IT news

Version 1.3 React Server Components - Critical vulnerability threatens numerous web applications

G7 data protection authorities continue shared commitment to international data protection

The Deputy Federal Commissioner for Data Protection and Freedom of Information (BfDI), Andreas Hartl, took part in a virtual roundtable of the G7 data protection authorities on December 9th and 10th.

Secure. Digital. Rule of law: Police 20/20 and data protection in dialogue.

The Federal Ministry of the Interior (BMI) and the BfDI held a joint information event on the Police 20/20 project.

How 6G mobile communications becomes data protection-friendly

Technology Foresight at the Federal Commissioner for Data Protection and Freedom of Information (BfDI)

Majority of users want more control over their data – first cookie manager recognized in Germany

The BfDI has recognized the first service for consent management in accordance with the Consent Management Ordinance (EinwV). This represents an important step towards more user-friendly management of data protection settings. At the same time, the results of a current survey commissioned by the BfDI show that the majority of Internet users would like more control over their data.

Version 1.0: BIND - Proof of Concept threatens DNS servers

Version 1.0: Microsoft Exchange - Endangering tens of thousands of servers after end of support for versions 2016 and 2019

Version 1.1: Microsoft WSUS - Emergency update closes critical vulnerability with proof of concept

Version 1.0: F5 - Information about vulnerabilities collected

Version 1.0: SonicWall - Configuration information collected from firewalls

Data protection officers demand no from the federal government to chat controls

Do not allow unprovoked mass surveillance through chat control

Version 1.0: Redis - Critical vulnerability endangers Redis servers

BfDI launches new data barometer – more evidence for effective data protection

Initial results show that the population has a differentiated view of data protection - an important wake-up call for reform impulses

Global Privacy Assembly: BfDI signs agreement to regulate AI

The 47th annual conference of the Global Privacy Assembly (GPA) took place in Seoul in mid-September. The conference's theme was "Artificial Intelligence in our daily lives: Data and Privacy Issues."

Global Privacy Assembly: BfDI signs agreement to regulate AI

The 47th annual conference of the Global Privacy Assembly (GPA) took place in Seoul in mid-September. The theme of the conference was “Artificial Intelligence in our daily lives: Data and Privacy Issues”.

International Freedom of Information Day: Germany needs more transparency!

On the occasion of International Freedom of Information Day on September 28th, the Conference of Freedom of Information Commissioners in Germany (IFK) appeals to decision-makers in parliaments and governments to further develop and expand the rules for transparency and freedom of information.

Annual conference of the Digital Cluster Bonn

Bonn digital authorities: Close cooperation for the responsible use of artificial intelligence

How DSA and GDPR interact

The European Data Protection Board (EDPB) clarifies important questions about the interaction of the GDPR with the EU Digital Services Act (DSA). Application aids (so-called guidelines) have now been published for this purpose. The EDPB guidelines help the affected companies to implement the DSA requirements in accordance with the GDPR. The guidelines are the subject of a public consultation until October 31, 2025, and interested companies and citizens can comment.

Version 1.0: Citrix NetScaler ADC and NetScaler Gateway: Attacks on unprotected instances

Fan page process goes into the next round

BfDI publishes guidance on the legally compliant use of social networks

Popular information brochure updated

The information brochure on data protection law with the legal texts of the GDPR and BDSG is available in a new edition.

Version 1.1: SonicWall Gen 7 Firewalls - Ransomware attacks observed

Version 1.2: Microsoft SharePoint - Massive exploitation of a zero-day vulnerability

Version 1.1: Citrix NetScaler ADC & NetScaler Gateway - Critical security vulnerabilities closed and some actively exploited

Version 1.1: Ivanti EPMM - Zero-day vulnerabilities are actively exploited

Impact of AI on cyber threat from now to 2027

An NCSC assessment highlighting the impacts on cyber threat from AI developments between now and 2027.

Version 1.0: Fortinet FortiOS - Attackers installed persistent read access to firewalls

Version 1.1: Ivanti Connect Secure - Critical vulnerability exploited in end-of-support and unpatched systems

Information about the change in sending warnings

Version 1.0: Kubernetes - Critical vulnerability in the Ingress NGINX Controller allows cluster takeover