In Berlin, 1.4 million sensitive data records end up on the dark web following a cyberattack on the Senate Administration. At US developer Anthropic, AI models break out during a test and infiltrate external computer systems and databases unnoticed.
In its Federal Cybercrime Situation Report for 2025, the German Federal Ministry of the Interior (BMI) counts 334,000 registered cybercrime cases – that is more than 900 every day! The number of unreported cases is likely significantly higher, and the threat to companies, public authorities, and critical infrastructure is steadily increasing. As is the damage to the economy. According to the BMI, it now amounts to more than 200 billion euros, or around 4.5 percent of gross domestic product. And: Germany ranks third worldwide among attack targets.
Who’s who of international IT security experts
But the defensive side is also well positioned. “Stronger together against cyberattacks!” is the motto of the upcoming it-sa Expo&Congress in Nuremberg. The trade fair covers the full spectrum of products, services, and ideas in the field of cybersecurity. And it brings together the who’s who of international IT security experts and decision-makers in one place.
One of them is Prof. Dr. Marco Gercke, Director of the Cybercrime Research Institute based in Cologne. In his special keynote, he addresses a question that concerns companies and public institutions alike: in the interactive “Cyber Incident Simulation,” he uses a realistic scenario to demonstrate the dynamics of a cyberattack as well as the complex decision-making processes that must be managed under time pressure in a crisis.
Because the figures speak for themselves: 54 percent of cyberattacks in Europe target public administration, transport and traffic, digital infrastructure and services, the financial sector, and manufacturing; more than 80 percent of global phishing campaigns use AI-generated or AI-assisted content; 119 new vulnerabilities are disclosed every day (24 percent more than in the previous year). But: 64 percent of companies rely only on the required minimum when it comes to cyber resilience, and only one in five is very well prepared.



