Security

What is Log4Shell (Log4j vulnerability)? Log4Shell is the name of a zero-day vulnerability that became known at the end of 2021. It is based on an injection vulnerability in the Log4j Java logging framework used for many services and products. The BSI classified the risk caused by the security gap with the highest possible value. … Read more

What is LACP (Link Aggregation Control Protocol)? With the Link Aggregation Control Protocol, several physical connections can be bundled on the link layer and combined into a logical Link Aggregation Group (LAG). LACP takes care of the dynamic configuration of the logical connection. Compared to the operation of individual links, the usable bandwidth increases. In … Read more

What is Natural Language Processing (NLP)? Natural Language Processing deals with the theoretical foundations and practical methods and techniques for processing natural language in spoken form or text form using computers. NLP includes the two sub-areas Natural Language Understanding (NLU) and Natural Language Generation (NLG). Numerous applications such as machine translations, chatbots, digital assistants and … Read more

What is the MITER Att&ck Framework? The MITER Att&ck Framework provides information on cybercrime tactics, techniques and procedures. It is a publicly available cyber attack knowledge base. The framework helps to understand the various existing attack models better and to improve existing IT security strategies. MITER Corporation, a US non-profit corporation maintains and publishes the … Read more

The free tool Winaero Tweaker can be used to adjust many hidden Windows settings. For this purpose, the program shows the places in the system that are changed and also which changes are made. In this tool tip, we show the many possibilities of this practical free tool. What is Winaero Tweaker? Winaero Tweaker is … Read more

Data Poisoning is a critical and growing concern in the realm of data security and integrity. This phenomenon has gained prominence due to its potential to undermine the trustworthiness of data, leading to significant consequences in various fields, including cybersecurity, machine learning, and data-driven decision-making processes. This article will define data poisoning, highlight the importance … Read more

What is a Data protection impact assessment? The data protection impact assessment, or DSIA for short, is an important installation of the General Data Protection Regulation (GDPR). It is intended to ensure the protection of personal data in data-processing bodies through a risk analysis to be carried out in advance. The consequences of processing operations … Read more

How does captcha work? Many IT security measures are not developed or deployed until you encounter a concrete problem. It was the same with Captcha. This security query was developed to put a stop to spam and the unwanted use of web services by automated bots and to clearly distinguish humans from machines. But as … Read more

What is TEE(Trusted Execution Environment)? A Trusted Execution Environment creates an isolated environment, sealed off from other applications and data, for the protected execution of applications or the storage of data that requires protection. The environment can be implemented on the main processor, a dedicated processor, or a special chip. Common application areas are smartphones. … Read more

What is biometrics? Biometrics refers to the science of measuring and analyzing biological characteristics. Today, biometric procedures are used to identify or verify persons. Biometric procedures are, for example, fingerprint or face recognition. What is biometrics? Biometrics refers to the measurement and statistical analysis of people’s unique physical and behavioral characteristics. These characteristics are used … Read more

What is a Zero-Day Exploit? A zero-day exploit is a special form of exploit, i.e. the exploitation of a vulnerability where no patch exists yet for a discovered security hole. Such an exploit can be used for very dangerous because undetected, zero-day attacks that spread, for example, rootkits, remote access Trojans (RATs), or other malware. … Read more

What is Shodan? Shodan is used to find devices and systems that are permanently connected to the Internet. Shodan is also called a search engine for the Internet of Things (IoT). It searches the Internet for open TCP/IP ports and allows to filter the found systems according to certain terms and criteria. The search engine … Read more

What is Maltego? Maltego is an analysis software that allows searching and linking information on the Internet. The data mining tool visually displays the information found using directed graphs and allows further analysis. Sources for searching information include websites, social networks, search engines, or publicly available databases. Maltego is a powerful and versatile Open Source … Read more

What is Ransomware? Ransomware is malware that blocks the use of computers or data and demands a ransom for release. Methods such as file encryption are used. Well-known examples of this type of malware are CryptoLocker, WannaCry, or Locky. The term ransomware is derived from the English word “ransom”. It means ransomware. Ransomware is extortionate … Read more

What is a Password manager? No user can remember complex passwords, but password management systems can easily accommodate many combinations of any letters, numbers, and special characters. Password managers for managing access data and passwords are therefore an important security measure in the online world. In today’s digital age, the concept of a password manager … Read more

What is code injection? Code injection allows the infiltration and execution of unwanted program code due to vulnerabilities in computer programs or in web applications. This is possible, for example, if a user’s input is not sufficiently checked and passed to the interpreter. Common examples of program code injection in the web environment are Cross … Read more

What is bug in software? A bug is an error in the program code of the software. It has various effects, ranging from undesired behavior to the complete malfunction of an application or a device controlled by software. Already in the development phase, programmers try to find and eliminate bugs. Fixing a bug is called … Read more

What is smishing? Smishing is an internet fraud method. Unlike phishing, it does not use e-mails or Internet links to elicit sensitive information such as passwords from victims but uses SMS text messages. The messages ask the victim to visit a link, install software or call a phone number, for example. In the second step, … Read more

What Is Vishing? Vishing is an Internet fraud method. Unlike phishing, it does not use emails or links to obtain sensitive information such as passwords or personal data of the victim but uses the personal conversation during a phone call. On the technical side, automated voice-over-IP calls with a falsified sender number are often used. … Read more