Endpoint Security – Why It’s So Critical for Businesses
Whether it’s a smartphone, laptop, or an entire network - every device and system connected to the internet faces constant risk of cyberattack. For …
Author profile
Tobias Massow
Tobias Massow is Managing Director of Evernine Media GmbH and publisher of SecurityToday. He oversees the strategic direction of the magazine and the entire MBF Media network.
Articles by Tobias Massow
188 articles 
Log4Shell Six Months Later: Why This Vulnerability Remains Dangerous
Six months after the discovery of Log4Shell (CVE-2021-44228), the vulnerability persists across millions of systems - and attackers continue exploiting it actively. Here’s why …
Cyber Forensics for Non-Technicians: What Happens After a Security Incident
After a cyberattack, forensics begins - and for most CEOs, things quickly become overwhelming. Exactly what do forensic investigators do? How long does it …
Software Supply Chain Security: How SBOMs Create the Transparency That’s Been Missing
SolarWinds, Log4Shell, MOVEit - every major supply chain attack of recent years could have been contained faster with a Software Bill of Materials (SBOM). …
Ransomware Attacks – What They Look Like from the Victim’s Perspective
Managed Threat Response is especially effective against ransomware attacks. With this tool, real-world cyberattack sequences can be observed in precise detail. From the victim’s …
Confidential Computing: Why Data Must Remain Encrypted Even During Processing
Today’s data is reliably encrypted - at rest and in transit. Yet during processing, it resides unencrypted in RAM. Confidential Computing closes this final …
Cyber War in Ukraine: How Companies Can Protect Themselves Against Spillover Attacks
Since Russia’s invasion of Ukraine in February 2022, the cyber threat landscape for European companies has intensified dramatically. Wiper malware, DDoS attacks, and targeted …
Why 90 Percent of Ransomware Victims Pay the Ransom – and Why That’s a Mistake
The numbers are clear: Most ransomware victims pay up. Yet studies show just as clearly that those who pay are more likely to be …
Cyber Resilience Over Perfection: Why 100% Security Is a Dangerous Illusion
No organization can prevent every attack. This isn’t defeatism - it’s the essential starting point for a realistic security strategy. Cyber resilience doesn’t chase …
Important Guidelines for Video Conferencing Systems & Data Protection
Remote work and home offices are here to stay. Yet this shift to working from home inevitably brings security and data protection risks. This …
Log4Shell: Why Vulnerability Management Must Be Rethought After the Largest Java Flaw
The Log4Shell vulnerability in Apache Log4j shook the entire IT world in December 2021. With a CVSS score of 10.0, it affected millions of …
Log4j: The Biggest IT Security Incident of the Decade
The Log4Shell vulnerability shook the IT world in December 2021. With a CVSS score of 10.0, it affects millions of applications worldwide - and …
Bitdefender Antivirus Review: AV-TEST 18/18 Points, Scam Copilot, and Product Comparison
Last updated: March 2026 | Originally published: 2021 Bitdefender has once again earned the top score of 18 out of 18 points in the …
Cybersecurity as a Competitive Advantage in Connected Vehicles
Vehicle connectivity is surging rapidly, driven by the rollout of 5G and other emerging technologies. It’s not just the vehicles themselves that are becoming …
The Kaseya Attack: Lessons from the Largest Ransomware Incident of 2021
The ransomware attack on Kaseya in July 2021 impacted over 1,500 companies worldwide - through a single software vulnerability. The incident reveals how vulnerable …
Multi-Cloud Security: A Unified Security Architecture for Hybrid Environments
On average, enterprises use 2.6 public cloud providers - but only 30 percent have a unified security strategy spanning all clouds. This fragmentation represents …
Colonial Pipeline: What German Companies Must Learn from the Largest Ransomware Attack
The May 2021 ransomware attack on Colonial Pipeline paralyzed the largest fuel pipeline in the United States and forced the company to pay $4.4 …
New Security Requirements for the Internet of Things
A German IoT security label based on the ETSI EN 303 645 standard could improve security across the Internet of Things - and boost …
How Decision-Makers Can Prevent Attacks on Mail Servers
According to the German Association of the Internet Industry (eco), decision-makers must urgently bolster their defenses against the rising tide of attacks targeting email …
Data Protection for Personnel Files: Retention Periods, Digital Payroll Records, and NIS2 Obligations
Last updated: March 2026 | Originally published: 2021 As of January 2027, digital payroll records become mandatory. At the same time, German data protection …
How Do WhatsApp’s New Regulations Align with Data Protection Requirements?
It’s not just data protection officers who view WhatsApp and similar services with skepticism. Fortunately, European-based alternative messaging platforms can help alleviate these concerns. …
