Critical PHP vulnerabilities are disrupting websites: eco Association outlines immediate measures for operators and calls for greater transparency in the software supply chain. The incident highlights how rapidly AI is intensifying the threat landscape and the importance of clearly defined responsibilities throughout the IT supply chain.

How can digital infrastructure become more resilient? In an interview ahead of the Internet Security Days @ it-sa, Dr Jennifer Pernau from Microsoft discusses cybersecurity, secure networks and the regulatory framework needed to strengthen resilience.

Generative AI is transforming applications and business processes, bringing new challenges for IT security. Frank Thias of F5 explains the risks posed by AI applications, agents and interfaces, and why security must be considered from the outset.

Which threats are currently of particular concern to companies? How far has the implementation of NIS2 progressed? And what does it take for organisations to remain truly resilient in an emergency? With the IT Security Survey 2027, eco Association’s Security Competence Group once again aims to gain an up-to-date picture of the situation in practice. Take part now!

The September issue of eco’s dotmagazine explores how security, sovereignty, and digital control are becoming increasingly interconnected – and what meaningful control looks like in practice.

Companies are making progress in their handling of cyber incidents but remain under considerable pressure to adapt. This is shown by the eco Association’s new 2026 IT Security Survey. Just under a third of the IT decision-makers surveyed report incidents with tangible impacts over the past twelve months.

When people talk about digital sovereignty, their thoughts often turn first to cloud and software. Prof. Georg Sigl from Fraunhofer AISEC draws attention to the foundation of digital systems: hardware. In this interview, he discusses trustworthy electronics, dependencies in global semiconductor supply chains and the importance of in-house chip design expertise for Europe’s technological capacity to act.

Reliability of automated matches and evidential robustness remain unclear eco calls for fundamental revision of the draft acts  Berlin, 21 September 2026 – On the occasion of today’s hearing of the Committee on Internal Affairs on the planned digital investigative powers, eco – Association of the Internet Industry...

The August cyberattack on parts of Berlin’s state administration network and the publication of the stolen data on 4 September demonstrate, in the view of eco – Association of the Internet Industry, how dangerous differing security standards for the public and private sectors can be.

eco has warned of new cyber risks arising from the BND reform and has criticised, in particular, the handling of vulnerabilities, the role of the BSI and the BND’s expanded powers to intervene within Germany. The association is calling for tighter legal limits and effective independent prior scrutiny – particularly in relation to automated and AI-supported measures.

Eight months after NIS2 came into force, a recent eco survey reveals that implementation remains a challenge for many companies. Respondents identify documentation requirements, reporting processes, and risk analysis and management as the biggest hurdles. Ulrich Plate, an eco KRITIS expert, emphasises: “What’s crucial now is practical guidance and effective processes in day-to-day business operations.”

With a new position paper on current cybersecurity policy, eco – Association of the Internet Industry warns against the increasing tightening of security-policy interventions in the digital sphere.

At the latest meeting of the eco Security Competence Group, the focus was on cyber resilience, new regulatory requirements and the impact of increasingly professionalised cybercrime. Afterwards, we spoke to Merlin Stottmeister from Bechtle about current threats, AI-supported attacks and concrete measures towards greater digital resilience.

Critical infrastructure such as data centres requires security concepts that go beyond traditional monitoring. In this interview, Georgij Sieloff, Executive Director of PSA Sicherheitsmanagement GmbH, explains why physical security, trained staff and measurable operational quality are crucial for resilient digital infrastructure.

Ahead of today’s Federal Cabinet meeting on the planned Cybersecurity Act, eco has warned against a dangerous expansion of state intervention powers in the digital sphere. From the perspective of the Internet industry, the draft marks a profound shift in the understanding of state cyber defence.

Cyber resilience is becoming a long-term priority for businesses: stolen login credentials, AI-powered attacks and the Cyber Resilience Act are increasing the pressure to act. At the recent Security CG meeting, the focus was on practical strategies for detecting attacks at an early stage, mitigating their impact and quickly restoring operations.

According to eco, the latest BKA German Cybercrime Situation Report 2025 confirms that the cyber threat situation remains serious. DDoS attacks, in particular, are on the rise. At the same time, the eco IT Security Survey 2026 reveals significant shortcomings in the IT emergency management of many companies.

The two-day Tech Show Frankfurt 2026: eco brought together the Internet industry with key partners, featuring engaging panel discussions and in-depth exchanges. The focus was on digital sovereignty, AI infrastructures, edge computing and the future of Germany as a data centre hub.

The Security Competence Group of eco Association is undergoing a change in leadership: Max Röttgermann from Deutsche Telekom is taking over as head of the group, succeeding Oliver Dehning, who has played a key role in shaping the group since 2014.

On the occasion of World Password Day, eco Association is publishing a representative YouGov survey showing that the traditional password is increasingly losing its role as the sole security mechanism. Nevertheless, the majority of Germans still consider their online passwords to be secure.

From high-availability networks to modern security solutions: dacoso GmbH supports companies and public authorities in the DACH region in securing critical infrastructures. In this interview, Stefan Hofmann, the company’s Chief Sales Officer, provides insights into typical use cases, among other topics.

The draft bill for an Act to Strengthen Cybersecurity intervenes deeply in the architecture and control logic of digital infrastructures and fundamentally shifts the understanding of cybersecurity. eco – Association of the Internet Industry strongly criticises this paradigm shift.

Cyber attacks are considered the greatest security risk by the German population. This is shown by the current Munich Security Index 2026, which was published ahead of the Munich Security Conference. However, a survey of IT decision-makers in Germany commissioned by eco Association and conducted by the polling institute Civey paints a more nuanced picture.

A new white paper from eco shows how companies can use AI safely and responsibly. A five-step plan supports decision-makers in implementing AI applications, addresses new threats such as deepfakes and AI-supported phishing, and classifies best practices and relevant standards such as ISO/IEC 42001.

“We know that, as things stand today, demand for data centres in Germany alone will exceed planned capacities by about three times by 2030. That is why every building block is important in supporting the digital transformation in Germany.”

AI is reshaping the cybersecurity landscape and how companies are fortifying their defenses against increasingly sophisticated threats. Read the latest insights from the eco IT Security Survey 2025 and find out how your expertise can shape the future of digital resilience in the upcoming 2026 survey.

The digitalisation of public authorities in Germany remains a challenge. A representative survey commissioned by eco shows that the majority of citizens rate the current situation negatively. At the same time, there is growing openness towards government-provided digital identity solutions – provided they are secure, transparent and easy to use.

A late start, but on the home stretch: Germany has managed the long run-up and will finally adapt the important NIS-2 implementation. The second stage of the EU infringement procedure hung over Berlin like a sword of Damocles for a long time; but now there is finally movement in the legislative backlog on cybersecurity.

Deep fakes are fundamentally changing the way we deal with information. In this interview, Lennart Grunau from JAMORIE explains why AI-generated fakes are becoming a real threat, why anyone can be affected — and what companies need to do now.

Ransomware, CEO fraud, deepfakes – attacks are becoming more sophisticated. But with artificial intelligence, defensive capabilities are also growing. Our IT Security Survey shows how companies are securing their digital sovereignty.