Top Highlights
-
EU cybersecurity maturity is improving but threats remain substantial: ENISA’s new index scores the bloc 71.53/100, with serious disruption still a realistic possibility.
-
Progress is uneven: Supply-chain management scored 89.91, while national incident-response teams averaged just 54.76; skills shortages and smaller organisations deepen capability gaps.
-
AI is accelerating cyber risk: It helps attackers scale phishing and exploit vulnerabilities faster, while also enabling defenders to identify and address weaknesses.
- Resilience depends on coordinated action: ENISA urges stronger crisis response and cross-border information sharing, better supply-chain and critical-infrastructure security, and sustained investment in skills.
What’s the Problem?
The European Union Agency for Cybersecurity (ENISA) says cyber threats to the EU remain substantial, even as the bloc’s overall defenses improve. Its 2026 Report on the State of Cybersecurity in the Union gives the EU an average maturity score of 71.53 out of 100. However, progress is uneven: national cybersecurity capabilities and supply-chain management scored strongly, while national incident-response teams averaged just 54.76. Member States, critical infrastructure operators, businesses and public institutions are all affected. ENISA’s assessment covers July 2024 to July 2026; the report was also covered by Industrial Cyber.
Several forces explain the continuing risk. Geopolitical tensions, financially motivated crime and ideologically driven attacks remain significant, while AI is helping both defenders and attackers find and exploit vulnerabilities faster. In 2025, DDoS attacks dominated reported hacktivist activity, often targeting public administration. Meanwhile, supply-chain weaknesses can expose many organizations at once, and skills shortages leave smaller or less-resourced entities especially vulnerable. Therefore, ENISA calls for stronger crisis response, better cross-border information sharing, more resilient critical infrastructure, improved supply-chain oversight and sustained investment in cybersecurity skills.
Potential Risks
ENISA’s warning applies to every business, not only critical infrastructure or large technology firms. Even as EU cybersecurity maturity improves, attackers continue to exploit weak defenses, and capability gaps leave some organizations—and their suppliers—more exposed. A compromised vendor can become an entry point into your systems. Consequently, a routine intrusion may halt operations, expose customer or employee data, delay deliveries, and trigger recovery costs, regulatory scrutiny, or lost contracts. Smaller firms may lack the staff and reserves to absorb the shock; larger firms may face wider disruption across complex networks. In either case, stronger security among some organizations does not eliminate risk for the rest.
Possible Remediation Steps
Timely remediation prevents persistent threats and supplier weaknesses from turning uneven cybersecurity capabilities into wider disruption.
Priority Actions
- Set risk priorities: Use the NIST CSF to assess critical services, rank vulnerabilities by likelihood and impact, and assign remediation owners and deadlines.
- Reduce exposure: Patch internet-facing and actively exploited systems first; disable unnecessary services, strengthen identity controls, and enforce multifactor authentication.
- Improve supplier security: Identify critical suppliers, assess their security practices, require timely vulnerability disclosure, and maintain contingency plans for supplier failure or compromise.
- Raise baseline capability: Apply consistent security standards across organizations and regions, while providing targeted support where resources or expertise are limited.
- Strengthen detection: Centralize relevant logs, monitor for suspicious activity, and test alerting for threats affecting high-value systems and supply chains.
- Prepare response and recovery: Maintain tested incident-response and continuity plans, define escalation channels, and verify that protected, restorable backups are available.
- Track progress: Measure remediation times, unresolved high-risk findings, supplier coverage, and exercise results; update priorities as threats and dependencies change.
Advance Your Cyber Knowledge
Stay informed on the latest Threat Intelligence and Cyberattacks.
Understand foundational security frameworks via NIST CSF on Wikipedia.
Disclaimer: The information provided may not always be accurate or up to date. Please do your own research, as the cybersecurity landscape evolves rapidly. Intended for secondary references purposes only.
Cyberattacks-V1
