CERT-Bund is the national Computer Emergency Response Team that serves both Germany's federal administration and the country at large.

Every day, CERT-Bund receives a large amount of information from its partners and other trusted external sources (such as Shadowserver, Team-Cymru oder Spamhaus) mon security incidents relating to IT systems in Germany. Among other things, this includes information on systems that are most likely to be infected by malware, systems that are openly accessible from the Internet and have critical security vulnerabilities, and open server services that could be (or have already been) abused for DDoS reflection attacks against third-party systems

This information is automatically evaluated and assigned to the responsible network operators based on the IP addresses of the affected systems. The operators are then informed about the anomalies in their network segments. If one of these network operators is a provider, it is asked to inform its affected customers accordingly. CERT-Bund is not able to identify providers' end customers; only a provider can ascertain which customer was using a specific IP address from its network segment at a particular point in time.

This website provides information on the reports sent by CERT-Bund to German network operators, instructions on how to remedy the reported security problems (HOWTOs) and (FAQ).

Digital Signature

All CERT-Bund reports are digitally signed with the following PGP key:

pub   4096R/C4A3A3B26A180F1C 2014-06-04

      Key fingerprint = 68F3 4CEB 9366 CA8E 43DE  1C54 C4A3 A3B2 6A18 0F1C

uid                          CERT-Bund Reports (sign only) 

Download Public PGP key for CERT-Bund reports