Blog

IT Security

10 Things you shouldn’t do

…when you’re online!

In everyday digital life, small mistakes constantly creep in, often without us even noticing them. One wrong click here, a weak password there, and suddenly it happens. An account gets hacked, private (possibly even embarrassing) photos disappear and/or are published, and in the worst-case scenario, your bank account is emptied as well.

The good news is that data loss is often not caused by a technical problem at all, but rather by poor habits that can be changed quite easily!

Not everyone is a cybersecurity expert, in fact, only a small minority of people who use the internet are. This makes it all the more important to recognize common risks yourself instead of leaving the responsibility solely to the professionals.

Read More »
IT Security

One String to Rule Them All!

Why Using One Password Everywhere Is Dangerous – and How to Do It Safely with a Password Manager

Most people effectively use just one password or slight variations of it. A capital letter here, a number there, and at some point it starts to feel “secure enough”. It’s convenient and easy to remember, which is exactly why so many people do it. But is it safe?

In 2026 a password is no longer just a simple login credential. It is often the key to your entire digital life. Email, social media, cloud storage, online shopping and even banking are all tied to it in one way or another. If that one password gets exposed, it is rarely just a single account that is affected. In most cases it is everything at once. That is also why password reuse is still one of the most common and at the same time most underestimated security problems today.

(A string is a sequence of characters made up of letters, numbers, and special characters, e.g. a password)

Read More »
TransformationCamp26
Conference

Join us at TransformationCamp 2026!

On April 16 and 17, 2026, our co-founder Martin will be attending the TransformationCamp 2026 – Bold Moves Only Un-Conference. We are excited to be part of an event that brings together fresh ideas, open discussions, and people who are ready to challenge the status quo.

We would like to extend a big thank you to Wirtschaftsagentur Wien. We applied for both an exhibitor spot and a pitch slot and are very grateful to have been selected for both. This opportunity means a lot to us and we truly appreciate the support.

Read More »
IT Security

Can AI Replace Traditional Penetration Testing?

Over the past year, a growing number of tools have emerged promising “AI-driven” penetration testing, fully automated security assessments that claim to deliver results comparable to human testers, at a fraction of the cost and time.

For many organizations, the appeal is obvious:

  • Faster testing,
  • lower cost,
  • continuous coverage.

But this raises an important question, can AI driven tools replace traditional penetration testing?

To answer that, it’s worth understanding what a penetration test actually is, and what isn’t.

Read More »
IT Security

SME Security & Compliance Guild — Launch Event (Vienna)

Secure early, scale smoothly 

Join us for the first public event of the SME Security & Compliance Guild, a free after-work meetup in Vienna for startups and SMEs that want to strengthen cybersecurity, improve resilience, and approach compliance in a practical way. 

Over the past year, we have hosted similar sessions in smaller, closed circles. Since the response has been so positive, we are now opening the format to a wider community. 

We will meet at the OSM Solutions office in Vienna for an evening of expert insights, discussion, and networking.

Read More »
Compliance

Key Lessons from Prague: Securing the Modern Stack

At the Prague panel discussion on “Securing the Stack: Cybersecurity, Cloud and Platform Integrity,” one message stood out clearly:

security is no longer an add-on — it is the foundation of modern platforms.

As cloud environments grow more complex, risks increasingly stem from misconfiguration, fragmented ownership, and speed-driven deployment. Ultimately, platform integrity has become business integrity, and even the strongest technology depends on people, processes, and accountability to truly succeed.

Read More »
Podcast

December Cybersecurity Meetup virtual panel

One of our founders, Martin Stöfler, took part in the December Cybersecurity Meetup virtual panel hosted by HIPTHER and moderated by Zoltán Tűndik. The session brought together industry leaders to reflect on the evolving threat landscape at year end and to share forward-looking perspectives as organizations prepare for 2026.

Read More »
Conference

iGaming Warsaw Summit – “𝐆𝐚𝐦𝐞 𝐎𝐯𝐞𝐫? 𝐍𝐨𝐭 𝐈𝐟 𝐘𝐨𝐮’𝐫𝐞 𝐒𝐞𝐜𝐮𝐫𝐞: 𝐂𝐲𝐛𝐞𝐫 𝐑𝐞𝐬𝐢𝐥𝐢𝐞𝐧𝐜𝐞 𝐢𝐧 𝐢𝐆𝐚𝐦𝐢𝐧𝐠”

One of our founders, Martin Stöfler, took part in the panel discussion “Game Over? Not If You’re Secure: Cyber Resilience in iGaming”, where industry experts examined how iGaming operators and suppliers can strengthen their defenses against an increasingly sophisticated threat landscape. The session focused on practical resilience strategies for protecting platforms, player data, and business continuity in a highly regulated, high-risk sector.

Read More »
Services

Ready for Red Teaming?

Red teaming is often seen as the pinnacle of offensive security: A simulated, no-holds-barred attack that tests your organization’s detection and response capabilities in real-world conditions. But while it’s tempting to jump into red teaming for the prestige or thrill, the timing matters. Starting too early, or without the right foundations, can lead to wasted effort, misunderstood results, or even dangerous blind spots. It’s not just about breaking in, it’s about seeing how well your defenses hold up and whether your team knows how to respond. Without the right preparation, the real lessons can be missed.

So when is your organization actually ready for red teaming?

Read More »
Podcast

HIPTHER Talks – Interview with OSM-S Co-Founder Martin Stöfler

One of our founders, Martin Stöfler, sat down with Zoltan from Hipther to discuss the realities of cybersecurity and compliance in today’s threat landscape. In a wide-ranging conversation, they explored why security is no longer just a technical problem, how regulations like DORA are reshaping expectations, and what organizations can do to build resilience without overwhelming their teams.

Read More »

Get In Touch

If you are interested in our services or just want to talk about Information Security, Risk or Compliance, just contact us!

Get a Quote!