® 
OT Security 16 December 2024
Increasing Threats in Industrial Environments Require Integrated OT Security
41% of companies in EMEA still have OT and IT teams operating independently. Learn why an integrated approach to OT security is essential.
Security Blog
Insights on cybersecurity trends, threat intelligence, compliance updates, and technical deep dives from the DEFION team.
Secure Development 28 November 2024
How to Safely Use a Frontend Framework for Your Website
Three essential tips for safely using frontend frameworks: don't trust your frontend, know your framework's limitations, keep software updated.
Secure Development 21 November 2024
Why You Need a Strong Content Security Policy
A CSP is your second line of defense against XSS. Learn how CSP works, how to implement it, and what common mistakes to avoid.
Authentication 11 June 2024
Passkeys: the advantages and risks of these new passwords
Passkeys are the future of authentication. But are they truly secure? Learn about the advantages and the security risks when implementing them.
Application Security 25 April 2024
State of Application Security 2024
One third of applications is not sufficiently secured. Read the findings from over 300 security tests in the DEFION research.
Security Compliance 29 March 2024
DORA: European Legislation Also Imposes Requirements on ICT Service Providers
DORA applies not only to financial institutions but also to their ICT service providers. Learn about the key requirements: risk frameworks, business continuity, detection and reporting.
Offensive Security 10 March 2024
What Is a Letter of Authorization in Cybersecurity?
A letter of authorization is a required legal document for penetration testing. Learn what it contains and why it protects both client and security provider.
Vulnerability Research 20 February 2024
What Is CVE (Common Vulnerabilities and Exposures)?
CVE is the global standard for identifying security vulnerabilities. Learn what CVE identifiers are, how they work, and why they matter for your security posture.
Offensive Security 15 January 2024
What Are Red Team, Blue Team and Purple Team?
Red team, blue team and purple team each play a distinct role in cybersecurity. Learn the difference and why all three are essential for resilience.
Vulnerability Research 3 August 2020
TouchID Vulnerability: Danger of iCloud Break-In
DEFION Security discovered a vulnerability in Apple's TouchID login feature that allowed attackers to gain access to iCloud accounts of other users.
Vulnerability Research 21 February 2019
Vulnerability in KNX Standard for Building Automation
17,444 vulnerable locations worldwide: KNX building automation systems directly connected to the internet are easily accessible to hackers.
Vulnerability Research 1 April 2018
Car Hacking Project Volkswagen & Audi
DEFION Security gained remote access to the infotainment system of Volkswagen and Audi. Read how and what this means for driver privacy.