76% of organizations have faced cyberattacks due to unknown, unmanaged, or poorly managed Internet-facing IT assets, with attacks stemming from unpatched vulnerabilities causing the most significant business impact. In our weekly top 5 hacker-relevant vulnerabilities, we have been reporting on vulnerabilities, which are pertinent to threat actors. …

“The Bochum Economic Development (BoWE) is one of the largest economic development organizations in Germany. With around 250 employees, it supports businesses & Startups, promotes sustainable urban development, markets and develops properties, and operates technology and startup centers, as well as Bochum’s parking facilities. With …

“As an internationally operating company with a complex IT infrastructure and numerous subsidiaries worldwide, we at thyssenkrupp Materials Services place high demands on our IT security.

Conditions

As part of a targeted Proof of Concept (PoC), we evaluated the ENTRYZERO platform to gain additional strategic insights for strengthening our …

Every 15 minutes, a new vulnerability emerges, leading to an average of around 650 new vulnerabilities each week - an overwhelming pace to manage. The average cost of a data breach has skyrocketed to a record high of $4.45 million globally. To help organizations allocate resources effectively and address the most risky vulnerabilities, we are …

Could the Alliance breach have been avoided?

Quick answer: Yes.

Another cyberattack on the Allianz Group: After the incident at its U.S. subsidiary Allianz Life, in which data from 1.5 million customers was compromised, a British subsidiary has now also been affected.

What happened

The ransomware group Clop is currently exploiting the Oracle …

Could Hertz have been warned months earlier with a better supplier risk management?

Quick answer: Yes.

Over 60 organizations were impacted through a single supplier breach at Cleo, exposing data from more than 3,000 Hertz customers alone. The Hertz Corporation was not informed until February 10, 2025, months after the vulnerability was exploitable …

Could the Jaguar Land Rover breach have been avoided?

Quick answer: Yes.

According to several sources, Jaguar Land Rover is losing around £72 million in daily sales and £5 million in profit due to the breach. That’s a nightmare for any company.

What happened

Jaguar Land Rover were hit by a cyberattack in early September. Threat actors …

Vulnerabilities that are not patched quickly enough are the main reason for most successful attacks, such as ransomware. The question is, which of the many new vulnerabilities are the most relevant?

Focus Pays Off

With the weekly published Top 5 vulnerabilities most commonly exploited by hackers, the IT Security Marketplace provides organizations …

This article examines NIST’s new Likely Exploited Vulnerability (LEV) and LEV2 models, which estimate the probability that a vulnerability has already been exploited, complementing existing models and data sources, such as EPSS and CISA KEV. While promising, LEV and LEV2 are not a panacea and require further empirical assessment.

Blind Spots …

The Common Vulnerabilities and Exposures (CVE) program has played a central role in global cybersecurity, providing a unified language for communicating vulnerabilities across researchers, vendors, and defenders. Managed primarily by the MITRE Corporation, with funding from the U.S. government, the CVE system facilitates the timely dissemination of …

In this brand-new podcast episode, host Henrike Tönnes talks with Dr. Mohamad Sbeiti and Samet Gökbayrak about leveraging AI in cybersecurity. The founders of the Bochum-based startup ENTRYZERO share how an AI-powered threat exposure management helps companies detect threats early and minimize risks - Cube 5 | Creating Security.

Summary

This was …

The rapid advancement of quantum computing is accelerating the need for organizations to transition to post-quantum cryptography. A crucial first step is conducting a detailed quantum threat analysis—an in-depth inventory of IT assets and security algorithms that require protection. In our previous blog, we outlined commonly used security …