Codex Security: Open Client Feeds OpenAI
Codex Security CLI: open-source client code under Apache 2.0, scanning backend in limited beta against OpenAI infrastructure.
Author profile
Benedikt Langer
Benedikt Langer is an editor at SecurityToday. His focus areas are cloud security, zero trust and NIS2 compliance. He shapes the thematic direction and ensures editorial quality.
Articles by Benedikt Langer
102 articles 
CERT-Bund Revokes Zabbix Warning After 24 Hours
Zabbix Advisory with score 9.6: CERT-Bund withdrew the alert after 24 hours. What this means for tickets, CSAF status, and false alarm costs.
Windows Vulnerabilities: Patch Priority for Critical Assets
Risk-based Windows patch management: prioritize critical assets using CERT-Bund alerts, ring rollouts, and parallel detection.
Cyberattacks: The Biggest Waves Are Yet to Come
Cyberattacks on German businesses are becoming more targeted. Cyber resilience means prioritizing: closing API attack surfaces, managing patch windows, and testing recovery - without …
SASE Sees HTTPS to LLM – Not the Intent
AI agents handling MCP challenge classic SASE assumptions. Those filtering only domains miss the tool channel.
Shadow AI Often Emerges Due to Governance Itself
Shadow AI: 40% already avoided it because approvals are useless. Patricia Leppert (TeamViewer) in an interview on risks, fake AI, and CISO measures.
Vault Showdown: Bitwarden Business vs 1Password
Bitwarden Business vs 1Password: Hosting, SSO, SCIM and Recovery decide the Vault purchase in the midmarket.
NIS2 Patchwork: Four States Face EU Court
The EU Commission sues Ireland, Spain, France, and the Netherlands over incomplete NIS2 implementation. What this means for CISOs.
622 CVEs: Prioritize Over Panic Patching
Record Patch Tuesday with 622 CVEs. Prioritize AD FS and SharePoint first, then exposure, then breadth—this controls the change window.
BitLocker Bypass with Physical Access: CVE-2026-50661
CVE-2026-50661 bypasses BitLocker with physical access. CVSS 6.1, July patch, checklist for laptops, device pools, and lost-device procedures.
Nihon Kotsu: Dispatch Disrupted After Malware Attack
Nihon Kotsu reports malware on July 11, 2026. Dispatch systems offline, AiLock ransom claim filed July 15. Case study with key lessons for control …
An npm package that stole the private keys
Cybersecurity: A manipulated npm-SDK accessed private wallet keys and spread across 17 packages. Why every build is affected.
Weakest Supplier Opens Critical Facility
The KRITIS roof law makes supplier reliability a mandatory duty for operators. Governance roadmap to registration.
What Is ISO 27001? Definition, Certification, and Differences
ISO 27001 explained: what the standard requires, what certification truly means, and how it compares to BSI IT-Grundschutz and NIS2.
What Is a Penetration Test? Definition and Key Differences
Penetration testing explained: what a simulated attack achieves, how it works, and how it differs from vulnerability scans and red teaming.
What Is Phishing? Definition, Types, and Protection
Phishing explained: how attacks work, from spear-phishing to quishing, and why passkeys offer the best protection.
What Is a SOC? Definition, Roles, and Operating Models
Security Operations Center explained: what a SOC does, key roles, and why MDR is often a more realistic choice for mid-sized businesses.
What Is Ransomware? Definition, Process, and Protection
Ransomware explained: how attacks unfold, what double extortion means, and five key BSI-recommended protection measures.
What Is MDR? Definition, Differentiation, and Selection
MDR explained: what Managed Detection and Response offers, how it differs from MSSP and in-house SOC, and key selection factors.
What Is the CRA? Obligations for Digital Products
Cyber Resilience Act explained: which products it covers, what manufacturers must report by September 2026, and how it differs from NIS2.
The AI Act Is Actually a Security Law
The AI Act is viewed by many as an ethics and compliance topic, a question of transparency and discrimination. For security teams, it is …
