Zero Trust in Media Planning: Trust No One, Verify Everything
Verification is a fundamental principle of modern IT security. In media planning, this logic is often missing. Impressions, reach, and placements suggest activity but …
Author profile
Tobias Massow
Tobias Massow is Managing Director of Evernine Media GmbH and publisher of SecurityToday. He oversees the strategic direction of the magazine and the entire MBF Media network.
Articles by Tobias Massow
188 articles 
Pharma Co: Zero-Day Attack Blocked by Threat Intelligence
A German pharmaceutical company with 4,500 employees was targeted in 2026 by a zero-day exploit against its research database. Thanks to proactive threat intelligence …
Software Supply Chain Security: Why SBOMs Will Be…
⏱ 8 min Reading Time SolarWinds, Log4Shell, 3CX - the list of successful software supply chain attacks grows longer each year. Sonatype reports a …
Incident Response Made in Germany: BSI & Company Collaboration
119 new vulnerabilities per day. 461 data leaks related to Germany in twelve months. 80 percent of ransomware attacks target small and medium-sized enterprises. …
Cybersecurity Trends 2026: Top 7 Developments for Companies
Cybersecurity in 2026 will be shaped by seven megatrends: AI on both sides of the attack-defense spectrum, the post-quantum migration begins to get serious, …
Major Retail Chain Halts Ransomware Attack in Under 2 Hours
A large German retail chain with 800 stores became the target of a ransomware attack in early 2026. Thanks to prepared incident response processes …
Bug Bounty vs. Penetration Testing: Which Fits Your Company
Penetration testing and bug bounty programs share the same goal - finding vulnerabilities before attackers do. However, the models differ fundamentally: time-limited vs. continuous, …
Zero Trust as a Location Factor: Secure Networks Draw Investors
Only 19 percent of German companies have fully implemented Zero Trust. Globally, the figure is 63 percent. Germany is lagging behind. But the catch-up …
Banning Ransomware Payments? The Most Dangerous Idea in Cyber Policy
Politicians worldwide are calling for a ban on ransomware ransom payments. The logic sounds compelling: If no one pays, the business model collapses. In …
Should We Abandon Passwords? Why the Passkey Hype Ignores Reality
Google, Apple, and Microsoft are promoting a "passwordless future" with passkeys. The promises sound good: more secure, simpler, and phishing-resistant. But reality is more …
Post-Quantum Cryptography: Why Companies Need to Act Now
Quantum computers capable of breaking current public-key encryption do not yet exist in sufficient strength. But the "Harvest Now, Decrypt Later" concept makes post-quantum …
Open Source is the World’s Biggest Security Risk – And We’re All Ignoring It
96 percent of all commercial software contains open-source components. Most are maintained by individual, unpaid developers. Log4j was just the beginning - the next …
Domain Hijacking: The Often Overlooked Threat to Businesses
Domain hijacking is an increasing security risk - yet few companies have it on their radar. Why abandoned domains can be dangerous - and …
OT Security in SMEs: Why Production is the Next Target
Ransomware groups have a new favorite target: production facilities. The logic is simple - shutting down manufacturing forces payment faster than data encryption. Yet, …
The CISO is a Scapegoat – Why the Role Must Be Fundamentally Reformed
When things go wrong, the CISO is fired. At SolarWinds, at Uber, at Capital One - after every major security incident, the same head …
DORA in Practice: First Experiences from the Financial Sector
DORA has been fully applicable since January 17, 2025. After the first few months, it is clear: The technical requirements for ICT risk management, …
Microsegmentation: Why Network Segmentation Alone Is No Longer Enough
Classic network segmentation divides the network into zones - DMZ, production, office. Within each zone, communication is free. Microsegmentation goes a step further: It …
AI Weapons Are in Use – And No One Is Controlling Them
Generative AI has democratized cybercrime. Real-time deepfake videos, perfectly crafted phishing emails in German, automated vulnerability scanning in minutes instead of weeks - the …
AI Weapons Are in Use – And No One Controls Them
AI weapons in action: How deepfakes and AI-powered attacks are revolutionizing cybersecurity. Who controls this threat?
Cryptography in Everyday Life: How Bitcoin Technology Inspires the Security Industry
The cryptographic methods behind Bitcoin are revolutionizing not only the financial system - they are increasingly finding application in enterprise security. From immutable audit …
Cybersecurity Industry: $200 Billion in Revenue, No Impact? Why Attacks Escalate Despite Rising Budgets
The global cybersecurity industry generates over $200 billion annually. Meanwhile, ransomware damages, data breaches, and successful attacks hit new records year after year. Something …
