Cybersecurity Budgets 2024: Where CISOs Are Investing – and Where They Are Cutting Back
Security budgets are increasing by an average of 14 percent in 2024 - but not uniformly. CISOs are shifting funds from traditional perimeter security …
Author profile
Tobias Massow
Tobias Massow is Managing Director of Evernine Media GmbH and publisher of SecurityToday. He oversees the strategic direction of the magazine and the entire MBF Media network.
Articles by Tobias Massow
188 articles 
Zero Trust Programs Rapidly Gain Traction
Zero Trust is taking root in the corporate world and gaining increasing importance: New insights from Okta on preferred measures across various industries. TL;DR …
How AI is Revolutionizing Security Operations: From Alert Flood to Prioritized Incidents
An average SOC processes 11,000 alerts per day. Human analysts can review perhaps 20 percent of these. The rest are ignored - and hidden …
THOR by Nextron Systems: Compromise Assessment Without Agent
THOR by Nextron Systems is a portable forensic scanner for compromise assessments. Over 30,000 YARA rules check systems for APT traces without an agent …
How Attackers Bypass MFA: Adversary-in-the-Middle, MFA-Fatigue, and Token Theft
Multi-Factor Authentication (MFA) was long considered the silver bullet against account compromise. But attackers have caught up: Adversary-in-the-Middle proxies intercept MFA tokens in real-time, …
Bitkom: Massive Damage from Organized Cyberattacks on the German Economy
Every second company sees itself existentially threatened by cybercrime. The annual damage to the German economy amounts to 200 billion euros. Most attacks originate …
Sharp Increase in AI-Generated Spam Emails
The two 1&1 subsidiaries GMX and WEB.DE registered around 1.5 billion emails per week as spam or phishing in the first eight months of …
Amazon Warns of Renewed Fraud Risks
Phishing remains one of the most prominent dangers in the cyber realm, especially when it involves impersonating well-known companies and reaching a large number …
NIS2: All Details and Background Information on the New EU Cybersecurity Directive
EU Agrees on New Cybersecurity Directive: What NIS2 Means for Companies There is a new EU directive that deals with the harmonization of EU-wide …
Dangers for Companies – How Cybercriminals Exploit ChatGPT
Dangers for Companies - How Cybercriminals Exploit ChatGPT AI applications are used by many Germans. Companies also deploy them to quickly generate codes using …
Security by Design in Software Development: Why Post-Facto Patching Isn’t Enough
The cost of fixing a vulnerability increases exponentially with each phase of the development cycle. What costs 100 Euros in the design phase costs …
How to Prevent Cyberattacks on Critical Infrastructures
The recent DDoS attacks (Distributed Denial of Service, a cyberattack through flooding with malicious traffic) on German airports, state authorities, and the police in …
Multi-Carrier Access as a Guarantee Against System Failure
Companies with nationwide branches in Germany need secure IT structures - and reliable redundancy systems when the internet connection falters and stutters. So-called multi-carrier …
Backup Alone Isn’t Enough: Why Immutable Backups Are the New Standard
Ransomware groups specifically target backups - and in 94 percent of cases, they try. 57 percent of backup compromise attempts are successful. If you …
Slack, Calendly & Co.: These Are the Most Popular Apps for Hybrid Work
When it comes to applications for hybrid work, as with the work models themselves, a lot is changing. This is also shown by the …
How a DDoS Attack Unfolds
Denial-of-Service attacks are becoming an increasingly popular tool for hackers to target websites and servers. But how does a DDoS attack work? For businesses, …
NIS2 Directive Adopted: What’s Ahead for Companies
The European Parliament has adopted the NIS2 Directive. It dramatically expands the scope of affected companies and tightens compliance obligations. Member states must transpose …
Incident Response Retainer: Why Companies Need an IR Contract Before the Crisis Hits
When a crisis strikes, there’s no time for contract negotiations. An Incident Response (IR) retainer guarantees response times, pre-agreed hourly rates, and access to …
Threat Intelligence for SMEs: Value Without Overwhelm
Threat Intelligence sounds like espionage - and that’s exactly what deters many SMEs. Yet its core idea is simple: knowing which attacks are targeting …
Protecting Customer Identities – Identity Theft Is Slowing Down Business Growth
Identity theft is one of the most common cybercrimes committed by criminals online. It affects not only individuals but also businesses - often with …
Why Identity Is the New Firewall – and Why IAM Strategies Still Fail
In a perimeterless world, identity is the last reliable control point. Yet reality tells a different story: Over 60 percent of all breaches begin …
