OT Security: 119 Ransomware Groups Target Industrial Facilities
119 active ransomware groups are now specifically targeting industrial facilities – 49 percent more than last year. Dragos has identified three new threat actor …
Author profile
Benedikt Langer
Benedikt Langer is an editor at SecurityToday. His focus areas are cloud security, zero trust and NIS2 compliance. He shapes the thematic direction and ensures editorial quality.
Articles by Benedikt Langer
102 articles 
Hardening Active Directory: 5 Key Steps Against Identity Attacks
⏱ 9 min read A compromised Active Directory usually means total disaster. Attackers move laterally through the network, escalate privileges, and encrypt the entire …
RMM Gateway: Security Checklist for ConnectWise, Kaseya & Others
RMM tools (Remote Monitoring and Management) have privileged access to all managed endpoints by design. This very feature makes them the preferred gateway for …
SAP Patch Day March 2026: Critical NetWeaver Flaw CVSS 9.1
SAP patched a critical vulnerability in its NetWeaver Enterprise Portal on March 10, 2026, with a CVSS score of 9.1. CVE-2026-27685 enables arbitrary code …
Cloud Misconfigurations: Top 10 Security Gaps in AWS and Azure
According to the Cloud Security Alliance, misconfigurations have ranked as the number one cloud threat for the second year in a row. IBM reports …
Supply Chain Security: From Compliance Burden to Competitive Edge
In March 2024, a Microsoft engineer stumbled upon a backdoor in XZ Utils - a library embedded in virtually every Linux distribution. The attacker …
XDR vs. SIEM: Which Platform Fits Your Security Stack?
⏱ 8 Min. reading time SIEM was the central platform in every Security Operations Center for two decades. Now, XDR (Extended Detection and Response) …
Security Operations Center as a Service: Why SOCaaS Makes Sense for SMEs
Having your own Security Operations Center is unrealistic for most SMEs: 24/7 operation, at least 8-12 analysts, SIEM infrastructure, and threat intelligence - this …
2024 Cybersecurity Highlights
This year, companies faced significant cyber threats. synaforce reviews the key cybersecurity events of 2024.
NIS2 in Germany: Act Now Before It’s Too Late
NIS2 Compliance: Don't Miss the Deadlines! Take Action Now to Avoid Penalties and Strengthen Your IT Security.
NIS2 and Supply Chain Security: How Supply Chains Become Compliance Risks
NIS2 explicitly obliges companies for the first time to secure their supply chains. This means: risk assessment for all critical suppliers, contractual security requirements, …
Password Security 2024: Passkeys, MFA, and the End of the Classic Password
Over 80% of all data breaches start with compromised credentials (Verizon DBIR 2024). Passwords are structurally insecure: they are reused, stolen, guessed, and phished. …
MOVEit Attack 2023: What the Largest Supply-Chain Hack of the Year Teaches Us
In May and June 2023, the Russian-speaking hacker group Clop exploited a zero-day vulnerability in MOVEit Transfer, stealing data from an estimated 2,500+ organizations …
Third Party Risk Management: Risks Lurk Everywhere
Thomas Neuwert, neto consulting Awareness of information security, IT security, and data security is growing amid increasing IT attacks. That’s good news. However, guest …
Zero Trust Network Access: VPN Successor or Hype?
VPNs were the standard for secure remote access for 20 years. However, VPNs trust the entire network once the connection is established - a …
The Top 30 Cybersecurity Threat Scenarios
The threat landscape for cybersecurity, now crucial success factors for organizations and companies, is growing day by day. Once the IT infrastructure is compromised, …
How Machine Learning is Used in IT Security
Machine Learning is said to revolutionize the economy. In the field of IT security, new challenges will arise on the one hand, and new …
The 2021 Kaseya Attack: Why Supply Chain Security Now Demands Top Priority
The REvil attack on Kaseya VSA in July 2021 simultaneously hit over 1,500 companies - via a single vulnerability in an IT management software …
