Category: Uncategorized

Even a Small Company Can Offer a Valuable Student Internship

Even a Small Company Can Offer a Valuable Student Internship

Internships do not have to be offered only by large companies. Smaller organizations can also show students what a real IT and cybersecurity environment looks like. We were chosen by students from Kolín and Prague, who got involved in various tasks based on what made sense for us and what could be beneficial for them.

More...
Purple Knight and Prowler: Two Perspectives on Microsoft Entra ID Security

Purple Knight and Prowler: Two Perspectives on Microsoft Entra ID Security

When conducting security audits of cloud environments, we often encounter the question of how to assess the security of Microsoft Entra ID. In practice, we have found that a combination of Purple Knight and Prowler works very well for these audits, which is why we use both tools regularly. Their areas of focus complement each

More...
Obfuscation differently – what we learned at the BSides workshop

Obfuscation differently – what we learned at the BSides workshop

You have probably heard of obfuscation before. Some experts see it as a security measure, while many consider it merely “security by obscurity” – security based on making a system difficult to understand and cryptic, with only a select few able to make sense of it. Nevertheless, OWASP recommends obfuscation as a protective measure for

More...
Sensitive Data on Confluence

Sensitive Data on Confluence

Earlier this year, Atlassian surpassed 350,000 customers, and its tools—particularly Confluence and Jira—are becoming the de facto standard in knowledge management and SDLC management. However, this growth has also attracted the attention of attackers. Many attacks have been caused by hardcoded credentials in source code or a .env file accidentally committed to Git, and the

More...