
Our Team in Vietnam
In January 2018 we started to build up a security team in Da Nang, Vietnam. Since the beginning of this year, the colleagues have been fully operational and not only support our German team, but also serve customers worldwide.

Sustainable security from software development to corporate culture (JavaSPEKTRUM 03/2019)
In the current edition of the “JavaSPEKTRUM” magazine, our colleague Dr. Bastian Braun writes about holistic handling of security to minimize origins, identify errors that have occurred and react to exploitation attempts, from the everyday life of a security consultant.

Google I/O Extended MienTrung 2019
Our colleague Khanh Pham Hong was a speaker at the Google I/O Extended MienTrung 2019 in Da Nang.

Preventing the Usage of Vulnerable JavaScript Libraries
In this short informational blog post we would like to point out the dangers of deploying vulnerable third-party JavaScript libraries in web projects and reference 2 tools that check for outdated libraries.

Exploiting Shellshock
Shellshock, a family of security bugs in the Unix Bash shell, was publicly disclosed in 2014. This Post shows how to easily write a remote exploit for the first of these Bugs (CVE-2014-6271).

Tools for Testing of Silverlight Applications
This post shows you some basic tests that can be executed and some tools you can use during a security assessment of a Silverlight application.

Automated scanning with Burp despite Anti-CSRF token
Automated scanning tools like Burp active scanner may fail to work on web services making use of anti-CSRF tokens. In this blog post, we share the technique that can be used to circumvent this issue.