Baza wiedzy - Securing

O nas
Usługi
Szkolenia
iASE
Baza wiedzy
Kontakt

EN

Zarezerwuj spotkanie

Polecane Physical Security

Mifare Classic cards security

Bartosz Klinowski 2025.07.04 · 15 MIN czytania

Newsletter

Regularne dawki eksperckiej wiedzy – i ani trochę spamu!

To pole jest wymagane

Akceptuję Politykę Prywatności i Regulamin Newslettera.

To pole jest wymagane

Pokaż wszystkie

Wszystkie
AI
App Security
Bez kategorii
Biometrics
Blockchain and Smart Contracts
Cloud Security
DORA
Infrastructure Security
Mobile App Security
Our Tools
Physical Security
Red team
Single Sign-On
Software Development Security
Threat Modeling
Web App Security

Pokaż wszystkie

Physical Security

Mifare Classic cards security

Bartosz Klinowski 2025.07.04 · 15 MIN czytania

App Security Web App Security

Transaction Authorization Pitfalls – How to improve the current payment ecosystem…

Wojciech Dworakowski 2025.06.24 · 12 MIN czytania

Web App Security

Next.js-based Application Security Insights

Dawid Nastaj 2025.06.06 · 10 MIN czytania

Mobile App Security

Threats to consider when integrating Digital ID solutions into your organization

Szymon Chadam 2025.06.03 · 6 MIN czytania

Physical Security Red team

Red Team stories – Bypassing RFID-based access control systems

Julia Zduńczyk 2025.05.14 · 6 MIN czytania

AI

New, old and new-old web vulnerabilities in the Era of LLMs…

Dawid Nastaj 2024.07.05 · 10 MIN czytania

App Security Web App Security

Transaction Authorization Pitfalls – How to improve the current payment ecosystem…

Wojciech Dworakowski 2025.06.24 · 12 MIN czytania

App Security

Manual vs. automated penetration testing – or maybe both?

Liza Mariot 2023.10.18 · 7 MIN czytania

App Security

Storing secrets in web applications using vaults

Aleksander Młodak 2023.04.19 · 17 min czytania

Premium Bez kategorii

PORADNIK – Jak przeprowadzić lekcję online bez niechcianych gości?

Łukasz Bobrek 2020.04.08

Bez kategorii

Hack in Paris 2019 – Hacking AWS Workshop

Paweł Rzepa 2019.06.17

Bez kategorii

CONFidence 2019 – conference recap

Paweł Rzepa 2019.06.06

Bez kategorii

Infoshare 2019: Let’s meet us at Crypto&Security Stage

Damian Rusinek 2019.04.28

Bez kategorii

AppSec Europe 2018 – our presentations

Wojciech Reguła 2018.08.02

Biometrics

Voice Biometrics – how easy is it to hack them with…

Szymon Chadam 2023.05.04 · 15 MIN czytania

Biometrics

Before you implement Face Recognition to your app – AI hack study

Sebastian Drygiel 2021.08.05 · 14 MIN czytania

Biometrics

Attacking the face recognition authentication – how easy is it to…

Sebastian Drygiel 2020.11.04 · 12 MIN czytania

Blockchain and Smart Contracts

Blockchain bridges security & common cross-chain vulnerabilities

Jakub Zmysłowski 2022.07.05 · 8 MIN czytania

Blockchain and Smart Contracts

Smart Contracts Audits – how to get the most out of…

Paweł Kuryłowicz 2022.03.10 · 3 MIN czytania

Blockchain and Smart Contracts

Front-running attack in DeFi applications – how to deal with it?

Jakub Zmysłowski 2022.01.18 · 5 MIN czytania

Blockchain and Smart Contracts

The future security of your smart contracts – upcoming changes in SCSVS

Paweł Kuryłowicz 2021.12.01 · 13 MIN czytania

Blockchain and Smart Contracts

Reentrancy attack in smart contracts – is it still a problem?

Paweł Kuryłowicz 2021.09.22 · 7 MIN czytania

Cloud Security

Public clouds are secure by default… but not necessarily in your case

Krzysztof Demczuk 2025.04.17 · 12 MIN czytania

Cloud Security Single Sign-On

Azure Single Sign-On Case Study #3: Secure authentication for Function Apps

Natalia Trojanowska-Korepta 2024.09.04 · 8 MIN czytania

Cloud Security Single Sign-On

Azure Single Sign-On Case Study #1: Secure architecture for SPA & API

Natalia Trojanowska-Korepta 2024.04.09 · 18 MIN czytania

Cloud Security

Using Azure CLI and PowerShell to secure your Storage Accounts

Krzysztof Demczuk 2024.01.17 · 5 MIN czytania

Cloud Security

Cloud Shared Responsibility Model explained

Łukasz Bobrek 2023.04.12 · 10 MIN czytania

DORA

Threat-Led Penetration Testing (TLPT) – Jak być zgodnym z DORA w…

Wojciech Dworakowski 2025.02.28 · 15 MIN czytania

Infrastructure Security

CVE-2024-50603: Aviatrix Network Controller Command Injection Vulnerability

Jakub Korepta 2025.01.07 · 5 MIN czytania

Infrastructure Security

5 security tips for your macOS environment

Wojciech Reguła 2021.04.28 · 6 MIN czytania

Infrastructure Security

Local Privilege Escalation in macOS infrastructure

Wojciech Reguła 2020.12.09 · 6 MIN czytania

Infrastructure Security

Story about hacking security conference and their funny revenge

Wojciech Reguła 2018.04.09 · 3 MIN czytania

Infrastructure Security

Several polish banks hit by watering hole attack – lessons learnt?

Wojciech Dworakowski 2017.02.08 · 5 MIN czytania

Mobile App Security

Threats to consider when integrating Digital ID solutions into your organization

Szymon Chadam 2025.06.03 · 6 MIN czytania

Mobile App Security

How we helped secure Poland’s digital ID system – technical analysis

Szymon Chadam 2025.04.11 · 10 MIN czytania

Mobile App Security

Hackers vs root detection on Android

Łukasz Bobrek 2023.03.13 · 13 MIN czytania

Mobile App Security

Crypto Wallet Security – Video

Dawid Pastuszak 2023.02.21 · 5 MIN czytania

Mobile App Security

Third-party iPhone keyboards vs your iOS application security

Przemysław Samsel 2022.10.26 · 15 MIN czytania

Our Tools

Making iOS apps secure with iOS Security Suite (ISS)

Wojciech Reguła 2024.12.11 · 2 MIN czytania

Physical Security

Mifare Classic cards security

Bartosz Klinowski 2025.07.04 · 15 MIN czytania

Physical Security Red team

Red Team stories – Bypassing RFID-based access control systems

Julia Zduńczyk 2025.05.14 · 6 MIN czytania

Physical Security

Red Teaming in practice: Physical Security Testing tutorial

Julia Zduńczyk 2024.11.05 · 3 MIN czytania

Physical Security Red team

Red Team stories – Bypassing RFID-based access control systems

Julia Zduńczyk 2025.05.14 · 6 MIN czytania

Single Sign-On

Which IAM SaaS architecture is for you – exploring IAM architectures…

Natalia Trojanowska-Korepta 2025.05.13 · 10 MIN czytania

Single Sign-On

CVE-2025-26788: Passkey Authentication Bypass in StrongKey FIDO Server

Natalia Trojanowska-Korepta 2025.02.14 · 5 MIN czytania

Single Sign-On

The year in review: The most interesting Single Sign-On vulnerabilities of 2024

Natalia Trojanowska-Korepta 2025.01.27 · 8 MIN czytania

Single Sign-On

New Year, New IAM: A reasonable approach to Identity and Access…

Natalia Trojanowska-Korepta 2024.12.17 · 10 MIN czytania

Cloud Security Single Sign-On

Azure Single Sign-On Case Study #3: Secure authentication for Function Apps

Natalia Trojanowska-Korepta 2024.09.04 · 8 MIN czytania

Software Development Security

Baking Mojolicious Cookies revisited: a case study of solving security problems…

Jakub Kramarz 2024.10.29 · 5 MIN czytania

Software Development Security

Security of External Dependencies in CI/CD Workflows

Jakub Kramarz 2024.10.09 · 6 MIN czytania

Software Development Security

Security Features in Financial Applications – our recommendations

Łukasz Bobrek 2021.08.19 · 7 MIN czytania

Software Development Security

How to stay secure for longer? Software development case.

Mateusz Olejarka 2021.07.20 · 8 MIN czytania

Software Development Security

Adding security to your SDLC process

Mateusz Olejarka 2021.05.04 · 7 MIN czytania

Threat Modeling

Light & agile approach to threat modeling

Sebastian Obara 2024.08.07 · 7 MIN czytania

Threat Modeling

How to prepare an effective threat modeling session

Sebastian Obara 2023.05.17 · 10 MIN czytania

Threat Modeling

Why threat modeling is important

Sebastian Obara 2023.02.13 · 5 MIN czytania

Threat Modeling

Threat Modeling – how to start doing it?

Jakub Kałużny 2021.03.30 · 9 MIN czytania

Threat Modeling

Thinking what can go wrong? Introduction to Threat Modeling.

Jakub Kałużny 2021.02.17 · 9 MIN czytania

App Security Web App Security

Transaction Authorization Pitfalls – How to improve the current payment ecosystem…

Wojciech Dworakowski 2025.06.24 · 12 MIN czytania

Web App Security

Next.js-based Application Security Insights

Dawid Nastaj 2025.06.06 · 10 MIN czytania

Web App Security

Web Push Notifications and user-targeted attacks – our research

Dawid Nastaj 2024.02.13 · 10 MIN czytania

Web App Security

HTTP request smuggling attack. Is it a vulnerability still worth considering?

Przemysław Samsel 2022.09.21 · 17 MIN czytania

Web App Security

Why should you care about Content Security Policy?

Michał Ogorzałek 2021.03.22 · 14 MIN czytania

Konferencje

Prezentacje

Pokaż wszystkie

Wszystkie
App Security
Blockchain
Cloud
IOS
Mobile
Security Testing

IOS

Broken isolation – draining your credentials from popular macOS password managers

Wojciech Reguła Oct 21, 2025

Security Testing

How to Break into Organizations with Style

Julia Zduńczyk Nov 22, 2023

App Security

AI trick or treat – security implications of ML/AI in our everyday life

Mateusz Olejarka Nov 15, 2023

App Security

Developer in a digital crosshair, 2023 edition

Mateusz Olejarka Apr 25, 2023

Security Testing

Is persistency on serverless even possible?!

Paweł Kusiński Oct 18, 2022

Security Testing

What happens on your Mac, stays on Apple’s iCloud?!

Wojciech Reguła Oct 11, 2022

App Security

AI trick or treat – security implications of ML/AI in our everyday life

Mateusz Olejarka Nov 15, 2023

App Security

Developer in a digital crosshair, 2023 edition

Mateusz Olejarka Apr 25, 2023

App Security

How secure are webinar platforms?

Michał Ogorzałek Sep 28, 2021

App Security

Abusing & Securing XPC in macOS apps

Wojciech Reguła Mar 16, 2020

App Security

We need to go deeper – Testing inception apps

Jakub Kałużny Jun 04, 2019

App Security

Testing iOS Apps without Jailbreak in 2018

Wojciech Reguła Jul 09, 2018

Blockchain

Web Apps vs Blockchain dApps (Smart Contracts): tools, vulns and standards

Damian Rusinek Dec 03, 2019

Blockchain

Outsmarting Smart Contracts – an essential walkthrough a blockchain security minefields

Damian Rusinek Jun 08, 2018

Cloud

Attacking AWS: the full cyber kill chain

Paweł Rzepa Jun 08, 2019

Cloud

Hunting for the secrets in a cloud forest

Paweł Rzepa Jun 07, 2018

IOS

Broken isolation – draining your credentials from popular macOS password managers

Wojciech Reguła Oct 21, 2025

Mobile

Building & Hacking Modern iOS Apps

Wojciech Reguła May 28, 2019

Security Testing

How to Break into Organizations with Style

Julia Zduńczyk Nov 22, 2023

Security Testing

Is persistency on serverless even possible?!

Paweł Kusiński Oct 18, 2022

Security Testing

What happens on your Mac, stays on Apple’s iCloud?!

Wojciech Reguła Oct 11, 2022

Security Testing

0-Day Up Your Sleeve – Attacking macOS Environments

Wojciech Reguła Sep 20, 2022

Security Testing

20+ Ways to Bypass Your macOS Privacy Mechanisms

Wojciech Reguła Aug 30, 2021

Security Testing

Let’s get evil – threat modeling at scale

Jakub Kałużny Dec 17, 2019

Nasi eksperci

Wojciech Reguła Principal IT Security Consultant
Head of Mobile Security

Łukasz Bobrek Principal IT Security Consultant
Head of Cloud Security

Mateusz Olejarka Principal IT Security Consultant
Head of Web Security

Dołącz do nas

Dołącz do liderów rynku

Dołącz do nas

Gdzie nas znajdziesz?

Nadchodzące

Nov 25-26, 2025

Düsseldorf, Niemcy

German OWASP Day 2025

Oh My Hack

Minione

Oct 15-17, 2025

Ibiza, Hiszpania

Objective By The Sea

Oct 13-14, 2025

Warszawa, Polska

The Hack Summit

Sep 30-Oct 2, 2025

Toronto, Kanada

SecTor – a Black Hat event

O nas

Baza wiedzy
O nas
Kariera

Kontakt

Kontakt

Usługi

Testy Aplikacji Webowych
Testy Aplikacji Mobilnych
Testy penetracyjne Single Sign-On
Modelowanie zagrożeń

Spotkajmy się

Kraków

Kalwaryjska 65/6

30-504 Kraków

NIP 6792755791

KRS 0001132008

tel: +48 12 425 25 75

info@securing.pl

Niemcy – kontakt:

tel: +49 30 374 334 69

Dołącz do nas w Social Media