Cyber threat situation The cyber threat situation in Germany is characterized by the increasing complexity and interdependence of the technology used and by constantly changing threats. The digitalization of modern societies has made them more vulnerable and increased the possibility of misuse in cyberspace. It also makes it much easier to attack the private sphere of individuals. The impact of cyber attacks is not limited to cyberspace. Successful attacks may cause economic, political and even personal harm. Attacks on government institutions for the purpose of spying or sabotage can interfere with the functioning of public administration, the armed forces and the security authorities, thereby having an impact on public security and order in Germany. Cyber attacks on the energy supply network can shut down large segments of public and private life. Targeted cyber attacks on banking infrastructure or market manipulation can threaten the financial markets, with far-reaching consequences for the economy of Germany and the rest of the world. The manipulation of IT health-care applications, of IT-supported traffic routing systems or of self-driving cars and digital networks with which cars can communicate with each other and with traffic infrastructure can lead to very real threats to life and health. Intentionally spreading false information with the help of hacked IT systems can be used to manipulate public opinion, creating long-term threats to our open society and democracy. Attackers often have a criminal, extremist/terrorist, military or intelligence background. The quantitative and qualitative diversity of potential actors at home and abroad and the technical possibilities for disguise make it difficult to detect, prevent and prosecute cyber attacks and identify attackers. Political and military conflicts are often accompanied by cyber campaigns or are waged in cyberspace below the threshold of armed conflict. This makes it more difficult to assess the political significance of cyber attacks and to decide what counter-measures to take. The number and sophistication of cyber attacks is constantly growing, while IT systems are often inadequately protected. Some attacks show a high level of professionalism. Today, the tools to carry out attacks are available to state actors, criminal groups and individuals alike. Classic defences are often inadequate to protect 5