(de-news.net) – Strategic concerns in Europe’s digital landscape are being highlighted by a number of significant developments. Fresh cybersecurity worries have been raised by a suspected spyware attack against German Government officials, and consumer advocates are demanding more accountability and more regulation of digital platforms. In the meantime, the European Central Bank is continuing preparations for the digital euro with significant infrastructure contracts and technical development initiatives, and cryptocurrency exchange Binance is gradually resuming customer withdrawals following a multibillion-dollar cyberattack.

German Federal Digital Minister Karsten Wildberger (CDU) has confirmed a cyberattack targeting electronic devices belonging to Bundestag members and Government officials, raising concerns about the security of sensitive political and Government communications. According to Wildberger, Apple issued threat notifications warning that certain devices may have been compromised by mercenary spyware. The Federal Office for Information Security (BSI) responded promptly by sending written notifications to all individuals identified as potentially affected.

Reports indicate that iPhone users began receiving Apple’s warnings on 29 October, informing them that their devices had been targeted in a suspected spyware operation. However, the BSI emphasized that the available information did not establish whether the attacks had succeeded. The agency also acknowledged that the precise circumstances surrounding the notifications, including the reasons for the targeting and the identity of those responsible, remained unclear. Nevertheless, because Apple considers its threat notifications highly reliable indicators of targeted attacks, the BSI advised recipients to proceed on the assumption that their devices might have been compromised.

Wildberger expressed concern about the incident but provided no additional technical details regarding its scope or possible perpetrators. Spyware presents a particularly serious security risk because such programs can install themselves without a user’s knowledge or consent and secretly transmit confidential information to external parties. According to the BSI, compromised devices could potentially expose private messages, including communications conducted through encrypted messaging services, as well as telephone calls, contact lists, calendar information and location data. Attackers might also gain the ability to activate a device’s microphone and camera remotely, creating additional risks for personal privacy and sensitive Government communications.

Consumer advocates call for stronger safeguards on digital platforms

Meanwhile, Ramona Pop, head of the Federation of German Consumer Organizations (VZBV), has called for more comprehensive regulation of digital platforms, artificial intelligence chatbots and messaging services. Her proposals focus on making security and user protection standard features of digital services rather than optional measures that consumers must activate themselves.

Pop argued that potentially harmful design features, particularly infinite scrolling, should generally be disabled for children and teenagers. Adults, by contrast, should retain the freedom to decide whether to activate such functions. The underlying objective, she maintained, should be to establish reliable safety protections as a basic requirement across digital services rather than treating them as additional features available only to users who actively request them.

She also questioned whether age restrictions could adequately address the risks associated with digital platforms. Such limitations can frequently be circumvented and therefore do not necessarily resolve the underlying problems. Instead, Pop called for regulatory attention to the business models themselves, particularly practices that exploit personal trust and a sense of interpersonal closeness to obtain sensitive information or provide potentially harmful advice. In her assessment, effective consumer protection requires addressing the commercial incentives and design choices that create these risks.

Pop also advocated stronger legal accountability for platforms distributing user-generated material. Digital service providers have traditionally relied on legal protections limiting their liability for content submitted by users. However, she argued that this approach deserves reconsideration because algorithmic systems actively determine which information is presented to individual users and how widely particular material is distributed. Platforms should therefore assume greater responsibility for the content they promote and disseminate, including potential legal liability for their distribution decisions.

Binance gradually restores withdrawals after multibillion-dollar cyberattack

Binance, the world’s largest digital asset exchange, has begun gradually restoring customer withdrawals following a cyberattack involving an estimated 6.3 billion US-dollars in digital assets. The company initially suspended deposits and withdrawals to contain the damage but assured customers that their holdings would remain protected and all losses covered.

Binance subsequently reported that approximately 95 percent of the stolen funds had been replaced using corporate reserves, up from an earlier estimate of 90 percent. Partner companies also helped freeze approximately 3 billion US-dollar in affected assets to prevent further transfers. However, blockchain analytics firm TRM reported that attackers had attempted to move stolen cryptocurrency before it could be frozen, leaving approximately $2.4 billion beyond the reach of the relevant issuers.

Check Point cybersecurity analysts identified a potentially conventional entry point: a compromised laptop belonging to a development engineer with extensive access privileges. The preliminary findings pointed to weaknesses in employee-device security and internal access controls rather than the underlying blockchain technology. Recommended safeguards include separating development systems from transaction authorization, introducing mandatory policy checks and imposing strict limits on transaction volumes and transfer speeds. Analysts estimated that much of the stolen cryptocurrency had been transferred within approximately 20 minutes, highlighting the need for rapid detection and intervention.

To restore customer confidence, Binance announced plans to publish an updated Proof of Reserves report on November 3. The cryptographic verification method allows users to check whether their account balances are fully backed by assets held in the company’s wallets, providing greater transparency about the exchange’s financial position. If the reported figures are confirmed, customers could avoid significant direct financial losses despite the scale of the incident. Binance has pledged to absorb the losses using corporate reserves rather than imposing reductions on customer holdings. With approximately $6.3 billion in affected assets, the attack could rank as the largest cryptocurrency theft in history.

ECB advances technical preparations for the digital euro

Separately, the European Central Bank (ECB) has taken another step toward establishing the technical infrastructure for the digital euro by awarding a 10-year contract for essential connectivity services to a consortium comprising Italian payment technology company Nexi and Deutsche Telekom. Spanish telecommunications provider Telefónica has also been selected as a second independent network operator. The decision to appoint two separate providers is intended to strengthen the reliability of the planned infrastructure while reducing dependence on a single supplier. By establishing an independent alternative for critical network services, the ECB aims to improve operational resilience and ensure that the systems supporting the digital euro can continue functioning if one provider experiences technical difficulties.

Nexi, one of Europe’s leading payment technology companies, specializes in digital payment infrastructure, card terminals and settlement services for banks and retailers. Working with Deutsche Telekom, the company will develop and operate a scalable, resilient network connecting the data centers of the Digital Euro Service Platform (DESP). The infrastructure will also provide secure data connectivity for commercial banks, payment service providers and national central banks participating in the Eurosystem. The connectivity contract represents only one part of the ECB’s broader technical procurement initiative. Beyond the network infrastructure, the Central Bank is developing five additional technological components considered essential to the digital currency’s architecture. These include software for fraud prevention and risk management, a directory service that enables users to be identified through telephone numbers or email addresses, and mechanisms for the secure exchange of transaction data.

The remaining components comprise systems supporting offline payments without an active internet connection and the development of a standardized reference application. Together, these elements are intended to establish the technical foundations required for the digital euro to operate across different payment providers and national banking systems. The range of components also reflects the complexity of creating a common digital payment infrastructure capable of supporting multiple types of transactions and users.

The ECB has been working on the digital euro for several years, with the proposed currency intended to complement physical cash rather than replace it. The initiative reflects an effort to establish a European alternative in a digital payments market currently dominated by US-based companies, including PayPal, Mastercard and Visa. By developing its own digital currency and supporting infrastructure, the Eurosystem aims to strengthen Europe’s position in electronic payments and provide an alternative to existing commercial payment networks. The Central Bank is targeting 2029 for the introduction of the digital euro, with a pilot project planned for 2027. The pilot is expected to precede the broader launch and forms part of the ECB’s ongoing technical preparations. However, the timetable remains dependent on the establishment of an appropriate legal framework. The necessary legislation must be in place before the digital euro can proceed from its current development and testing stages toward full implementation.