Bundeswehr Responsible Disclosure Program (VDPBw)

Today, on october 22, the German Armed Forces "Bundeswehr" officially launched the new Responsible Disclosure Program for reporting vulnerabilities and security vulnerabilities. Preparations have been underway for a few weeks now and can be clearly seen on the domain in the updates of the provided "Security.txt". Some of the links behind it do not work yet, because the program will be officially released today with an announcement of the German Armed Forces. An update of the current status can be seen on the twitter page of Kommando CIR of the Bundeswehr.

Bypassing using Exchange of Session Credentials

In recent weeks, a new application has been released at the sparkasse in germany. This is the "secure safe" for documents & data as a storage unit. The application was coordinated by the financial information department in development.

The application in online banking allows confidential documents to be stored securely and easily. Personal documents are stored securely. Online banking as a linked access gives you flexible access to all your own documents or data. There are currently various offers for online banking customers with suitable storage space at a relatively low price. Since we have some team members who also use the sparkasse application, we thought we would have a look at it.