@YSecurity

Y-Security performs Attack Simulations, Penetration Tests, and Security Trainings. Content in EN & DE. E-Mail us via info 'ät' https://xitter.cf/t.co/Dg29mHfom3

 Essen, Germany
y-security.de
Joined July 2021
  • Tweets73
  • Following2
  • Followers73
14Media
Old tech doesn’t mean irrelevant tech. We took a closer look at IBM iSeries and explored how modern security research techniques can be applied to a platform that’s still running in production environments today. y-security.de/news-en/hackin… #CyberSecurity #IBMi #SecurityResearch

Hacking IBM iSeries: How AI Can Be Used to Exploit Proprietary Systems

We used AI to build tools which can exploit proprietary systems from an older era of computing where security was mostly optional.

y-security.de
2
2
28
Our security team at Y-Security has identified multiple security vulnerabilities in BlackBerry UEM, exposing organizations to attack vectors such as cross-site scripting, reflected file downloads, and denial of service. y-security.de/news-en/blackb… #CVE202618084 #CVE202618085

BlackBerry UEM - CVE-2026-18084 & CVE-2026-18085

Multiple vulnerabilities affecting the BlackBerry UEM software (CCVE-2026-18084 & CVE-2026-18085)

y-security.de
1
1
27
Our security team at @YSecurity has identified multiple vulnerabilities in TIM BPM Suite/TIM FLOW, allowing authorization bypass, privilege escalation, and SQL/HQL injection. Advisory + Mitigation: y-security.de/news-en/tim-bp…

TIM BPM Suite / TIM FLOW - Multiple Vulnerabilities - Y-Security GmbH

Multiple vulnerabilities affecting the TIM BPM Suite & TIM FLOW software by TIM Solutions GmbH.

y-security.de
1
45
Giving away one ticket for German OWASP Day 2025 incl. hotel night! 25.11 pre-event, 26.11 conference. Interested? Email us – first come, first served. Info: god.owasp.de/2025/ Already have a ticket? Meet the Y-Security team on site. #OWASP #GOD2025 #GOD
1
1
33
The ticket for the German OWASP Day 2025 has been assigned! Thanks for your messages. See you on site!
22
Our security team at @YSecurity has identified a vulnerability in AXESS Auto Configuration Server (CVE-2024-56316) which allows unauthenticated remote attackers to trigger a permanent DoS. Advisory + Mitigation: y-security.de/news-de/axess-… #YSecurity #CVE202456316 #TR069 #ACS

AXESS Auto Configuration Server - Denial of Service (CVE-2024-56316) - Y-Security GmbH

The AXESS ACS (Auto Configuration Server) allows remote unauthenticated attackers to cause a permanent Denial of Service (CVE-2024-56316)

y-security.de
3
3
241
We have publicly released our internal tool StealthGuardian at Black Hat USA 2024. It can be combined with adversary simulation tools to verify the resistance, detection level and behaviour detection of defence mechanisms. y-security.de/news-en/stealt… #bhusa #blackhat #redteam

StealthGuardian - Automatic TTP Analysis

This August we publicly released StealthGuardian at Black HAT USA 2024 Arsenal.

y-security.de
3
4
172
Wir suchen derzeit zur Unterstützung Werkstudent:innen im Bereich Anwendungsentwicklung. Wenn du Lust auf ein innovatives Unternehmen mit flexiblen Arbeitsmöglichkeiten hast, dann freuen wir uns, von dir zu hören. #Werkstudent #Job #Germany #Business #Development
Job Profile Werkstudent Anwendungsentwickler

ALT Job Profile Werkstudent Anwendungsentwickler

1
1
3
112
Weitere Informationen zur Arbeit bei Y-Security und weitere offene Stellen findest du auf unserer Webseite: y-security.de/jobs/

Jobs at Y-Security

Are you interested in working with us? We've just started our adventure, but we do hope to look for more support in our team soon.

y-security.de
34
Are you taking steps towards a career as an Attack Simulation Specialist? Maybe you already have experience as a Penetration Tester or with platforms like Hack The Box or certifications like OSCP? If so, we would love to talk to you! #job #redteam #pentest #germany
Job description for an Attack Simulation Specialist at Y-Security.

ALT Job description for an Attack Simulation Specialist at Y-Security.

2
2
3
328
Our tool StealthGuardian has been accepted for Black Hat ARSENAL USA 2024. The Y-Security team will be in Las Vegas to present on protecting Red Team payloads from Blue Teams. y-security.de/news-en/black-… #BlackHat #BHUSA #RedTeam #VegasBaby

Y-Security @ Black Hat ARSENAL USA 2024

The Y-Security team will be at the Black Hat ARSENAL USA 2024 on the 7th and 8th of August 2024 in Las Vegas, USA.

y-security.de
3
6
225
Our team recently took the challenge of mastering the Red Team Ops I and Red Team Ops II exam offered by @zeropointsecltd . After completion, we received both the Red Team Operator and Red Team Lead certifications. Read our recent post: y-security.de/news-en/red-te… #RedTeam #RTO

Red Team Ops I & II Review

This spring we challenged ourselves by completing both Red Team certifications by Zero Point Security.

y-security.de
2
6
148
Recently we checked the security of a LoRaWAN implementation. In our latest post we share insights about the security of LoRaWAN, common LoRaWAN attacks and how we built a custom methodology and testing environment. y-security.de/news-en/securi… #pentest #lorawan #ysecurity

From Concept to Creation: Checking The Security Of LoRaWAN Implementations

In this post we describe the process of creating a tailored LoRaWAN Penetration Testing environment.

y-security.de
1
1
106
We have moved our twitter account to @YSecurity - All our new content will be available here. Followers have been moved to the new account. Thanks for following @YSecurity
2
2
177
Check out our blog post by Thore on our Mobile Application Testing service utilizing Apple Silicon. y-security.de/news-en/mobile… #pentest #mobile #jailbreak #apple #ios #testing #m1 #ysecurity

Mobile Application Testing on Apple Silicon

In this blog post, we will show how to perform Mobile Application Test on Apple Silicon as an alternative to jailbroken iPhones.

y-security.de
4
4
605
Today we're releasing two CVEs: Reminder for Jira – Cross-Site Scripting (CVE-2023-30453) # y-security.de/news-en/remind… EasyMind – Cross-Site Scripting (CVE-2023-30452) # y-security.de/news-en/easymi… #atlassian #confluence #jira #vulnerability #ysecurity #CVE-2023-30453 #CVE-2023-30452

Reminder for Jira - Cross-Site Scripting (CVE-2023-30453)

The Reminder for Jira plugin is vulnerable to a Cross-Site Scripting vulnerability (CVE-2023-30453) within the reminder overview section.

y-security.de
2
118
Y-Security carries out projects in a climate-neutral way. Companies that work with Y-Security have the option of taking over a share to offset the CO2 produced in our projects too. We have just claimed 2,98 tons CO2 via @compensatorsNGO compensators.org/en/how-it-w… #climateaction
2
4
160
Looking to strengthen your cloud security and safeguard your data from cyber threats? Then don't miss our latest blog post about the Advantages of Cloud Audit and Cloud Penetration Testing: y-security.de/news-en/advant… #cloud #cloudsecurity #bugbounty #Y #penetrationtesting

Advantages of Cloud Audit and Cloud Penetration Testing

In this post we discuss the differences between Cloud Penetration Testing and Cloud Audit as well as advantages of each.

y-security.de
1
1
121
Y-Security retweeted
Chris@0xchrisb12 Apr 2023
Have you ever wondered how to start #AWS penetration testing? We have published AWS penetration testing: A step-by-step guide at the @hackthebox_eu website: hackthebox.com/blog/aws-pent… #HTB #BugBounty #Y #Security #Cloud

AWS penetration testing: A step-by-step guide

Looking to learn AWS penetration testing? Here are essential AWS pentesting techniques and tools to help you get started!

hackthebox.com
4
2
249
Have you enjoyed our last week review on @hackthebox_eu's BlackSky Cloud Hacking Labs for AWS? Our team member Thore shared his feedback and insights on the Cyclone: Microsoft Azure scenario at: y-security.de/news-en/hack-t… #Y #HackTheBox #Cloud #Azure #Cyclone #BugBounty

Hack The Box BlackSky Cloud Hacking Labs - Cyclone

In this post we present Cyclone, the BlackSky Cloud Hacking Lab scenario for Microsoft Azure by Hack The Box and our review of it.

y-security.de
1
4
400
Load more