Could Hertz have been warned months earlier with a better supplier risk management?

Quick answer: Yes.

Over 60 organizations were impacted through a single supplier breach at Cleo, exposing data from more than 3,000 Hertz customers alone. The Hertz Corporation was not informed until February 10, 2025, months after the vulnerability was exploitable …

Every 15 minutes, a new vulnerability emerges, leading to an average of around 650 new vulnerabilities each week — an overwhelming pace to manage. The average cost of a data breach has skyrocketed to a record high of $4.45 million globally. To help organizations allocate resources effectively and address the most risky vulnerabilities, we are …

Could the Jaguar Land Rover breach have been avoided?

Quick answer: Yes.

According to several sources, Jaguar Land Rover is losing around £72 million in daily sales and £5 million in profit due to the breach. That’s a nightmare for any company.

What happened

Jaguar Land Rover were hit by a cyberattack in early September. Threat actors …

Vulnerabilities that are not patched quickly enough are the main reason for most successful attacks, such as ransomware. The question is, which of the many new vulnerabilities are the most relevant?

Focus Pays Off

With the weekly published Top 5 vulnerabilities most commonly exploited by hackers, the IT Security Marketplace provides organizations …

76% of organizations have faced cyberattacks due to unknown, unmanaged, or poorly managed Internet-facing IT assets, with attacks stemming from unpatched vulnerabilities causing the most significant business impact. In our weekly top 5 hacker-relevant vulnerabilities, we have been reporting on vulnerabilities, which are pertinent to threat actors. …

“As an internationally operating company with a complex IT infrastructure and numerous subsidiaries worldwide, we at thyssenkrupp Materials Services place high demands on our IT security.

Conditions

As part of a targeted Proof of Concept (PoC), we evaluated the ENTRYZERO platform to gain additional strategic insights for strengthening our …

This article examines NIST’s new Likely Exploited Vulnerability (LEV) and LEV2 models, which estimate the probability that a vulnerability has already been exploited, complementing existing models and data sources, such as EPSS and CISA KEV. While promising, LEV and LEV2 are not a panacea and require further empirical assessment.

Blind Spots …

The Common Vulnerabilities and Exposures (CVE) program has played a central role in global cybersecurity, providing a unified language for communicating vulnerabilities across researchers, vendors, and defenders. Managed primarily by the MITRE Corporation, with funding from the U.S. government, the CVE system facilitates the timely dissemination of …

In this brand-new podcast episode, host Henrike Tönnes talks with Dr. Mohamad Sbeiti and Samet Gökbayrak about leveraging AI in cybersecurity. The founders of the Bochum-based startup ENTRYZERO share how an AI-powered threat exposure management helps companies detect threats early and minimize risks - Cube 5 | Creating Security.

Summary

This was …

The rapid advancement of quantum computing is accelerating the need for organizations to transition to post-quantum cryptography. A crucial first step is conducting a detailed quantum threat analysis—an in-depth inventory of IT assets and security algorithms that require protection. In our previous blog, we outlined commonly used security …

A recently leaked chat log from the threat actor Black Basta offers a rare glimpse into the shadowy world of cybercrime in Germany. Our analysis reveals how threat actors discuss security vulnerabilities in their internal chats— which weaknesses they target most, what attack vectors they use, and which products are in their crosshairs. We examined …

In this blog, we reflect on vulnerability data from 2024 to argue that effective vulnerability prioritization cannot rely solely on severity ratings - organizations patching critical vulnerabilities immediately, while scheduling others for the next patch cycle. We contend that an effective prioritization strategy must incorporate additional …