What Is DORA? Definition, Obligations, and Deadlines
Learn how DORA impacts the financial sector, key compliance requirements since January 2025, and how it differs from NIS2.
Author profile
Benedikt Langer
Benedikt Langer is an editor at SecurityToday. His focus areas are cloud security, zero trust and NIS2 compliance. He shapes the thematic direction and ensures editorial quality.
Articles by Benedikt Langer
102 articles 
Südwestfalen IT: The Lesson of Municipal IT
Two years after the Southwestphalia IT attack, Security Today dissects: VPN without MFA, rebuilding without ransom, and five lessons for municipal IT.
Vulnerability Triage: CVSS Alone Misguides Prioritization
CVSS alone misguides vulnerability prioritization. Exposure, exploit proximity, and asset criticality order the queue by reachable attack surface.
False Positives in SOC: Separating Signal from Noise
False-positive reduction in SOC: Detection engineering evaluates intent, telemetry, context, and escalation maturity before live deployment.
Five Line Items That Need Budget Before SIEM
Cybersecurity budget as risk financing: five key items a CISO should fund before investing in expensive tools-and how Section 30 of Germany’s BSIG…
WhatsApp in the Workplace: Which Messenger Will Replace It
Private WhatsApp use in companies is a compliance risk. Which criteria a business messenger must meet and which alternative truly works.
What Management Must Document Under NIS2
The BSI does not require a formal resolution, but verifiable implementation. Six documents that determine the evidence in the BSI audit.
GTIA Expands Its Cybersecurity Program for the DACH Channel
How IT providers in the DACH channel share threat insights and strengthen cyber resilience through GTIA ISAO.
Five Metrics the Supervisory Board Actually Understands
Which five key metrics a CISO should report to the supervisory board and why blocked attacks reveal little about the cyber risk situation.
Mini Shai-Hulud: npm worm devours the supply chain
Mini Shai-Hulud spreads itself via npm and PyPI: How the supply-chain worm steals tokens and what security teams need to secure now.
Part-Time CISO: What Can Be Outsourced and What Must Stay In-House
A virtual CISO takes over the security expertise in medium-sized businesses. However, certain responsibilities under Paragraph 38 of the BSIG (Federal…
KRITIS-Dachgesetz: When Resilience Becomes a CISO’s Mandatory Duty
The KRITIS umbrella law has been in effect since March 2026 and makes physical resilience mandatory.
Why an ISO Certificate Alone Is Not Enough for the BSI
ISO 27001 is often considered proof of compliance with NIS2. However, the BSI takes a different view.
Oracle PeopleSoft: actively exploited vulnerability, CISA warns
A critical Oracle PeopleSoft vulnerability (CVE-2026-35273) has reportedly been exploited in ransomware attacks, according to CISA.
SearchLeak: How a Link Turned Microsoft 365 Copilot into a Data Leak
SearchLeak turned Microsoft 365 Copilot into a data leak via a link. What parameter injection teaches about Copilot governance and AI security.
DSGVO cease-and-desist letter from competitor: what counts following the BGH ruling
Competitors are allowed to issue cease-and-desist letters for data protection violations.
Deepfake CEO Fraud: How Executives Can Fend Off Voice Cloning
Cybersecurity against deepfakes: Just a few seconds of audio can be enough to clone a voice. What playbook protects executives from CEO fraud.
The vulnerability that only AI has found
Rethinking cybersecurity: AI models find vulnerabilities that humans couldn't see. The same strength that defends and attacks - the dual-use dilemma.
Apple’s Password App Now Automatically Changes Passwords
Apple's password app now proactively changes weak passwords. Why this hardens hygiene and simultaneously opens up a new attack surface.
When the Backup Server Itself Becomes the Vulnerability
Veeam Security Update: Two high-severity vulnerabilities affect Veeam Agent for Windows and the Linux Appliance. What admins need to patch now.
The Divided Kernel is the Vulnerability: Why Copy Fail Escapes the Container
Sharing the host kernel: Why the "Copy Fail" gap breaks out of the container and which layers truly protect against kernel errors.
