BSI mandated to share zero-days with BND: Reform draft criticized (heise.de)

• BMI draft requires BSI to forward zero-days to BND before patches exist.
• Kipker warns of eroded trust from security researchers and increased risk to critical infrastructure.
• Draft expands surveillance powers without evidence of effectiveness of offensive cyber operations.

"A commentary by Dennis-Kenji Kipker criticizes the German Interior Ministry's draft reform of intelligence law, which would compel the Federal Office for Information Security (BSI) to share zero-day vulnerabilities with the Federal Intelligence Service (BND) before patches are available. Kipker argues this undermines trust between the state and the IT security community and contradicts BSI's mandate. The draft also expands surveillance powers without evidence that offensive cyber capabilities yield security benefits."