Key Takeaways<\/h2>\n\n- 94 percent of companies fell victim to phishing attacks in 2024 (Keepnet Labs, 2025).<\/li>\n
- AI-generated phishing emails achieve a 54 percent click-through rate, compared to just 12 percent for manually crafted messages.<\/li>\n
- In March 2024, synaforce received BSI C5 certification for cloud services, specifically tailored for critical infrastructure customers.<\/li>\n
- The NIS2 Implementation Act has been legally binding in Germany since December 6, 2025. Registration with the BSI became mandatory starting January 2026.<\/li>\n
- A strategic partnership with TEHTRIS delivers an AI-powered XDR platform for MSPs and enterprises.<\/li>\n<\/ul>\n\n94 %<\/div>\nof companies were targeted by at least one phishing attack in 2024<\/div>\nSource: Keepnet Labs, Phishing Statistics 2025<\/div>\n<\/div>\n
What is Phishing simulations?<\/h2>\n
Phishing simulations is a concrete priority for companies in 2025 because it directly shapes scalable data center capacity, energy efficiency and compliance. This article uses synaforce as an example to show which requirements, figures and operational steps matter in practice.<\/p>\n
Why Does Phishing Remain Dangerous?<\/h2>\n
Obtaining access credentials through fake emails remains one of the most significant entry points for cybercriminals into German companies. In 2024, approximately 20 percent of all emails worldwide contained phishing or spam content. Between three and four billion phishing emails are sent daily. According to Bitkom<\/a>, the total damages caused by cyberattacks on German businesses-ranging from password theft to ransomware-amounted to 203 billion euros in 2022.<\/p>\nMuch like spam, phishing aims to defraud victims: deceptively authentic emails, messages, AI-generated calls, or websites trick recipients into disclosing user and account information.<\/p>\n
In the past, phishing emails could often be identified by awkward wording or errors in the subject line. However, that is no longer the case, especially since the advent of trainable AI models such as ChatGPT. According to recent analyses, AI-generated phishing emails<\/a> achieve a click-through rate of 54 percent, compared to just 12 percent for manually crafted ones. Moreover, detecting them via cryptic URLs has become increasingly difficult: who would notice .co for Colombia instead of .com, or the substitution of “r n” for “m” in “rnicrosoft.com”?<\/p>\nIt is precisely this ability to recognize such threats that employees must develop, emphasizes G\u00f6tz Blechschmidt, Managing Director of the IT security consultancy msecure<\/a>, a subsidiary of the synaforce Group.<\/p>\n\n“The threat landscape was already immense in 2024, and it is unlikely to improve in 2025. Our collective resilience will be crucial in addressing these ever-more complex dangers.”
\nAndreas Braidt, CEO of synaforce GmbH<\/cite>\n<\/p><\/blockquote>\nFrequently Asked Questions<\/h2>\n
Every question is locked. A tap unlocks the answer.<\/p>\n\nWhat makes phishing so dangerous today?<\/strong><\/summary>\nPhishing attacks are dangerous because they exploit human psychology to trick individuals into revealing sensitive information, such as login credentials. With the rise of AI-generated phishing emails, these attacks have become more convincing and harder to detect, making them an even greater risk for organizations.<\/p>\n<\/details>\n\nHow can companies protect themselves against phishing?<\/strong><\/summary>\nCompanies can protect themselves by implementing multi-layered security measures, including employee training on recognizing phishing attempts, deploying advanced email filtering systems, and regularly updating cybersecurity protocols. Additionally, fostering a culture of vigilance and continuous learning is essential to mitigate risks.<\/p>\n<\/details>\n\nWhat role does AI play in modern phishing attacks?<\/strong><\/summary>\nAI plays a significant role in modern phishing attacks by enabling the creation of highly realistic and personalized phishing emails. These AI-generated messages are designed to bypass traditional detection methods, increasing their success rate and posing a serious challenge to cybersecurity defenses.<\/p>\n<\/details>\n\nHow do phishing attacks impact businesses financially?<\/strong><\/summary>\nPhishing attacks can lead to substantial financial losses for businesses, including direct costs such as ransom payments, indirect costs related to system downtime, and long-term damage to reputation. In Germany alone, cyberattacks resulted in 203 billion euros in damages in 2022, highlighting the severe economic consequences of these threats.<\/p>\n<\/details>\n
Effectively Complement Traditional Training<\/h2>\n
The goal of data protection training, such as that offered by msecure, is to raise employees\u2019 awareness about handling emails with caution. Participants learn what to look out for and which links they should never click. However, given the sheer volume of information employees are bombarded with in their daily work, traditional training measures often have only a short-term impact.<\/p>\n
msecure therefore relies on simulating real phishing scenarios during regular business operations. Instead of theoretical lectures, employees experience realistic attacks within their own work environment. Anyone who clicks on a simulated phishing email immediately receives an explanation of how they could have recognized the forgery. This practice-oriented training promises more direct and lasting awareness than conventional training formats.<\/p>\n
synaforce 2024: Setting New Standards in IT Security<\/h2>\n
In 2024, synaforce took decisive steps to strengthen its position as a provider of advanced IT security solutions<\/a>. A central milestone was achieving C5 certification from the BSI (Federal Office for Information Security) in March 2024. This certification confirms that synaforce\u2019s cloud services meet the highest security standards and are specifically suitable for customers in critical infrastructure sectors (KRITIS).<\/p>\nFurthermore, synaforce strategically prepared for the implementation of the NIS2 Directive<\/a>. The company\u2019s existing certification base, which includes ISO\/IEC 27001, ISAE 3402, and EN 50600, was further strengthened by the C5 certification. Since December 6, 2025, the NIS2 Implementation Act has been binding in Germany. As of January 2026, affected entities are required to register with the BSI.<\/p>\n![\"Modern](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2024\/12\/tobias_lehner-250x167.jpeg\")
Tobias Lehner, CTO of synaforce GmbH. Image source: synaforce GmbH.<\/p><\/div>\n
\u201cWe are proud of what we achieved in 2024. However, the current threat landscape demonstrates how crucial it is to consistently expand our capabilities. 2025 will be another year of progress for us, during which we will further intensify our commitment to cybersecurity,\u201d says Tobias Lehner, CTO of synaforce.<\/p>\n
Strategic Partnership with TEHTRIS<\/h2>\n
Another highlight was the strategic partnership with TEHTRIS. Together, both companies present the TEHTRIS XDR AI PLATFORM, an AI-powered security solution. It monitors all endpoints, networks, and cloud services in real time and centrally manages all security measures through a dashboard. Companies benefit from comprehensive protection, compliance security, and the modularity of the solution. Managed Service Providers can increase the efficiency of their security measures and expand their portfolio with proactive Managed Detection and Response (MDR) without having to invest in expensive infrastructures themselves.<\/p>\n
What awaits companies in 2025 and 2026<\/h2>\n
The IT security landscape presents growing challenges for companies. Cybercriminals are increasingly using deepfake technologies to bypass voice recognition systems in verification processes. Identity attacks<\/a> are becoming the preferred method: instead of hacking systems, attackers simply log in.<\/p>\nIn addition, Advanced Persistent Threats (APTs) are increasingly returning to the spotlight. These are characterized by their longevity and precision, allowing attackers long-term access to valuable information. The targets are increasingly KRITIS companies, which are additionally exposed due to the growing OT attack surface<\/a>.<\/p>\n![\"Modern](\"https:\/\/www.securitytoday.de\/wp-content\/uploads\/2024\/12\/andreas-braidt-250x167.png\")
Andreas Braidt, CEO of synaforce GmbH. Photo source: synaforce GmbH.<\/p><\/div>\n
“The implementation of the NIS2 Directive plays a crucial role. synaforce actively supports companies with comprehensive consulting as well as the planning and implementation of targeted measures to minimize cyber risks and establish sustainable security strategies,” says Andreas Braidt, CEO of synaforce.<\/p>\n
<\/div>\nFurther Reading<\/h2>\n\n- AI-Generated Phishing: Why 82 Percent of Attack Emails Now Come from Machines<\/a><\/li>\n
- Identity Attacks 2026: Why Hackers No Longer Break In-They Just Log In<\/a><\/li>\n
- OT Security 2026: 119 Ransomware Groups Target Industrial Facilities with Precision<\/a><\/li>\n<\/ul>\n
More from the MBF Media Network<\/p>\n
MyBusinessFuture<\/span>Cybersecurity Boom: Why NIS2 Is Driving Growth in Germany\u2019s Security Industry<\/span><\/a>cloudmagazin<\/span>Cybersecurity 2024: synaforce Looks Back<\/span><\/a><\/div>\nMore on this synaforce topic<\/h2>\n
Additional service details, use cases and background are available from synaforce for data center and infrastructure services<\/a>.<\/p>\n\n- Sustainable Data Center Performance with Synaforce<\/a><\/li>\n
- synaforce Expands Portfolio with Herbst Acquisition<\/a><\/li>\n
- DORA: IT and Legal Security for Finance<\/a><\/li>\n<\/ul>\n<\/div>\n","protected":false},"excerpt":{"rendered":"Phishing causes billions in damages annually. In 2024, 94 percent of all companies fell victim to at least one attack. msecure, a subsidiary of the synaforce group, relies on simulating real-world scenarios in live operations rather than theoretical training.","protected":false},"author":53,"featured_media":12394,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_yoast_wpseo_focuskw":"phishing simulations","_yoast_wpseo_title":"Phishing Simulations: Better Than Theory","_yoast_wpseo_metadesc":"See how realistic phishing simulations improve employee awareness and reduce breach risks\u2014backed by real-world results from 2024 security programs.","_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_meta-robots-adv":"","_yoast_wpseo_canonical":"","_yoast_wpseo_opengraph-title":"","_yoast_wpseo_opengraph-description":"","_yoast_wpseo_opengraph-image":"","_yoast_wpseo_opengraph-image-id":0,"_yoast_wpseo_twitter-title":"","_yoast_wpseo_twitter-description":"","_yoast_wpseo_twitter-image":"","_yoast_wpseo_twitter-image-id":0,"_evm_slot_owner":"","evm_cvss":0,"evm_risk":0,"evm_casefile":"","evm_primary_cve":"","evm_external_preview_token":"","evm_external_preview_expires":"","_evm_translation_lang":"","featured_post":0,"featured_post_sortierung":0,"_wp_old_slug":[],"footnotes":""},"categories":[255],"tags":[],"class_list":["post-12220","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-praxis-umsetzung-en"],"evm_reading_time_minutes":8,"wpml_language":"en","wpml_translation_of":3366,"_links":{"self":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/12220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/users\/53"}],"replies":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/comments?post=12220"}],"version-history":[{"count":5,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/12220\/revisions"}],"predecessor-version":[{"id":19793,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/posts\/12220\/revisions\/19793"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/media\/12394"}],"wp:attachment":[{"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/media?parent=12220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/categories?post=12220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.securitytoday.de\/en\/wp-json\/wp\/v2\/tags?post=12220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
What is Phishing simulations?<\/h2>\n
Phishing simulations is a concrete priority for companies in 2025 because it directly shapes scalable data center capacity, energy efficiency and compliance. This article uses synaforce as an example to show which requirements, figures and operational steps matter in practice.<\/p>\n
Why Does Phishing Remain Dangerous?<\/h2>\n
Obtaining access credentials through fake emails remains one of the most significant entry points for cybercriminals into German companies. In 2024, approximately 20 percent of all emails worldwide contained phishing or spam content. Between three and four billion phishing emails are sent daily. According to Bitkom<\/a>, the total damages caused by cyberattacks on German businesses-ranging from password theft to ransomware-amounted to 203 billion euros in 2022.<\/p>\n Much like spam, phishing aims to defraud victims: deceptively authentic emails, messages, AI-generated calls, or websites trick recipients into disclosing user and account information.<\/p>\n In the past, phishing emails could often be identified by awkward wording or errors in the subject line. However, that is no longer the case, especially since the advent of trainable AI models such as ChatGPT. According to recent analyses, AI-generated phishing emails<\/a> achieve a click-through rate of 54 percent, compared to just 12 percent for manually crafted ones. Moreover, detecting them via cryptic URLs has become increasingly difficult: who would notice .co for Colombia instead of .com, or the substitution of “r n” for “m” in “rnicrosoft.com”?<\/p>\n It is precisely this ability to recognize such threats that employees must develop, emphasizes G\u00f6tz Blechschmidt, Managing Director of the IT security consultancy msecure<\/a>, a subsidiary of the synaforce Group.<\/p>\n \n“The threat landscape was already immense in 2024, and it is unlikely to improve in 2025. Our collective resilience will be crucial in addressing these ever-more complex dangers.” Every question is locked. A tap unlocks the answer.<\/p>\n Phishing attacks are dangerous because they exploit human psychology to trick individuals into revealing sensitive information, such as login credentials. With the rise of AI-generated phishing emails, these attacks have become more convincing and harder to detect, making them an even greater risk for organizations.<\/p>\n<\/details>\n Companies can protect themselves by implementing multi-layered security measures, including employee training on recognizing phishing attempts, deploying advanced email filtering systems, and regularly updating cybersecurity protocols. Additionally, fostering a culture of vigilance and continuous learning is essential to mitigate risks.<\/p>\n<\/details>\n AI plays a significant role in modern phishing attacks by enabling the creation of highly realistic and personalized phishing emails. These AI-generated messages are designed to bypass traditional detection methods, increasing their success rate and posing a serious challenge to cybersecurity defenses.<\/p>\n<\/details>\n Phishing attacks can lead to substantial financial losses for businesses, including direct costs such as ransom payments, indirect costs related to system downtime, and long-term damage to reputation. In Germany alone, cyberattacks resulted in 203 billion euros in damages in 2022, highlighting the severe economic consequences of these threats.<\/p>\n<\/details>\n The goal of data protection training, such as that offered by msecure, is to raise employees\u2019 awareness about handling emails with caution. Participants learn what to look out for and which links they should never click. However, given the sheer volume of information employees are bombarded with in their daily work, traditional training measures often have only a short-term impact.<\/p>\n msecure therefore relies on simulating real phishing scenarios during regular business operations. Instead of theoretical lectures, employees experience realistic attacks within their own work environment. Anyone who clicks on a simulated phishing email immediately receives an explanation of how they could have recognized the forgery. This practice-oriented training promises more direct and lasting awareness than conventional training formats.<\/p>\n In 2024, synaforce took decisive steps to strengthen its position as a provider of advanced IT security solutions<\/a>. A central milestone was achieving C5 certification from the BSI (Federal Office for Information Security) in March 2024. This certification confirms that synaforce\u2019s cloud services meet the highest security standards and are specifically suitable for customers in critical infrastructure sectors (KRITIS).<\/p>\n Furthermore, synaforce strategically prepared for the implementation of the NIS2 Directive<\/a>. The company\u2019s existing certification base, which includes ISO\/IEC 27001, ISAE 3402, and EN 50600, was further strengthened by the C5 certification. Since December 6, 2025, the NIS2 Implementation Act has been binding in Germany. As of January 2026, affected entities are required to register with the BSI.<\/p>\n Tobias Lehner, CTO of synaforce GmbH. Image source: synaforce GmbH.<\/p><\/div>\n \u201cWe are proud of what we achieved in 2024. However, the current threat landscape demonstrates how crucial it is to consistently expand our capabilities. 2025 will be another year of progress for us, during which we will further intensify our commitment to cybersecurity,\u201d says Tobias Lehner, CTO of synaforce.<\/p>\n Another highlight was the strategic partnership with TEHTRIS. Together, both companies present the TEHTRIS XDR AI PLATFORM, an AI-powered security solution. It monitors all endpoints, networks, and cloud services in real time and centrally manages all security measures through a dashboard. Companies benefit from comprehensive protection, compliance security, and the modularity of the solution. Managed Service Providers can increase the efficiency of their security measures and expand their portfolio with proactive Managed Detection and Response (MDR) without having to invest in expensive infrastructures themselves.<\/p>\n The IT security landscape presents growing challenges for companies. Cybercriminals are increasingly using deepfake technologies to bypass voice recognition systems in verification processes. Identity attacks<\/a> are becoming the preferred method: instead of hacking systems, attackers simply log in.<\/p>\n In addition, Advanced Persistent Threats (APTs) are increasingly returning to the spotlight. These are characterized by their longevity and precision, allowing attackers long-term access to valuable information. The targets are increasingly KRITIS companies, which are additionally exposed due to the growing OT attack surface<\/a>.<\/p>\n Andreas Braidt, CEO of synaforce GmbH. Photo source: synaforce GmbH.<\/p><\/div>\n “The implementation of the NIS2 Directive plays a crucial role. synaforce actively supports companies with comprehensive consulting as well as the planning and implementation of targeted measures to minimize cyber risks and establish sustainable security strategies,” says Andreas Braidt, CEO of synaforce.<\/p>\n More from the MBF Media Network<\/p>\n Additional service details, use cases and background are available from synaforce for data center and infrastructure services<\/a>.<\/p>\n
\nAndreas Braidt, CEO of synaforce GmbH<\/cite>\n<\/p><\/blockquote>\nFrequently Asked Questions<\/h2>\n
What makes phishing so dangerous today?<\/strong><\/summary>\n
How can companies protect themselves against phishing?<\/strong><\/summary>\n
What role does AI play in modern phishing attacks?<\/strong><\/summary>\n
How do phishing attacks impact businesses financially?<\/strong><\/summary>\n
Effectively Complement Traditional Training<\/h2>\n
synaforce 2024: Setting New Standards in IT Security<\/h2>\n
Strategic Partnership with TEHTRIS<\/h2>\n
What awaits companies in 2025 and 2026<\/h2>\n
Further Reading<\/h2>\n
\n
More on this synaforce topic<\/h2>\n
\n