IT security is no longer just a concern for a company's IT department - it is an integral part of the entire company. However, many security...
Red Teaming: Challenge Your Security Architecture With the Final Boss
read more
usd HeroLab
POS System Pentesting: Can a Checkout Become an Entry Point into the Corporate Network?
Today, POS systems are directly connected to business processes, payment services, and corporate networks. If a POS system is compromised, the...
Cyber Resilience Act: What Manufacturers of IoT and OT Products Need to Know Now
The Cyber Resilience Act (CRA) makes cybersecurity a mandatory requirement for many products with digital components for the first time. In the...
Mobile App Pentest Insights: What Developers Should Know to Build Secure Applications
Mobile frameworks such as Flutter, React Native, Cordova, and .NET MAUI promise efficient cross-platform development. A shared code base enables...
Security Advisories on Teamcenter and EcoStruxure Building Operation
The pentest professionals at usd HeroLab identified several vulnerabilities during a web application and fat-client penetration test. These include...
AI Vulnerability Storm: When a Lack of Speed Becomes a Risk
Current developments in AI systems show that vulnerabilities are found more quickly, suitable exploits are developed more quickly, and attacks are...
Automated Pentests, More Vulnerabilities, New Requirements: How AI Is Redefining the Security Analyses Market
Nowadays, AI can write code, operate tools, and identify complex vulnerabilities. This is noticeably changing the dynamics of cyber security. Speed...
Pentest of AI/LLM Systems: How to Secure Enterprise AI Systems
Artificial intelligence is already widely used across many organizations. Chatbots access internal knowledge, AI supports decision‑making or...
Security Advisories on Entra ID and Tenable Nessus Manager
The pentest professionals at usd HeroLab identified a vulnerability during a cloud pentest that allows the circumvention of conditional access...
Deep Dive Into Red Teaming: Physical Pentesting. How Resilient Is Your Organization?
As a security manager, you protect your systems and processes every day and invest in awareness training. However, experience shows that physical...
Security Advisories on Kofax Communication Server and ArcGIS Arcade
The pentest professionals at usd HeroLab examined Kofax Communication Server (KCS) and ArcGIS scripting language Arcade as part...
OWASP “Vendor Evaluation Criteria for AI Red Teaming Providers & Tooling v1.0”: How to Choose the Right Partner
A few days ago, OWASP published the first version of the Vendor Evaluation Criteria for AI Red Teaming Providers & Tooling v1.0. The new guide...