Insights

Cybersecurity Blog

Analyses, practical tips and assessments from the world of IT security.

Enterprise WLAN Security: WPA3, 802.1X and Secure Guest Wi-Fi

Corporate Wi-Fi is an often-overlooked target for attacks. This guide explains WPA3-Enterprise with 802.1X authentication, the risks of using WPA2-PSK in a corporate environment, secure guest Wi-Fi design, Wi-Fi attacks (Evil Twin, KRACK, PMKID attack), management recommendations, and how to integrate Wi-Fi security with an existing Active Directory.

Chris Wojzechowski

March 8, 202618 min read

Read article

206 articles total - Page 2 of 30

Security Awareness

Phishing Methods Overview: From Spear Phishing to AI Phishing

Email, phone, text message, QR code, chat, and AI - all types of phishing explained with examples and protective measures for each method.

Chris Wojzechowski

March 7, 202610 min read

Compliance & Standards

GDPR and IT Security: Technical Measures under Art. 32

Article 32 of the GDPR requires appropriate technical and organizational measures (TOMs). This practical guide explains encryption, access controls, pseudonymization, privacy by design (Article 25), backup strategies, and why penetration tests serve as direct proof of GDPR compliance.

Chris Wojzechowski

March 6, 202618 min read

Security Awareness

Recognizing Phishing: The Complete Protection Guide for Businesses

How to spot phishing emails, respond correctly, and protect your business. Includes a checklist, immediate steps to take after clicking a link, and FAQs.

Chris Wojzechowski

March 5, 202612 min read

Network & Endpoint Security

Active Directory Security Audit: Find and Close Attack Paths in AD

Active Directory is the most common target of corporate attacks - whoever controls AD controls everything. This guide explains how to structure an AD security audit: Kerberoasting, Pass-the-Hash, DCSync, BloodHound analysis, the tiered admin model, LAPS, and Protected Users. Includes specific PowerShell queries and an audit checklist.

Vincent Heinen

March 4, 202612 min read

Network & Endpoint Security

DMARC Implementation: Step-by-Step from p=none to p=reject

DMARC (Domain-based Message Authentication, Reporting, and Conformance) protects your domain from email spoofing and phishing. This guide walks you through the entire DMARC rollout: SPF and DKIM as prerequisites, configuring the DMARC record, reporting analysis with forensic and aggregate reports, and step-by-step policy tightening from p=none to p=quarantine to p=reject. It also covers common pitfalls and DMARC monitoring tools.

Vincent Heinen

March 4, 202610 min read

Network & Endpoint Security

ITDR: Detecting and Defending Against Identity-Based Attacks

Identity Threat Detection and Response (ITDR) is the new security discipline for attacks on identity systems: Active Directory, Azure AD/Entra ID, and IAM platforms. This guide explains why traditional SIEM rules often overlook identity attacks (Golden Ticket, DCSync, Pass-the-Hash, MFA bypass), how ITDR solutions (Microsoft Defender for Identity, Silverfort, Illusive) close the gap, and which detection use cases and countermeasures organizations should prioritize.

Jan Hörnemann

March 4, 202611 min read