Regardless of the business sector, customers value flexibility when it comes to processing payments for services and products. A leading German...
News
BoostAeroSpace and usd AG: A Partnership for More Security in the Aerospace Industry
In today’s business environment, companies rely on a broad network of partners and service providers to deliver their services efficiently. Digital...
Security Advisory on Element X Android
Our analysts at the usd HeroLab discovered during their pentests that a locally installed malicious app can cause the Android application Element X...
usd AG globally Re-Accredited as an Approved Scanning Vendor (ASV)
On April 30, 2025, usd AG received global accreditation as an Approved Scanning Vendor (ASV) from the Payment Card Industry Security Standards...
SWIFT CSCFv2025: Current Version of the Framework Brings Changes for Architecture Type B
Since its introduction in 2017, the Customer Security Controls Framework (CSCF) has aimed to strengthen the security of the SWIFT network. The aim...
7 Questions about the Cyber Resilience Act (CRA)
1. What is the Cyber Resilience Act? With the Cyber Resilience Act (CRA for short), the EU is introducing a regulation for the first...
New Requirements of ISO/IEC 27006-1:2024: What Changes Do They Bring for Your Audit?
ISO/IEC 27006-1:2024 contains the formal requirements for certification bodies that must be implemented when auditing an information security...
Security Advisory on Element Android
The pentest professionals at usd HeroLab examined the Element application for Android during their pentests. They identified a vulnerability in the...
Understanding Security Code Reviews, Greybox and Whitebox Pentests: Which Method Is Right for You?
As the number of cyber attacks continues to rise, effective security analysis is more crucial than ever in protecting software and data. In...
Our 3 Key Takeaways from the BaFin Workshop on the DORA Register of Information
Original publication date: March 10, 2025. Since the publication of this blog post, BaFin has postponed the deadline for submission from April...
DORA News: Deadline for Information Registers, Lift of German Supervisory Requirements for IT in Financial Institutions
Original publication date: January 14, 2025. Since the publication of this blog post, BaFin has postponed the deadline for submission from April 11...
From the Beverage Store to the Corporate Network – When the Deposit Machine Becomes a Gateway for Hackers
Deposit container full – container not recognized – brand not accepted by the market: If you are a frequent consumer of bottled drinks in Germany,...










