Germany’s Expanding Threat Landscape & SME Cyber Risks

The BSI's 2025 IT security report characterizes Germany's cybersecurity posture as "tense," documenting high volumes of newly disclosed vulnerabilities (119/day), a 38% rise in exploitation attempts, widespread ransomware (≈950 incidents, 72% involving data leaks), large IoT botnets (BadBox, Vo1d) including supply-chain pre-compromised devices, and an alarming shift toward attacking SMEs (80% of incidents); it concludes that continuous attack surface management, prioritized patching, and targeted SME support are essential to reduce systemic risk.