Europe’s technology backbone is becoming a cyber target
ENISA’s 2026 report says DDoS and supplier compromises drove 8,257 EU cyber incidents in 2025.
ENISA’s Threat Landscape 2026 reviews 8,257 incidents recorded in the EU during 2025, drawn mainly from open sources and anonymized member-state reporting. DDoS accounted for 51.3% and unauthorized access for 39.5%, with public administration the most targeted sector at 31.8%. A ransomware attack on a Swedish IT supplier disrupted services for about 200 municipalities and regional authorities. Phishing made up 77.8% of identified social-engineering techniques, and attackers also used ClickFix, supply-chain compromises, and AI to speed existing operations.
- ENISA analyzed 8,257 EU incidents recorded during calendar year 2025.
- DDoS was 51.3% of incidents; unauthorized access was 39.5%.
- Public administration accounted for 31.8% of incidents, mostly DDoS.
- Ransomware at a Swedish IT supplier affected about 200 municipalities.
- Phishing was 77.8% of identified social-engineering techniques, including ClickFix.
- Organizations
- ENISA
From the original article
4 min read at helpnetsecurity.com
Disruptive attacks on public-facing services, financially motivated cybercrime and compromises of shared technology providers are increasing cybersecurity risks across Europe. ENISA’s Threat Landscape 2026 identifies cybercrime, state-linked activity, foreign information manipulation and interference, hacktivism and vulnerability exploitation as key threats.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.