On-Premise AI as a Security Strategy: Gemma 4 for Data Protection
Every request to a cloud AI service involves data transfer to a third party. With open-source models like Google's Gemma 4, AI can be …
Author profile
Tobias Massow
Tobias Massow is Managing Director of Evernine Media GmbH and publisher of SecurityToday. He oversees the strategic direction of the magazine and the entire MBF Media network.
Articles by Tobias Massow
188 articles 
Threat Intelligence for SMEs: Identify Threats Before They Strike
The global threat-intelligence market is set to reach US$8.2 bn by 2026 and surge past US$31 bn by 2034. But threat intelligence isn’t a …
Cyber Insurance: What Insurers Check and CISOs Must Prepare For
Over 40 percent of companies that report a cyber damage incident receive no payout. 72 percent of small and medium-sized enterprises are completely uninsured. …
Q1 2026: Germany’s Top 5 Cyber Incidents & Common Danger
A DDoS attack on Deutsche Bahn. An arson attack on Berlin’s power grid. Russian state hackers infiltrating the Signal contacts of a former BND …
EU Chat Control 2026: How Encryption Backdoors Harm Businesses
502 cryptographers warn, Signal threatens EU market exit, Bundesverfassungsgericht declares parts of source TKÜ invalid, and EU continues negotiations on chat control. The CSAR …
EU Chat Control: What Companies Need to Know Now
502 cryptographers warned that Signal threatened to exit the European market - and Germany’s Federal Constitutional Court struck down parts of “on-device” communications interception. …
Copilot Security Risk: When AI Assistant Leaks Corporate Secrets
Microsoft 365 Copilot has a zero-click vulnerability rated CVSS 9.3. The European Data Protection Supervisor has reprimanded the EU Commission for its use of …
Adaptive MFA 2026: How Risk-Based Authentication Replaces…
79 percent of business email compromise victims had implemented MFA correctly - and were still hacked. The reason: standard MFA is a one-time hurdle …
Patch Tuesday March 2026: 84 Fixes, First AI-Discovered…
Microsoft's March 2026 Patch Tuesday resolves 84 vulnerabilities, including 3 critical ones and 2 zero-days. But the real headline lies in CVE-2026-21536: a critical …
Identity Attacks 2026: Logging In
75 percent of all security incidents in 2026 are based on stolen identities, not technical exploits. 50 percent more compromised credentials in the second …
Security Operations Center: Made in Germany
The Deutsche Telekom's Master SOC in Bonn processes 95 million attack attempts per day. 250 cybersecurity experts work around the clock, networked with centers …
### How Much Does a SOC Cost in Germany?
Deutsche Telekom’s Master SOC in Bonn processes 95 million cyberattack attempts daily. 250 cybersecurity experts work around the clock, connected with centers across 13 …
API Security in the Enterprise: 5-Step Interface Strategy Guide
Your developers have just rolled out the latest API update, the product owner is celebrating the launch - and no one checked whether the …
DORA & NIS2: How Financial Firms Manage Compliance Double…
⏱ 14 min Reading Time DORA has been applicable since January 2025, NIS2 transposed into German law since December 2025. For financial service providers, …
KRITIS Act: What Critical Operators Must Do by July 2026
⏱ 12 Min. reading time With the decision of the Bundesrat on March 6, 2026, the KRITIS Umbrella Act has finally come into force. …
Zero-Trust Network Segmentation: Flat Networks as Security Risk
A compromised printer in accounting. Sounds harmless - until the attacker jumps from it to the domain controller via the flat network, then to …
Deepfake Scams: AI Voices and Videos Cost Millions
⏱ 7 min read In February 2024, a finance executive in Hong Kong transferred $25 million after a video call with what he believed …
Post-Quantum Cryptography: Germany Prepares
In August 2024, NIST published the first three finalized post-quantum cryptography standards. In November 2024, the BSI (Federal Office for Information Security) and 17 …
Agentic AI Security: When AI Agents Become the Attack Target
AI agents act autonomously: they call APIs, write to databases, send emails, and make decisions without human approval. According to Gartner, by the end …
Cybersecurity Trends 2026: Seven Key Developments
From AI-powered attacks and post-quantum cryptography to a wave of security regulations - these seven trends will define the cybersecurity landscape in 2026. For …
secIT by Heise 2026: Security Roadshow for Admins & IT Pros
secIT by Heise brings practical IT security directly to users. The roadshow series from Heise Media takes place in 2026 on several dates in …
