Case Study: How an Energy Supplier Contained a Ransomware Attack in 4 Hours
A regional energy supplier became the target of a ransomware attack. Thanks to prepared network segmentation and a tested incident response plan, the spread …
Author profile
Tobias Massow
Tobias Massow is Managing Director of Evernine Media GmbH and publisher of SecurityToday. He oversees the strategic direction of the magazine and the entire MBF Media network.
Articles by Tobias Massow
188 articles 
Cybersecurity Regulation in Europe: NIS2, DORA, CRA, and AI Act Overview
The EU has enacted more cybersecurity regulations in the past three years than in the previous twenty. NIS2, DORA, the Cyber Resilience Act, and …
AI-Powered SOC: How Automated Security Operations Address the Skills Gap
The cybersecurity skills gap is worsening: 137,000 unfilled IT security positions in Germany. AI-powered Security Operations Centers promise relief. But how much automation makes …
Bitcoin and Cryptography: Why the Blockchain is a Masterpiece of IT Security
Bitcoin is not just a means of payment - it is a living proof of how elegantly cryptography can solve real security problems. After …
Cloud Misconfigurations: The Most Common Breach Cause That No One Fixes
Gartner predicts: By 2025, 99 percent of all cloud security failures will be caused by the customer - not the provider. Open S3 buckets, …
Implementing NIS2 in 5 Steps: A Practical Guide for SMEs
NIS2 may seem complex, but it can be broken down into five structured steps. This guide is aimed at IT managers and CISOs in …
Prompt Injection in Enterprise AI: Why RAG Systems Are Particularly Vulnerable
RAG systems are the standard approach to connecting LLMs with enterprise data. However, this very connection opens the door to indirect prompt injections - …
API Security: The Underestimated Attack Surface of Modern Enterprises
APIs are the backbone of modern software architectures -- and at the same time, the fastest-growing attack vector. By 2024, 40 percent of all …
NIS2 and Executive Liability: What Board Members Risk Personally
NIS2 makes cybersecurity a top priority - literally. Executives and board members can be held personally liable if security measures are inadequate. Delegating to …
Why Cyber Insurance Will Become Stricter in 2024 – and What Companies Need to Do
The market for cyber insurance has changed radically: premiums have increased, exclusion clauses have grown, and the requirements for policyholders have become stricter. Those …
Understanding Pentest Reports: A Guide for Executives and IT Managers
The penetration test report lands on the desk - 80 pages, full of CVSS scores, screenshots, and technical jargon. For IT managers and executives, …
DSFA: How Schools Properly Document the Consequences of Data Processing
Data Protection Impact Assessment (DSFA) is a somewhat cumbersome term. However, what the GDPR essentially describes is sensible and necessary: it is about assessing …
WithSecure Elements in Practice: Endpoint Protection for SMEs
We tested WithSecure Elements for three months in a mid-sized IT environment with 180 endpoints. The result: fast deployment, strong EDR functions - but …
The Dark Side of the Boom – The Rise of Fraud in E-Commerce
Fraud against consumers is rapidly increasing in Germany. 36% of online shoppers are affected, according to the results of a comprehensive new study "The …
KRITIS-Umbrella Act: What Operators of Critical Infrastructures Can Expect Besides NIS2
While the security world focuses on NIS2, the Federal Ministry of the Interior is simultaneously working on the KRITIS-Umbrella Act - the physical counterpart …
The 7 Most Common Mistakes in Zero-Trust Implementation
Zero Trust is not a product you buy, but a strategy you implement. Many companies fail not because of the technology, but because of …
Ransomware 2024: New Tactics, Bigger Targets, Tougher Negotiations
Ransomware in 2024 is no longer just a simple encryption attack. Leading groups - LockBit, ALPHV/BlackCat, Cl0p - operate like businesses: with HR departments, …
NIS2 Implementation: A Practical Guide for German SMEs
The NIS2 Directive expands cybersecurity obligations to over 30,000 German companies. While large corporations have long established compliance teams, SMEs face a triple challenge: …
Deepfake Fraud in Companies: When the CEO on the Phone Isn’t the CEO
In February 2024, a financial officer in Hong Kong transferred $25 million - after a video call with the supposed CFO. All participants in …
NIS2 Directive: What German Companies Need to Know Now
The NIS2 Directive significantly expands the scope of regulated companies: Instead of around 4,000, over 30,000 organizations in Germany will be affected. Those who …
The First 48 Hours Are Crucial – A CISO on the Real Deal
In an interview, a CISO of a German mid-sized company discusses a real ransomware attack and the first 48 hours that followed. His most …
