BSI warns of serious security gap