Security Insights

“As an internationally operating company with a complex IT infrastructure and numerous subsidiaries worldwide, we at thyssenkrupp Materials Services place high demands on our IT security.

Conditions

As part of a targeted Proof of Concept (PoC), we evaluated the ENTRYZERO platform to gain additional strategic insights for strengthening our …

Every 15 minutes, a new vulnerability emerges, leading to an average of around 650 new vulnerabilities each week — an overwhelming pace to manage. The average cost of a data breach has skyrocketed to a record high of $4.45 million globally. To help organizations allocate resources effectively and address the most risky vulnerabilities, we are …

76% of organizations have faced cyberattacks due to unknown, unmanaged, or poorly managed Internet-facing IT assets, with attacks stemming from unpatched vulnerabilities causing the most significant business impact. In our weekly top 5 hacker-relevant vulnerabilities, we have been reporting on vulnerabilities, which are pertinent to threat actors. …

This article examines NIST’s new Likely Exploited Vulnerability (LEV) and LEV2 models, which estimate the probability that a vulnerability has already been exploited, complementing existing models and data sources, such as EPSS and CISA KEV. While promising, LEV and LEV2 are not a panacea and require further empirical assessment.

Blind Spots …

The Common Vulnerabilities and Exposures (CVE) program has played a central role in global cybersecurity, providing a unified language for communicating vulnerabilities across researchers, vendors, and defenders. Managed primarily by the MITRE Corporation, with funding from the U.S. government, the CVE system facilitates the timely dissemination of …

In this brand-new podcast episode, host Henrike Tönnes talks with Dr. Mohamad Sbeiti and Samet Gökbayrak about leveraging AI in cybersecurity. The founders of the Bochum-based startup ENTRYZERO share how an AI-powered threat exposure management helps companies detect threats early and minimize risks - Cube 5 | Creating Security.

Summary

This was …

The rapid advancement of quantum computing is accelerating the need for organizations to transition to post-quantum cryptography. A crucial first step is conducting a detailed quantum threat analysis—an in-depth inventory of IT assets and security algorithms that require protection. In our previous blog, we outlined commonly used security …

A recently leaked chat log from the threat actor Black Basta offers a rare glimpse into the shadowy world of cybercrime in Germany. Our analysis reveals how threat actors discuss security vulnerabilities in their internal chats— which weaknesses they target most, what attack vectors they use, and which products are in their crosshairs. We examined …

In this blog, we reflect on vulnerability data from 2024 to argue that effective vulnerability prioritization cannot rely solely on severity ratings - organizations patching critical vulnerabilities immediately, while scheduling others for the next patch cycle. We contend that an effective prioritization strategy must incorporate additional …

32% of ransomware attacks start with an unpatched vulnerability, and these have the greatest business impact. In our weekly ”Top 5 Hacker-Relevant Vulnerabilities" series, we report on vulnerabilities that are particularly pertinent to threat actors. As part of this ongoing effort, we will provide quarterly recaps on selected threat actors, …

Germany’s cybersecurity landscape constantly evolves, with various Advanced Persistent Threat (APT) groups consistently testing the country’s defenses. This blog utilizes data from the Federal Office for Information Security (BSI), Malware Information Sharing Platform Galaxy (MISP Galaxy), and MITRE Adversarial Tactics, Techniques, and …

The rapid development of quantum computing presents a clear danger to widely used security algorithms. Future quantum computers will be capable of breaking these algorithms, potentially exposing sensitive data to cybercriminals. Even now, attackers may be collecting encrypted data, intending to decrypt it once quantum capabilities mature. This …