Latest Articles

From a Phishing Email to Domain Admin: The Complete Attack Path

A single careless click is all it takes for an attacker to compromise a system. But phishing is merely the start of a silent chain reaction throughout your entire network. Through privilege escalation and subsequent lateral movement, the path leads directly to a complete takeover of the domain controllers. A look at the anatomy of the attack—and the key levers for breaking the chain before control is completely lost.

Their ISO 27001 certificate hangs proudly on your wall. The employees are celebrating because they managed to quickly finish everything that was left undone just in time for the audit. But while the champagne corks are popping, they fall back into their old habits and prop open the server room door with a wedge because of the heat. An unknown person disguised in a yellow safety vest walks right past, unhindered — he has free access! The ISO certificate only proves that you can write policies — n

So Real It's Deceptive: Deepfakes! A Technical Look Behind the Scenes

No Hollywood magic required, just a few seconds of audio: that's all it takes to clone a voice perfectly today. We wanted to know just how easy it really is – so we created our own deepfake, from the very first voice recording to the finished video. Here's your look behind the scenes.

Deepfake Vishing – How AI Voice Clones Are Taking Vishing Attacks to a Whole New Level

No exploit, no system vulnerability, no malware: When voices can be cloned with terrifying precision, traditional security mechanisms collapse. Attackers need just seconds of audio to hijack an identity. Paired with psychological manipulation, they craft flawless deceptions that bypass authorization processes and drain millions. The anatomy of an underestimated threat—and how organizations can effectively fight back.

Hacking Biometrics: Bypassing Fingerprint, Face, Voice, and Vein Recognition – How secure are Access Control Systems really?

A quick glance, a single touch – biometric systems promise ultimate security. But silicone molds, AI deepfakes, and hidden infrared cameras reveal a different truth: fingerprints, faces, voices, and vein patterns can all be faked. We explain how attackers pull it off and how to truly protect yourself.

Red Team, Pentest, Purple Team: What the Difference Is — and When You Need Which

"We need a red team." — "Have you done a pentest yet?" This confusion happens every day — and costs budget. Red, Blue, Purple, Yellow, Black, White, Orange: each colour has a function. And only one of them answers your current question.

The Legend: How Attackers Build Identities — and Why Your Team Won't Spot Them

No malware. No exploit. Just a high-vis vest, a printed work order, and three days of OSINT — and our pentester spent 23 minutes unescorted on the premises. Pretexting is the methodology behind most social engineering attacks: the construction of a false identity convincing enough that nobody checks it. This post breaks down how a legend is built — layer by layer.

LLM Pentest & AI Security: Prompt Injection, Jailbreaks, and Agentic AI – What Actually Threatens Your AI System

An internal AI agent connected to a CRM, ticketing system, and knowledge base. Ninety minutes into a red team engagement: full data exfiltration via indirect prompt injection — zero alerts triggered. No prior pentest had caught it. Because no one had tested for LLM attack vectors.

€50,000 for the CTO. €500 for the Cleaner. Who Says No?

Bribing a CTO costs €50,000 and fails instantly. The same ask directed at a subcontractor's cleaner costs €500 — and nobody knows what happens. Because nobody has ever tested it. This post shows why the physical supply chain attack is the most economically rational option for an attacker, backed by documented cases from Oracle to Mandiant.

Rubber Ducky, O.MG Cable & LAN Turtle: Why Your USB Blocker Doesn't Stop the Most Dangerous Devices

The USB stick was in the car park. 17 minutes later a PowerShell session was open — despite locked USB ports. No mass storage, no alert: the device registered as a keyboard. USB security is structurally misconceived in most organisations.

Quishing: Why the Most Innocent Scan of Your Day Could Compromise Your Network

Hannover, November 2024: professionally designed EasyPark stickers on parking meters, a near-identical phishing site, credit card data stolen. Now nationwide. The same technique has been landing in corporate inboxes since 2023 — as a QR code in a PDF attachment, on a conference room sign, in a spoofed HR email. And as a tool of North Korean intelligence group Kimsuky targeting think tanks and government agencies. This post explains why quishing succeeds where phishing fails — and what actually h

ISO 27001 Audit vs. Physical Pentest: Why Compliance Certificates Fail Under Real Attack Conditions

The certificate was still on the wall. Three months after the ISO audit, a red team tester was standing in the server room — in 31 minutes, without a single exploit. ISO 27001 is not a bad standard. It just answers the wrong question.

What a Breach Really Costs: Production Downtime, IR Fees, Customer Attrition and Personal Liability

Monday morning, 6:14 AM. ERP encrypted, MES offline, production stopped. By 11 AM the customer has activated alternative suppliers — not out of bad faith, but because their line runs empty. What a breach really costs rarely shows up in the ransom invoice.

OT Pentest: Why SCADA, PLCs and Industrial Plants Need a Different Security Logic

The PLC had been running for 22 years. Never patched, never tested — but reachable via VPN tunnel for three years. Four hours of passive analysis gave us full write access to a water utility's valve control system. OT security is not IT security with a different name.

Before He Lands, He Already Knows Every Corner: Drones as a Recon Tool in Physical Pentesting

A pharmaceutical company in Bavaria. A Tuesday morning. A drone nobody noticed – and three weeks later, a traceless break-in through exactly the spot that had shown up as a blind spot on the thermal camera. Drones are not a future scenario. They are the recon tool of the present.

Shoulder Surfing 2.0: How Thermal Cameras, Telephoto Lenses, and Smartphone Photos Bypass Your Access Control

Your PIN code glows on a thermal camera eight minutes after entry. Your badge photo is in a color printer in three clicks. How visual exposure becomes a complete attack vector – and the policies that prevent it.

Welcome Inside: How Attackers Use Visitor Management as an Entry Point

He was registered as a visitor at 9:30. He was in the server room by 9:47. No ID was requested, no escort enforced, no log audited. Visitor management is designed as a service process in most organisations – friendly, frictionless, hospitable. That is precisely the problem.

Power Out, Lock Open: What Happens to Your Access Control During a Power Failure

One fuse pulled, four seconds, open door—no badge, no exploit, no alarm. Why Fail-Safe is legally mandated while simultaneously opening a full attack vector, and how you can manage both.

What is a Penetration Test? Definition, Process, Costs and the Difference to Vulnerability Scanning

Firewall, SIEM, EDR – and still compromised. A penetration test is the only method that empirically proves whether your security measures hold up under real attack conditions. Everything you need to know: definition, types, process, costs and AI in 2026.

The Man Who Was Never There: Why Orphaned Access is the Most Dangerous Gap in Your Security Architecture

A badge from an employee who left two years ago. Still active. Still valid. Still unnoticed. Offboarding failure isn't an HR problem—it’s a complete access vector spanning badges, AD, Cloud, and VPN.

Through the Wall: Why Your Fences are Useless if the Backdoor is Open | CER & Pentest

Fences look great in annual reports. In reality, physical security often fails due to forgotten roof hatches or simple human politeness. Discover why your building envelope has more "hacker highways" than you think, and how the new CER Directive makes physical resilience a legal requirement.

Before they even open the door, they already know your building: Remote Recon to Physical Breach

An attacker doesn’t need a crowbar. They need LinkedIn, Shodan, and 48 hours. How OSINT is becoming the most dangerous tool in physical pentesting—and what you can do about it.

Title: REX Sensor Blind Spot: Why Your Emergency Exits are Your Building’s Most Dangerous Entrances

You secure the main entrance with biometrics and mantraps – while leaving the back door wide open through a poorly calibrated motion sensor. How a 4-second laser pointer attack on a REX sensor bypasses entire security architectures.

The Wiegand Bottleneck: Why Physical Security Fails Without End-to-End Encryption

A lock is only as strong as the protocols behind it. The Saflok exploit proved that proprietary "security by obscurity" is dead. We explore the broader landscape of physical security vulnerabilities, demonstrating how tools like the Proxmark3 expose the flaws in millions of corporate perimeters and why the shift to end-to-end encryption (OSDP & EV3) is no longer optional.

NIS2, KRITIS Umbrella Act & Physical Security: Concrete Steps for Critical Infrastructure Operators

NIS2 has been in effect since December 2025; the KRITIS Umbrella Act followed in January 2026. For the first time, both demand verifiable physical security measures—with personal liability for executive management. A roadmap for affected operators.

10 Minutes for 100 Million – Why Your Helpdesk might be Your Biggest Security Gap

A massive IT security budget won't save you if your helpdesk is tricked over the phone. We analyze the MGM hack, the psychology of social engineering, and show you how to bulletproof your team against vishing attacks.