@YSecurity profile picture
Y-Security @YSecurity

Y-Security performs Attack Simulations, Penetration Tests, and Security Trainings. Content in EN & DE. E-Mail us via info 'ät' y-security.de

Joined July 2021
  • Tweets 71
  • Following 2
  • Followers 73
14 Photos and videos
Our security team at @YSecurity has identified multiple vulnerabilities in TIM BPM Suite/TIM FLOW, allowing authorization bypass, privilege escalation, and SQL/HQL injection. Advisory Mitigation: y-security.de/news-en/tim-bp…

TIM BPM Suite / TIM FLOW - Multiple Vulnerabilities - Y-Security GmbH

Multiple vulnerabilities affecting the TIM BPM Suite & TIM FLOW software by TIM Solutions GmbH.

y-security.de
1
33
Y-Security @YSecurity
24 Nov 2025
Giving away one ticket for German OWASP Day 2025 incl. hotel night! 25.11 pre-event, 26.11 conference. Interested? Email us – first come, first served. Info: god.owasp.de/2025/ Already have a ticket? Meet the Y-Security team on site. #OWASP #GOD2025 #GOD

1
1
26
Y-Security @YSecurity
24 Nov 2025
The ticket for the German OWASP Day 2025 has been assigned! Thanks for your messages. See you on site!
16
Y-Security @YSecurity
20 Jan 2025
Our security team at @YSecurity has identified a vulnerability in AXESS Auto Configuration Server (CVE-2024-56316) which allows unauthenticated remote attackers to trigger a permanent DoS. Advisory Mitigation: y-security.de/news-de/axess-… #YSecurity #CVE202456316 #TR069 #ACS

AXESS Auto Configuration Server - Denial of Service (CVE-2024-56316) - Y-Security GmbH

The AXESS ACS (Auto Configuration Server) allows remote unauthenticated attackers to cause a permanent Denial of Service (CVE-2024-56316)

y-security.de
3
3
228
Y-Security @YSecurity
15 Aug 2024
We have publicly released our internal tool StealthGuardian at Black Hat USA 2024. It can be combined with adversary simulation tools to verify the resistance, detection level and behaviour detection of defence mechanisms. y-security.de/news-en/stealt… #bhusa #blackhat #redteam

StealthGuardian - Automatic TTP Analysis

This August we publicly released StealthGuardian at Black HAT USA 2024 Arsenal.

y-security.de
3
4
167
Y-Security @YSecurity
1 Jul 2024
Wir suchen derzeit zur Unterstützung Werkstudent:innen im Bereich Anwendungsentwicklung. Wenn du Lust auf ein innovatives Unternehmen mit flexiblen Arbeitsmöglichkeiten hast, dann freuen wir uns, von dir zu hören. #Werkstudent #Job #Germany #Business #Development
1
1
3
107
Y-Security @YSecurity
1 Jul 2024
Weitere Informationen zur Arbeit bei Y-Security und weitere offene Stellen findest du auf unserer Webseite: y-security.de/jobs/

Jobs at Y-Security

Are you interested in working with us? We've just started our adventure, but we do hope to look for more support in our team soon.

y-security.de
32
Y-Security @YSecurity
17 Jun 2024
Are you taking steps towards a career as an Attack Simulation Specialist? Maybe you already have experience as a Penetration Tester or with platforms like Hack The Box or certifications like OSCP? If so, we would love to talk to you! #job #redteam #pentest #germany
2
3
316
Y-Security @YSecurity
4 Jun 2024
Our tool StealthGuardian has been accepted for Black Hat ARSENAL USA 2024. The Y-Security team will be in Las Vegas to present on protecting Red Team payloads from Blue Teams. y-security.de/news-en/black-… #BlackHat #BHUSA #RedTeam #VegasBaby

Y-Security @ Black Hat ARSENAL USA 2024

The Y-Security team will be at the Black Hat ARSENAL USA 2024 on the 7th and 8th of August 2024 in Las Vegas, USA.

y-security.de
3
6
222
Y-Security @YSecurity
16 Apr 2024
Our team recently took the challenge of mastering the Red Team Ops I and Red Team Ops II exam offered by @zeropointsecltd . After completion, we received both the Red Team Operator and Red Team Lead certifications. Read our recent post: y-security.de/news-en/red-te… #RedTeam #RTO

Red Team Ops I & II Review

This spring we challenged ourselves by completing both Red Team certifications by Zero Point Security.

y-security.de
2
6
144
Y-Security @YSecurity
13 Mar 2024
Recently we checked the security of a LoRaWAN implementation. In our latest post we share insights about the security of LoRaWAN, common LoRaWAN attacks and how we built a custom methodology and testing environment. y-security.de/news-en/securi… #pentest #lorawan #ysecurity

From Concept to Creation: Checking The Security Of LoRaWAN Implementations

In this post we describe the process of creating a tailored LoRaWAN Penetration Testing environment.

y-security.de
1
1
105
Y-Security @YSecurity
21 Jul 2023
We have moved our twitter account to @YSecurity - All our new content will be available here. Followers have been moved to the new account. Thanks for following @YSecurity
2
2
174
Y-Security @YSecurity
14 Jun 2023
Check out our blog post by Thore on our Mobile Application Testing service utilizing Apple Silicon. y-security.de/news-en/mobile… #pentest #mobile #jailbreak #apple #ios #testing #m1 #ysecurity

Mobile Application Testing on Apple Silicon

In this blog post, we will show how to perform Mobile Application Test on Apple Silicon as an alternative to jailbroken iPhones.

y-security.de
4
4
600
Y-Security @YSecurity
17 May 2023
Today we're releasing two CVEs: Reminder for Jira – Cross-Site Scripting (CVE-2023-30453) # y-security.de/news-en/remind… EasyMind – Cross-Site Scripting (CVE-2023-30452) # y-security.de/news-en/easymi… #atlassian #confluence #jira #vulnerability #ysecurity #CVE-2023-30453 #CVE-2023-30452

Reminder for Jira - Cross-Site Scripting (CVE-2023-30453)

The Reminder for Jira plugin is vulnerable to a Cross-Site Scripting vulnerability (CVE-2023-30453) within the reminder overview section.

y-security.de
2
117
Y-Security @YSecurity
15 May 2023
Y-Security carries out projects in a climate-neutral way. Companies that work with Y-Security have the option of taking over a share to offset the CO2 produced in our projects too. We have just claimed 2,98 tons CO2 via @compensatorsNGO compensators.org/en/how-it-w… #climateaction
2
4
158
Y-Security @YSecurity
4 May 2023
Looking to strengthen your cloud security and safeguard your data from cyber threats? Then don't miss our latest blog post about the Advantages of Cloud Audit and Cloud Penetration Testing: y-security.de/news-en/advant… #cloud #cloudsecurity #bugbounty #Y #penetrationtesting

Advantages of Cloud Audit and Cloud Penetration Testing

In this post we discuss the differences between Cloud Penetration Testing and Cloud Audit as well as advantages of each.

y-security.de
1
1
119
Y-Security retweeted
Chris @0xchrisb
12 Apr 2023
Have you ever wondered how to start #AWS penetration testing? We have published AWS penetration testing: A step-by-step guide at the @hackthebox_eu website: hackthebox.com/blog/aws-pent… #HTB #BugBounty #Y #Security #Cloud

AWS penetration testing: A step-by-step guide

Looking to learn AWS penetration testing? Here are essential AWS pentesting techniques and tools to help you get started!

hackthebox.com
4
2
247
Y-Security @YSecurity
7 Mar 2023
Have you enjoyed our last week review on @hackthebox_eu's BlackSky Cloud Hacking Labs for AWS? Our team member Thore shared his feedback and insights on the Cyclone: Microsoft Azure scenario at: y-security.de/news-en/hack-t… #Y #HackTheBox #Cloud #Azure #Cyclone #BugBounty

Hack The Box BlackSky Cloud Hacking Labs - Cyclone

In this post we present Cyclone, the BlackSky Cloud Hacking Lab scenario for Microsoft Azure by Hack The Box and our review of it.

y-security.de
4
377
Y-Security @YSecurity
28 Feb 2023
We recently collaborated with @hackthebox_eu and took the challenge of reviewing their BlackSky Cloud Hacking Labs. Read about @0xchrisb's feedback and insights into the Hailstorm scenario at y-security.de/news-en/hack-t… #Y #HackTheBox #Cloud #AWS #Hailstorm #BugBounty

Hack The Box BlackSky Cloud Hacking Labs - Hailstorm

Read more about our feedback on the Hack The Box BlackSky Cloud Hacking Labs scenario for Amazon Web Services aka Hailstorm.

y-security.de
1
3
569
Y-Security @YSecurity
24 Feb 2023
Y-Security will sponsor the German OWASP Day conference on the 30th and 31st of May 2023 in Frankfurt: y-security.de/news-en/german… The German OWASP Day is the leading independent/non-commercial conference in Germany on application security. Will you be there? #GOD #OWASP #Y

German OWASP Day 2023

The Y-Security will be at the German OWASP conference on the 30th and 31st of May 2023 in Frankfurt. Make sure to meet up with us in case you're around. It is a small and friendly conference and...

y-security.de
1
3
437
Load more