Knowledge, trends and tips for greater IT security and
reliable protection against digital threats.
Kali365: How the Phishing Platform Defeats MFA in Microsoft 365, and How Conditional Access Stops It
Learn to hack – but for the right reasons: On the road at the Democracy Days in Wismar and Halle
Hacking and Democracy: Why an open society needs hackers
The first autonomous AI attack: OpenAI, Hugging Face and what security experts can learn from it
The end of SMS and phone-based MFA in Microsoft 365: Why admins need to act now
Warning from the Federal Foreign Office: North Korean IT specialists as an insider threat
Critical Gitea vulnerability: Unauthenticated file access leading to code execution (CVE-2026-59774 & CVE-2026-60004)
ClickFix – When the instinct to help becomes a loophole
Credential Stuffing
wp2shell: Critical WordPress vulnerability allows server takeover without logging in
SOC 1, 2 or 3: Which report is your client actually referring to?
What is a SOC? And what different types are there?
Quantum cryptography – The future of secure communication
Responsible Disclosure: How to report security vulnerabilities responsibly
The GDPR and cybersecurity – how they differ
CVE-2026-8732: WP Maps Pro vulnerability
What exactly is S/MIME?
NGINX Rift: Critical 0-day vulnerability allows remote code execution via simple HTTP requests (CVE-2026-42945)
Bug Bounty & Responsible Disclosure
Tincon Berlin 2026 – Our Review
Incident Response: What to do if a cyber attack occurs?
25 years of the ILOVEYOU virus
AI for security research: Who is allowed to do what, and who isn’t?
RC4 in Kerberos is being phased out. What organisations need to do now
Microsoft E7 licence: A boost for security?
TLS certificates under time pressure: What the D-Trust recall means for businesses
ClickFix and AI Malware: When a single click puts an entire company at risk
Daylight saving time and its impact on the IT world – more than just an hour lost
A ‘fire sale’ like in Die Hard 4.0 – cinematic fantasy or a real threat?
Free Airport Wi-Fi, Stolen Session Tokens
Local AI in Pentesting and security research
NTLM is being disabled: What organisations need to do now to prevent disruption
What to do after a cyber attack? A 48-hour guide
Further security issues in the BAMF’s Delegated User Management (DeBeV) system
New approach to WHOIS enquiries at DENIC under NIS2
Credential Stuffing Attacks – Why ‘Password Reuse’ is a Real Business Risk
The most common cyberattacks in 2026 – and how businesses can protect themselves
Vulnerability Management starts with patching, not scanning
Bit- and Typosquatting on the ‘bund.de’ domain
The federal domain flying blind: DNS leaks and a decade of IT negligence
Hacker attacks over the festive season – When cybercriminals exploit the holidays
Domain controllers in the spotlight
Seeing yourself as an attacker
CVE-2025-55182: Critical security vulnerability in React Server Components
Deepfake technology: The threats posed by fake videos and voices.
The 6 Phases of Incident Response According to NIST: A Guide to Effective IT Security Management
Stored XSS in SPY 24 PLUS (Linergy) webapplication
Microsoft M365 Tenant hardening and Why It Is Important
An Introduction to IT Security
Cisco has published details of three critical Zero-Day exploits (CVE-2025-20352, CVE-2025-20333, CVE-2025-20362)
Red Teaming vs. Blue Teaming – A look at attack and defence in cybersecurity
Live-Hacking Webshop – Tincon 2025
Cloud backup: Why your data isn’t automatically secure in the cloud
Criminal investigation following reports of IT security vulnerabilities in surveillance systems
BloodHound 8 – Visualising hybrid attack paths
A Brief Guide to Email Security: Looking Ahead to the Year 2025
Quantum-secure cryptography & the Quantum Year 2025
The Art of Deception – Social Engineering and the Psychology Behind Cyberattacks
Payment card for refugees
2025: Short report IETF 123 in Madrid
Smart Cities: Digitalisation with a focus on security
Data protection and IT security issues with age verification app Yoti
Cybercrime on the Dark Web: A look behind the scenes
Vulnerability Scanning and Management
USB & Port Security: An invisible threat at an open port
e-passport photos: a reality check
Cyber Resilience Act: Greater security for digital products in the EU
Path Traversal Vulnerability in Surveillance Software
Facial recognition software: weaknesses, risks and challenges
The Zero Trust approach
Hacking Gadgets – More than just Hollywood?
Modern authentication
CVE-2025-29927: Critical security vulnerability in Next.js
Pyramid of needs for incident response
Data Protection in the Cloud: Challenges and Best Practices
Ransomware 2025: The Most Dangerous Groups and Their Tactics
AI-Powered Penetration Testing
Social Engineering
Phishing Simulation – Modern-Day Attacks
6 security vulnerabilities, some of which are critical, in rsync Server
WP3[.]XYZ Malware has affected more than 5,000 WordPress sites
NIS2 compliance
Physical Penetration Test
Active Directory Security
© 2026 Mint Secure GmbH
