Mathias Schick

This page is not currently available in the selected language.

New security vulnerabilities affecting operating systems and applications are identified and made public nearly every day. This information is often used by hackers to carry out targeted attacks on companies’ in-house IT systems, for example installing malware on corporate systems to steal sensitive data. Protect your IT infrastructure with automated vulnerability scans!

The current situation often demands mobile working from home which in turn attracts more cyber criminals. Spear phishing e-mails used to spread malware are in increased circulation. Recently, the Czech hospital in Brno fell victim to a cyber-attack. How can threats be detected early on and damage avoided?

Given the current situation, many employees are working from inside their own four walls. And with the right collaboration tools, this is not a problem. We can simply meet, chat and share information online. But is the mobile workplace actually safe? With AnyConnect, Umbrella and DuoSec, Cisco offers a range of solutions to keep mobile workers safe and protected. These offerings are available for free until 1 July 2020. Existing users can exceed their licence limit!

Feeling safe because your vulnerability scanner has given you the all-clear? Got your system all compliant and successfully passed all audits? You should still be wary. Automated tools and certificates are important, but have their limits. Attackers use gateways that vulnerability scanners don’t find. Penetration tests are the only way to get a complete picture of your security.

Have you ever scratched your head wondering why your virtualisation technology is acting up, your Unified Computing seems to have a mind of its own or your hyper-converged infrastructure just won’t do what your admins want it to? Sometimes it can seem like your data centre is haunted by mischievous ghosts. The benefits of new technology are many, but sometimes it can wreak havoc on your data centre infrastructure. So, “if there’s somethin’ strange in your neighbourhood, who ya gonna call?” We’ve got something better than the Ghostbusters.

You may remember that on 13 August 2019, Microsoft issued a somewhat under-the-radar security advisory urging customers to change two Active Directory settings to protect their domain controllers. The recommended changes, which concern LDAP connections, may have a substantial impact on your IT infrastructure. And it’s important that you act now...

In early February Armis discovered a weak spot known as "CDPwn" in the Cisco Discovery Protocol (CDP). Cisco released a series of updates shortly thereafter to close the discovered leak on several devices.

This page is not currently available in the selected language.

As reported in the Bechtle blog and in the current daily media, the NetScaler appliances from Citrix are currently affected by a critical security vulnerability. Together with Citrix, we are now offering a hotline (+49 89 327 297 199), where Citrix ADC specialists from a task force will provide the necessary support. Also, Citrix released firmware builds that fix the gap in certain versions. Contact us, we will be happy to support you.

Phishing, spoofing and CxO fraud are just some of the many ways in which criminals attack corporate e-mail correspondence.

In December, a dangerous security vulnerability was discovered in Cisco NetScaler series devices that has proved very easy to exploit. As of yet, there is no update available meaning users urgently need to change their configuration.

Palo Alto Networks is a leading provider of cyber security solutions and is well-known for consistently challenging current security standards such as with the new Palo Alto Networks Security Operating Platform that makes sure companies are equipped for the future with innovative security, automation and analytics features.

Mobile platforms are wildly popular, making them a prime target for hackers and data thieves who live for security breaches, man-in-the-middle attacks and compromised applications. Our webinar with MobileIron will show you how to quickly identify threats on mobile devices, allowing you to take swift action.

For months, the German Federal Office for Information Security (BSI) noticed an increase in targeted Emotet attacks on German companies and public authorities and explicitly warned against these. The BSI considers Emotet as one of the biggest cyber threats. But how can you defend yourself against this dangerous malware? Learn more in this blog.

Encryption is one of the oldest forms of protection against attacks and spying. But in today’s internet age, this technology is not as widely used as it could be by companies. As a matter of fact, only 28 per cent of small and mid-sized companies encrypt their e-mail communications.

“When you protect data, you’re protecting people’s basic rights,” explained Ulrich Kelber, the German Federal Commissioner for Data Protection and Freedom of Information, in a press release from early December. The press release continued on to state that telecommunications provider 1&1 had not implemented sufficient technical and organisational measures to prevent unauthorised individuals from obtaining customer data when calling the customer service hotline. In other words, 1&1 had failed to comply with the GDPR and was fined nearly 10 million euros as a result. This should serve as a serious wake-up call for those who haven’t taken the GDPR as seriously as they should be. Keep reading to learn how you can take ownership of data and information protection in your company.

"There are two types of companies: those who have been hacked, and those who don’t yet know they have been hacked." - John Chambers, formerly Chief Executive Officer of Cisco

WhatsApp as the internal communications platform, Facebook and LinkedIn as the intranet, and the prominent executive profile for the MD’s iPhone—the sad reality of shadow IT in many companies. Keep reading to find out the reasons for this parallel world and what you can do to prevent it.

Passwords are key. Literally. We use them to access our PCs, ERP systems, servers, websites, etc. For now, the reality of authentication means we have to juggle a plethora of login credentials. While common sense demands a different, cryptic key for each lock, users typically resort to the same old Open Sesame. After all, we have to remember it, too. The passphrase seldom changes, or it may never change at all. This plays into the hands of cybercriminals who often need but a single password to roam freely through many different systems or even entire infrastructures. The solution to the password conundrum is a password manager.

The Bluekeep security vulnerability (CVE-2019-0708) in Microsoft’s Remote Desktop Protocol (RDP) was first reported in May and since then, the necessary security updates have been available. If you haven’t installed these yet, now is the time to act as attacks have been uncovered.

Germany’s Federal Office for Information Security (BSI) first published the Cloud Computing Compliance Criteria Catalogue (C5 for short) in 2016, and it quickly became the standard for baseline security in the cloud. Three years later, the emergence of new application scenarios and concepts now calls for a revision. BSI recently made a community draft available to security experts to collect feedback for optimisations. The new version of the authoritative guide to cloud security will be finalised at the end of January 2020.

The it-sa, Europe’s largest IT security fair opened its doors from 8 to 10 October in Nuremberg and Bechtle was there with a large selection of security specialists from all over Germany, from our business units and systems integrators. One Bechtle for our customers’ security.

Reports about new cyber threats emerge nearly every day. Absolute security is impossible to achieve, but a proactive approach can help companies map out a way to protect their core business components against future threats. This is known as cyber resilience.

Only a few months after the discovery of CVE-2019-0708—BlueKeep—Microsoft released patches for four other weaknesses. As "BlueKeep” did before, the vulnerabilities called "DejaBlue" allow the execution of arbitrary code on vulnerable systems (CVE-2019-1181, CVE-2019-1182, CVE-2019-1222, CVE-2019-1226).

CERT-Bund, the computer emergency response team of the German Federal Office for Information Security (BSI), has issued a warning about a new type of ransomware that immediately deletes data instead of merely encrypting it. This means that even if the affected organisation pays the ransom, its data is gone forever. Read on to learn about GermanWiper and what you can do to protect yourself.

Several articles have come out in recent weeks reporting on security issues found in wireless Logitech keyboards and mice. Various Logitech presenters are also affected. The vulnerable devices communicate with their Unifying receivers on a 2.4 GHz frequency.

This page is not available in the selected language.

This page is not available in the selected language.

This page is not available in the selected language.