Shared IT Professional
The Hacker News
New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS ProxyMasjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT DevicesAPT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO AlliesShrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major SystemsN. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, RustIran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCsRussian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise RiskDocker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host AccessOver 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet CampaignThe Hidden Cost of Recurring Credential IncidentsNew GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-FlipsChina-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa RansomwareFlowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances ExposedIran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 OrganizationsDPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South KoreaMulti-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and MoreHow LiteLLM Turned Developer Machines Into Credential Vaults for AttackersNew Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS ProxyMasjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT DevicesAPT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO AlliesShrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major SystemsN. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, RustIran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCsRussian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign[Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise RiskDocker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host AccessOver 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet CampaignThe Hidden Cost of Recurring Credential IncidentsNew GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-FlipsChina-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa RansomwareFlowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances ExposedIran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 OrganizationsDPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South KoreaMulti-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and MoreHow LiteLLM Turned Developer Machines Into Credential Vaults for Attackers
Zurück zum Blog
IT-Sicherheit20. März 20265 min

DORA: Digitale Betriebsresilienz im Finanzsektor

DORA: Digitale Betriebsresilienz im Finanzsektor

Der Digital Operational Resilience Act gilt seit dem 17. Januar 2025 für alle Finanzunternehmen in der EU.

Die fünf Säulen von DORA

IKT-Risikomanagement: Vollständiges Framework für IKT-Risiken.

Incident-Reporting: Klassifizierung und Meldung schwerwiegender Vorfälle.

Resilienztests: Regelmäßige Tests – für bedeutende Institute auch TLPT.

Drittanbieter-Management: Kritische IKT-Anbieter unter direkter EU-Aufsicht.

Informationsaustausch: Freiwilliger Austausch von Bedrohungsinformationen.

Handlungsempfehlungen

  • IKT-Systeme inventarisieren
  • Drittanbieter nach DORA-Kriterien bewerten
  • TLPT-Programm implementieren
  • Management zu DORA-Pflichten schulen
IT-Sicherheit

Beratung anfragen

Haben Sie Fragen zu diesem Thema? Unsere Experten beraten Sie gerne.

E-Mail senden

Verwandte Artikel

NIS2 in der Praxis: Was Unternehmen jetzt umsetzen müssen

Unsere Leistungen

IT-Sicherheit & PentestsDatenschutz & DSGVOInformationssicherheitIT-SEC Platform

Weitere Artikel

Alle Artikel