Oneconsult Cyber Security & Cyber Defence Blog

Security in CI and CD: How to Master the OWASP Top 10 Risks

28.06.2023

Continous Integration (CI) and Continous Deployment (CD) have become important components of software engineering in recent years. Automation enables development teams to deploy new features and updates quickly and efficiently. However, the use of CI/CD also poses some security risks that must be considered. The OWASP Top 10 CI/CD Security Risks provide an overview of the most common risks and suggests ways to overcome them.

Fake Profiles on LinkedIn

07.06.2023

It’s hard to imagine today’s business world without LinkedIn as a social platform. Whether it’s sharing posts, networking with business partners, or acquiring new talent, LinkedIn is often the tool of choice. True to the idea of see and be seen. Anyone who wants to be successful strives for attention, recognition, and reach. This phenomenon also attracts scammers who take advantage of members’ open disclosure. Such fake profiles can have unpleasant consequences for companies. Find out what these consequences are and how you can protect yourself from them in this article.

Batch File Obfuscation Incident

24.05.2023

Attackers use batch files to automate and speed up their work because they allow the execution of multiple commands. This way, the attacker does not need to provide any manual input but just needs to execute the malicious script on the victim’s system.

An Introduction to Batch File Obfuscation

12.05.2023

Batch files are an essential tool many users and administrators use to perform automated tasks. However, attackers also use these batch files to execute malicious commands on a system. To avoid detection by antivirus software, batch files are obfuscated.

Passwords: Common Mistakes, Best Practices & Tips

04.05.2023

May 4, 2023 is World Password Day. This day takes place every year on the first Thursday in May and aims to raise awareness about the importance of secure passwords. The aim is to educate about best practices in password management and encourage people to take steps to improve the security of their online accounts.

“Your Site Has Been Hacked” – Fraud Attempt or Reality?

26.04.2023

Ransomware is currently what everybody is talking about. Everyone fears becoming a victim and bearing the consequences for their reputation as well as the financial impact of it.

Threat Hunting in Azure Active Directory and Microsoft 365

19.04.2023

As Microsoft services move to the cloud, Azure Active Directory (Azure AD) and Microsoft 365 (M365) are becoming popular targets for attackers. Threat hunting can help uncover signs of compromise early on.

Vulnerability Scanners and How to Protect Your Company From and With Them

16.03.2023

Vulnerability scanners are often used during security audits. The goal: to be one step ahead of the cybercriminals!

ISO/IEC 27001: What Has Changed and What Does It Mean for Your Company?

28.02.2023

The international standard ISO/IEC 27001 is a fundamental standard for information security. It defines requirements for establishing, implementing, and maintaining an information security management system (ISMS) and serves as the basis for certification.

Blog

Cybersecurity Blog