As blockchain is revolutionizing industries, hacks and other security breaches threaten to derail it before it can really take off. To put it more specifically, blockchain itself is secure in most cases, but the apps that run it are not. Blockchain interacts with the apps via smart contracts, but it is still vulnerable to specific
Infrastructure As A Service (IaaS) attacks is an IT department’s worst nightmare. Imagine a cybercriminal planting a backdoor inside your server, at which point they can consistently use to discreetly steal data. Furthermore, this does not only affect the bare-metal server as this backdoor will remain intact as the cloud infrastructure goes from one customer
We have previously published reports on several data breaches that exposed personal data. One of the cases featured a MongoDB database that contained a large amount of scraped LinkedIn data, first identified as open to public access on October 5th.As of today, the number of records related to that breach has increased as more similar
Introduction The Mobile Application Penetration Testing Methodology is a form of security testing used to analyze security from inside of a mobile environment. That built on OWASP mobile application security verification standard. The mobile application penetration testing methodology concentrates on client-side safety, file system, hardware, and network security. By conducting penetration tests, the company can
# Intro Crypto exchanges are the banks of the future, accumulating and operating with large amounts of clients’ funds and, due to the KYC process, are responsible for handling a considerable amount of sensitive data. Therefore, security is a serious issue that should be addressed in advance. We’ve decided to make a research regarding vulnerability
It is no secret that the crypto industry is still in its infancy. Lack of governmental regulation and industry rules has created a space for unfair players to use unethical and sometimes fraudulent techniques to gain an advantageous market position. One of the areas of major concern is trading volume numbers that are reported by
March 14. AirAsia, Asia’s largest low-cost carrier by passengers, has partnered with Estonian cybersecurity consultancy company Hacken to complement their security strategy to ensure the best user experience for their passengers. Under the agreement, Hacken will perform an advanced secure code review of AirAsia applications to support the company with PCI DSS compliance requirements. The
Company name: CODEXCompany description: CODEX is a licensed trading platform for cryptocurrencies & digital assets, built on vanguard security infrastructure and revolutionary reward system.Service: Web application security assessment. “Any financial business includes risk and security management, which is especially important when it comes to the means of our users. Those who do not spend a
Company name: AmbrosusCompany description: Ambrosus is a Blockchain and IoT Ecosystem, built for industrial data management.Service: Blockchain security review and penetration testing“We appreciated the quality of work done by the Hacken team. They were professional, and thorough in their audit, and allowed us to get a third party perspective on the security of AMB-NET and
