Security Insights

76% of organizations have faced cyberattacks due to unknown, unmanaged, or poorly managed Internet-facing assets, with attacks stemming from unpatched vulnerabilities causing the most significant business impact. In our weekly top 5 hacker-relevant vulnerabilities, we have been reporting on vulnerabilities, which are pertinent to threat actors. In …

Every 15 minutes, a new vulnerability emerges, leading to an average of around 650 new vulnerabilities each week — an overwhelming pace to manage. The average cost of a data breach has skyrocketed to a record high of $4.45 million globally. To help organizations allocate resources effectively and address the most risky vulnerabilities, we are …

In this brand-new podcast episode, host Henrike Tönnes talks with Dr. Mohamad Sbeiti and Samet Gökbayrak about leveraging AI in cybersecurity. The founders of the Bochum-based startup ENTRYZERO share how an AI-powered exposure management helps companies detect threats early and minimize risks - Cube 5 | Creating Security.

Summary

This was the focus …

The rapid advancement of quantum computing is accelerating the need for organizations to transition to post-quantum cryptography. A crucial first step is conducting a detailed quantum threat analysis—an in-depth inventory of IT assets and security algorithms that require protection. In our previous blog, we outlined commonly used security …

A recently leaked chat log from the threat actor Black Basta offers a rare glimpse into the shadowy world of cybercrime in Germany. Our analysis reveals how threat actors discuss security vulnerabilities in their internal chats— which weaknesses they target most, what attack vectors they use, and which products are in their crosshairs. We examined …

In this blog, we reflect on vulnerability data from 2024 to argue that effective vulnerability prioritization cannot rely solely on severity ratings - organizations patching critical vulnerabilities immediately, while scheduling others for the next patch cycle. We contend that an effective prioritization strategy must incorporate additional …

32% of ransomware attacks start with an unpatched vulnerability, and these have the greatest business impact. In our weekly ”Top 5 Hacker-Relevant Vulnerabilities" series, we report on vulnerabilities that are particularly pertinent to threat actors. As part of this ongoing effort, we will provide quarterly recaps on selected threat actors, …

Germany’s cybersecurity landscape constantly evolves, with various Advanced Persistent Threat (APT) groups consistently testing the country’s defenses. This blog utilizes data from the Federal Office for Information Security (BSI), Malware Information Sharing Platform Galaxy (MISP Galaxy), and MITRE Adversarial Tactics, Techniques, and …

The rapid development of quantum computing presents a clear danger to widely used security algorithms. Future quantum computers will be capable of breaking these algorithms, potentially exposing sensitive data to cybercriminals. Even now, attackers may be collecting encrypted data, intending to decrypt it once quantum capabilities mature. This …

In cybersecurity, national vulnerability databases are pivotal in cataloging and assessing software vulnerabilities. Two prominent databases are the U.S. National Vulnerability Database (NVD) and China’s National Vulnerability Database (CNNVD). Current industry practices often recommend utilizing Common Vulnerability Scoring System (CVSS) …

CISA (the U.S. Cybersecurity and Infrastructure Security Agency) maintains a list of known exploited vulnerabilities, currently encompassing 1162 vulnerabilities. For each of these, CISA has evidence of active exploitation by threat actors. Among these, 741 vulnerabilities can be exploited without requiring user interaction. Prompt response to …