Cybersecurity Blog

Kerberoasting Made Easy – Efficient Methods for Hash Cracking

11/12/2025

It has now been over ten years since Tim Medin introduced the so-called Kerberoasting attacks. And even today, Kerberoasting remains a reliable attack technique against Microsoft Active Directory, which is often exploited by penetration testers and red teamers. With a valid domain account, the attack can be carried out in an Active Directory environment without extended privileges. Afterwards, an attempt can calmly be made to crack the passwords of service accounts offline.

New Critical IBM AIX NIM Fixes Released: CVE-2025-36251, CVE-2025-36250, CVE-2025-36096, and CVE-2025-36236

18/11/2025

IBM has addressed newly discovered critical vulnerabilities in AIX Network Installation Manager (NIM) with the release of security patches, following responsible disclosure by Oneconsult’s security research team.

What’s the Buzz With Post-Quantum Cryptography and Should You Care?

17/11/2025

Over the course of 2025, virtually everyone (in IT) started talking about Post-Quantum Cryptography (PQC) and the Q-Day. In this article, we will cut through the headlines, explain to you what all this is about, and provide recommendations on how to deal with it.

Windows 11 Hardening With Intune: Methods and Recommendations for a Secure Environment

28/10/2025

The end of support for Windows 10 on 14 October 2025 has (hopefully) prompted many companies to migrate to Windows 11. In this context, it would also make sense to switch the device management to Microsoft Intune and manage the Windows 11 hardening policies there as well. With a properly configured hardening baseline, the attack surface of Windows systems can be significantly reduced.

Password Spraying: Procedure, Risks, and Protective Measures

09/09/2025

Password spraying and credential stuffing are among the most common methods used by attackers to gain unauthorized access to company systems. Compared to classical brute-force attacks, password spraying attacks are more difficult to detect. They deliberately exploit the human weakness for easy-to-remember passwords. In this article, we explain how these attacks work, what risks they pose, and what measures companies can take to protect themselves effectively.

Erhöhen Sie Ihre Cyber-Resilienz durch Purple Teaming

Purple Teaming: How to Strengthen Your Organization’s Cyber Resilience With Attack Simulations

11/08/2025

Purple teaming refers to the close cooperation between attacking (red team) and defending (blue team) security forces. Instead of acting independently, they jointly develop targeted attack scenarios, carry them out together, and analyze the results in direct exchange. This collaborative approach not only allows for vulnerabilities to be uncovered more efficiently but also addresses them directly with appropriate defensive measures.

Analyzing Bitcoin Addresses: How to Detect Cyber Fraud Early On

01/07/2025

Whether it’s threatened DDoS attacks, data leaks, or sextortion scams – cybercriminals often demand payment via Bitcoin wallet addresses. It’s the (supposed) anonymity of cryptocurrency that makes it particularly attractive for extortion attempts.

PDF Phishing: How To Protect Yourself Effectively

12/06/2025

Did you know that PDF files often serve as a gateway for cyberattacks? These seemingly harmless documents can be infected with dangerous viruses that damage to your computer without you realizing it. Viruses often hide in PDF files to exploit security vulnerabilities and steal your sensitive data.

Perfect 10: Discovery of Critical IBM AIX NIM Vulnerabilities (CVE-2024-56346 & CVE-2024-56347)

05/05/2025

During a recent penetration test of an IBM AIX environment, I uncovered two critical vulnerabilities, including one that had gone unnoticed for almost 30 years. The identified flaws in the AIX Network Installation Manager (NIM) allow for remote command execution with root privileges — potentially compromising entire AIX infrastructures. In this blog post, I will walk you through the discovery of CVE-2024-56346 and CVE-2024-56347, the impact of these vulnerabilities, and the steps you should take to secure your systems.

cybersecurity-awareness-als-wichtiger-teil-des-isms-oneconsult

Cybersecurity Awareness as an Essential Part of Information Security

14/04/2025

In today’s cybersecurity threat landscape, it is no longer sufficient to rely on technical measures alone to ensure a company’s information security. From an organizational point of view, clear responsibilities and processes, as well as continuous testing of all these activities, are also required. Yet for cybersecurity, people are often the most vulnerable to attacks and this is precisely where cybersecurity awareness comes in: to train employees to recognize cyberattacks at an early stage and therefore to minimize the risks they pose to the company. This article explains why cybersecurity awareness is a central component of any Information Security Management System (ISMS), how organizations can benefit from appropriate awareness measures, and how important the engagement of top management is in this regard.

passkeys-warum passwoerter ausgedient haben

Passkeys: Why Passwords Have Probably Become Outdated

12/03/2025

An analysis of the most frequently lists of the most frequently used passwords shows that even today, passwords tend not to be very complex. This suggests that password managers, which would make it easier to create secure passwords, are rarely being used. As a consequence, many service providers rely on the addition of a second factor during the login process in order to reduce the dependency on the password. However, this solution is not an optimal measure as it does not fully address the problem of password security. A promising approach that could offer an alternative to passwords is the use of passkeys.

vulnerability management effizientes schwachstellenmanagement

Vulnerability Management: Efficient Management for Maximum Security

12/02/2025

Vulnerability Management is making waves again. Successful attacks requiring no user interaction are becoming more frequent once again. At the same time, the number of publicly known vulnerabilities is increasing from year to year. This raises the question of how these vulnerabilities can be detected and remedied as early as possible.

Network Penetration Test

15/01/2025

In an increasingly digitalized world, companies of all sizes and in all industries are at risk of cyberattacks. It is therefore crucial for businesses to prioritize network security in order to protect sensitive information and business processes. Every year, thousands of attacks on corporate networks are recorded, whether by hackers, insiders, or automated malware. The consequences of such attacks can be severe, including data loss, business interruptions, significant financial losses, and a loss of customer trust.

header-das-informationssicherheitsgesetz-isg-des-bundes-schweiz

Overview of the Federal Information Security Act

11/12/2024

With the Information Security Act* (Informationssicherheitsgesetz, ISG) coming into force on January 1, 2024, new standards for securing information and infrastructure were set in Switzerland. The law brings comprehensive innovation in the field of cybersecurity and strengthens the security of information and infrastructure at various levels, as well as cyber resilience in general. The ISG applies to both government authorities and private companies that are significant for the security of the federation. A particular focus is on operators of critical infrastructure. This article provides an overview of the main changes and requirements that the ISG brings.

tabletop üebungen-so schuetzen sie ihre firma

Tabletop Exercises: Ransomware Attack Simulation

30/10/2024

Tabletop exercises allow organizations to test and improve their crisis management capabilities in a safe environment. Realistic scenarios are played out, allowing participants to refine their response strategies to potential security incidents and identify weaknesses in their existing processes.

cyberattacken-so-schuetzen-sie-ihre-firma-vor-hackern

Cyberattacks: How to Protect Your Company From Hackers

15/10/2024

There has been a dramatic increase in the number of cyberattacks in recent years, affecting both companies and private individuals alike. Phishing emails and other attacks have become more or less an everyday reality at work. Ransomware attacks have a particularly high potential to cause severe damage – which is why they receive a lot of media attention.

How To Protect Against Ransomware: Effective Tips for Companies

07/10/2024

Over the past few years, ransomware has become a serious threat to businesses that can cause significant damage. The financial impact of ransomware attacks is enormous – in addition to the cost of business interruption, organizations that fall victim to such an attack must also pay for the analysis and recovery of affected systems and data, as well as, in some cases, ransom demands.

Ransomware: Detection and Prevention

19/09/2024

Ransomware represents one of the most significant and pervasive cyberthreats today. What originated as a relatively rudimentary blackmail tool has evolved into a highly sophisticated and organized criminal industry. Businesses and private individuals worldwide are confronted with this growing threat due to its relentless and indiscriminate nature.