As long as ethical security researchers have to face criminal charges for responsibly disclosing vulnerabilities, this will not get any better.
(Of course that’s not the only thing that needs to change)
this post was submitted on 18 Sep 2025
28 points (96.7% liked)
Cybersecurity
8343 readers
10 users here now
c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.
THE RULES
Instance Rules
- Be respectful. Everyone should feel welcome here.
- No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
- No Ads / Spamming.
- No pornography.
Community Rules
- Idk, keep it semi-professional?
- Nothing illegal. We're all ethical here.
- Rules will be added/redefined as necessary.
If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.
Learn about hacking
Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub
Notable mention to !cybersecuritymemes@lemmy.world
founded 2 years ago
MODERATORS
Maybe I'm naive, but that number does not seem reasonable. It basically says that 5% of German GDP is lost because of cyber crime. Are the writers infosec consultants maybe?
Posted this in another thread, but it fits also here:
According to 2023 report by Cybersecurity Ventures (pdf), Cybercrime would cost the world USD 9.5 trillion. If it were measured as a country, then 'cybercrime land' would be the world’s third largest economy after the U.S. and China. Download the Report.
The insight of over 2,700 risk management professionals from 94 countries and territories, analyzed and published in the 2023 version of
The Allianz Risk Barometer -again, for 2023- indicated that close to half — 45 percent — of the 2,700 surveyed experts say cyber incidents are the most feared cause of business interruption, even more so than natural disasters or energy concerns.
These are number from 2023, so they are likely higher today.
It somehow feels that the 1.5% of GDP European Nato members have obliged to spend for security outside traditional military budgets - which includes exactly such cyber attacks - are well spend, because the damage caused by such incidents is far higher.
It's hard to get reliable numbers. One study I could find is a review published by the World Bank in 2024 that analyzes the long-term development of cyber incidents and their economic costs. Among others, it says:
According to the UK Cabinet Office, in 2011, the UK government estimated that the costs of cybercrime was USD 33.67 billion or about 1.3% of the country’s GDP, with the largest share posed to businesses—about 77.78%. Grant Thornton (2021) shows that in 2014, the total cost of cybercrime in Ireland was USD 695.5 million, and then, in 2020, it increased dramatically to USD 10.5 billion, or 2.5% of the country’s GDP.
Note that the 1.3% of UK's GDP and Ireland's 2.5% relate to 2011 and 2014, respectively. So we may reasonably assume it's much higher. Although the numbers in this review are probably not fully comparable with Bitkom's survey, it provides useful insights, and the 5% don't seem so far-fetched.