Our Blog - page 4

Device Code Phishing: What SMEs Need to Know

Device code phishing abuses real Microsoft logins and working MFA, leaving few warning signs. Here's what SMEs need to know in 2026.

Cybercriminals have started exploiting a login shortcut millions of people already trust. Rather than sending victims to a fake login page or trying to steal a password outright, they persuade employees to authorise an attacker-controlled device through a completely legitimate identity provider — Microsoft, most often. The result is a fast-growing form of social engineering…

Read More

Top 5 Cybersecurity News Stories August 28, 2026

Cybersecurity News Stories August 28, 2026 image showing five exploited trust layers in one week across identity, OT, developer infrastructure, communications, and endpoint security`

This week’s Cybersecurity News Stories August 28, 2026 arrives with a pattern that cuts across every story: the infrastructure that organisations designate as trusted — the identity service that decides who gets access, the security tool that watches for threats, the developer pipeline that builds and deploys code, the video conferencing platform that carries internal…

Read More

Identity Theft in Germany: What SMEs Need to Know

Identity theft and stolen credentials drive most cybercrime in Germany

Germany’s cybercrime problem has a number attached to it: an estimated €202.4 billion in damage to the German economy for the 2025 reporting period, around 4.5 percent of GDP, according to the Federal Criminal Police Office’s (BKA) latest Bundeslagebild Cybercrime report. Behind much of that damage sits a quieter but persistent issue: identity theft in…

Read More

Top 5 Cybersecurity News Stories August 21, 2026

Cybersecurity News Stories August 21, 2026: VMware vCenter CVSS 9.8, SharePoint JWT bypass, macOS root exploit, MLflow SSRF, Cisco ASA DoS — five layers.

This week’s Cybersecurity News Stories August 21, 2026 arrives at a moment when the breadth of simultaneous active exploitation across enterprise infrastructure demands attention that goes beyond any single advisory. Within a seven-day window, CISA added five separate vulnerabilities to its Known Exploited Vulnerabilities catalogue across five entirely different product categories: VMware vCenter, Microsoft SharePoint,…

Read More

SME Squeeze: NIS2, AI Act, Ransomware Collide

Three regulatory and threat deadlines create an SME squeeze in Germany

On January 7, 2026, the ransomware group Akira hit Buhlmann Group, a Hamburg-based steel and metal trading company with roughly 2,000 employees and €428 million in annual revenue. The attackers made off with about 55GB of data — engineering drawings, HR files, financial records — before anyone at the company could respond. Buhlmann wasn’t an…

Read More