a tangle of rogue access points installed by employees throughout the …

What would happen if, with the deadline approaching, it suddenly turned out that key security requirements had not been met and the hardware components had well-documented, easily exploitable vulnerabilities? Most likely …

The truth is that a skilled hacker leaves hardly any noticeable trace. Malicious attackers can come and go across the corporate network perimeter at will, reconfigure services and open backdoors for easy return, and may …