Compass Security Blog - Offensive Defense

Some months ago, I performed a web application penetration test on an application that used passkey for authentication. As part of the assessment, I…

Weiterlesen

Pipeleek 1.0 is here. What started as a GitLab pipeline secret scanner now covers seven CI/CD platforms and comes with helpers for runner…

Weiterlesen

Automation platforms such as n8n are often introduced as productivity tools: connect a few systems, automate repetitive work, maybe add some AI.…

Weiterlesen

In this second part, we demonstrate how a Cyber Resilience Act (CRA) assessment is performed in practice. Using a low-cost IP camera as an example, we…

Weiterlesen

The Cyber Resilience Act (CRA) is a regulation introduced by the European Union to strengthen cybersecurity requirements for products with digital…

Weiterlesen