Germany: Cybersecurity

The European Central Bank has issued an urgent directive to major financial institutions requiring comprehensive action plans to counter rapidly evolving cybersecurity threats powered by frontier artificial intelligence models. With an October 2026 deadline looming, banks must demonstrate concrete measures across vulnerability management, monitoring capabilities, and third-party risk controls as AI-enabled attacks compress the timeline between threat discovery and exploitation. This supervisory escalation s

The European Patent Office Board of Appeal examined whether mathematical steps for generating points on elliptic curves can contribute to technical character in cryptographic applications. The central question was whether designing a constant-time execution method to prevent timing attacks on secret parameters constitutes a technical effect, or remains merely an abstract mathematical exercise.

When an incident occurs at a financial institution, whether a cyberattack, an operational failure, a data breach, or internal misconduct, the immediate response is rarely a single, straightforward process.

The Network and Information Security Directive 2, Directive (EU) 2022/2555 (NIS2) reshapes cybersecurity compliance across the European Union.

Carve-outs - meaning the spin-off and possible sale of a part of a company - are becoming increasingly important in the aerospace and defence (A&D) sector.

In addition to the regulatory framework, which we already analysed in Part I of our specialist article, the structuring and operational implementation of a carve-out in the A&D sector is highly complex.

Researchers at Sophos have recently encountered a new malware developed to terminate EDR (Endpoint Detection and Response) processes in an attack using Ransomhub ransomware.

As evidenced on 19 July 2024 major IT outages, including those caused by a simple yet apparently defective "content update", can quickly cascade into systemic cyber incidents...

The Network and Information Security 2 Directive (EU) 2022/2555 ("NIS2") entered into force on 16 January 2023. NIS2 sets cyber rules for organizations...