nov 01, 2022

BSI status report 2022: Cybersecurity situation continues to worsen

As the national cybersecurity authority, the Federal Office for Information Security (BSI) continuously monitors the IT security threat situation in Germany. In the context of this, the agency publishes the BSI status report every year. Just in time for the largest IT security trade fair in the German-speaking world, it-sa 2022, the BSI has published the current status report. It takes stock of the situation between June 1, 2021 and May 31, 2022.

Resilience against cyber attacks as the main task of government, business and society

Not at least due to global developments, the BSI sums up that the tense IT security situation continues to worsen and the threats are higher than ever. As in previous years, ransomware remains the main threat. In addition, ten percent more vulnerabilities were disclosed in 2021 than in the previous year. And as in the previous year, big game hunting remains a trend. In particular, "financially strong victims" are attacked and particularly high ransom demands are made. For the BSI, this big game hunting is also a subset of cybercriminal attack types that extort ransoms with ransomware.

Overall, the BSI sums up in its situation report that, in view of the ever-increasing threats, increasing resilience to cyberattacks and technical disruptions is also a key task for all involved players in the state, the economy and society. Here, companies and public sector agencies have a duty to review the current state of their IT security and adapt it if necessary. Especially the biggest threat Ransomware is still underestimated by many. A first and important step to protect yourself effectively against ransomware attacks is to secure your Internet access. This can be effectively implemented with a virtual browser.

Effective protection with a virtual browser

R&S®Browser in the Box closes the "Internet" security gap via a "digital" quarantine for hacker attacks: The ransomware software is isolated before it can be executed. This means that the malware does not have access to the workstation or the sensitive network infrastructure at any time. This mechanism also protects against attacks via email attachments, while providing support for web conferencing with microphone usage and webcam. The protection works both ways: No malware can get onto the computer via the Internet - but even if malware does get onto the PC via another route, it is not possible to tap data via the Internet (data leakage prevention).