Germany: Cybersecurity

Herbert Smith Freehills Kramer's Frankfurt Corporate Crime & Investigations team hosted a conference examining cybercrime threats, AI-driven attacks, and the evolving responsibilities of corporate leadership in building cyber resilience. Senior representatives from law enforcement, industry leaders, and global legal partners explored prevention strategies, incident response protocols, and the complex liability landscape facing organizations in an increasingly digital threat environment.

The European Central Bank has issued an urgent directive to major financial institutions requiring comprehensive action plans to counter rapidly evolving cybersecurity threats powered by frontier artificial intelligence models. With an October 2026 deadline looming, banks must demonstrate concrete measures across vulnerability management, monitoring capabilities, and third-party risk controls as AI-enabled attacks compress the timeline between threat discovery and exploitation. This supervisory escalation s

The European Patent Office Board of Appeal examined whether mathematical steps for generating points on elliptic curves can contribute to technical character in cryptographic applications. The central question was whether designing a constant-time execution method to prevent timing attacks on secret parameters constitutes a technical effect, or remains merely an abstract mathematical exercise.

Die EU-Datenverordnung (Verordnung (EU) 2023/2854) ist ab dem 12. September 2025 anwendbar. Sie führt ein nutzerzentriertes Regelwerk für den Zugang zu und die Weitergabe...

The Network and Information Security Directive 2, Directive (EU) 2022/2555 (NIS2) reshapes cybersecurity compliance across the European Union.

Carve-outs - meaning the spin-off and possible sale of a part of a company - are becoming increasingly important in the aerospace and defence (A&D) sector.

Due to the increasing threats and the growing number of IT security incidents, the European Union published the second EU Directive on Network and Information Security (known as the NIS-2 Directive) in December 2022.

Researchers at Sophos have recently encountered a new malware developed to terminate EDR (Endpoint Detection and Response) processes in an attack using Ransomhub ransomware.

As evidenced on 19 July 2024 major IT outages, including those caused by a simple yet apparently defective "content update", can quickly cascade into systemic cyber incidents...