ENISA: 45% of surveyed EU IT providers take months to patch
The EU Cybersecurity Index averages 71.53, but ENISA says the figure is not comparable with 2024 and does not show supplier patch speed.
Stories per day · 30 days
2 RSS
Relatedcyber-resilience-act1data-rights1dora1enisa1facebook1financial-sector1instagram1meta1nis21patch-management1red-team1threat-intelligence1tiber-eu1tlpt1uk1
26 stories, newest first · one card per story
Stories tagged #eu
Meta business terms allow use of linked content; EU and UK users can object
After backlash, Meta moved the effective date from October 30 to November 20 and removed the word train.
DORA TLPT Requirements Explained: Where Threat Intelligence Fits
DORA requires selected EU financial firms to run threat-led penetration tests at least every three years.
Preparing an AI-Augmented SIEM for the EU Cyber Resilience Act: A Practitioner Case Study
A practitioner case study maps AI-augmented SIEM SEUXDR to EU Cyber Resilience Act lifecycle and reporting duties.
EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
RUSI says uneven EU rules leave members exposed to Huawei and ZTE in critical infrastructure.
Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments
DOJ charged Oxygen Forensics leaders for hiding Russian ownership while selling forensic tools to US and European agencies.
2
Europe’s technology backbone is becoming a cyber target
ENISA’s 2026 report says DDoS and supplier compromises drove 8,257 EU cyber incidents in 2025.
The EU spent billions on a cyberattack shield — nobody checked if it worked
EU auditors found the bloc's €1.4 billion cyberattack early-warning system is not fully operational and its effectiveness is unverified.
EU Auditors Warn Information-Sharing Gaps Are Hindering Cyber Incident Response
EU auditors criticize the bloc's cybersecurity strategy for critical information-sharing gaps hindering incident response.
1
DORA Year Two: Can Your SOC Actually See the Attack?
DORA year two pushes EU financial firms to prove SOC visibility and timely incident detection.
European Commission set to push social media restrictions, safety requirements into law
The European Commission proposed the EU KIDS Act, barring under-13s from social media, mandating safe-by-design rules, and fining violators up to 6% of global revenue.
1
EU chief wants joint response to cyberattacks, sabotage
European Commission President Ursula von der Leyen proposed an EU emergency mechanism to convene member states against cyberattacks, sabotage, and drone incursions.
EU president warns AI agents "escaping their environment" are just a preview of what's coming
EU Commission president warned AI agents escaping environments preview deeper risks and pledged EU work with Canada and the UK on AI safety.
EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media
EU Commission President von der Leyen warned AI will enable unprecedented hacking and announced Kids Act and Digital Fairness Act proposals regulating social media.
2
EU chief wants joint response to cyberattacks, sabotage
EU Commission President von der Leyen proposed an Emergency Security Protocol letting any member state convene joint responses to cyberattacks and sabotage.
1
Self-improving AI should slow down, von der Leyen tells EU lawmakers
EU Commission President von der Leyen urges frontier labs to slow self-improving AI, citing hacking risks, and announces Canada and UK partnerships on AI security.
ENISA: Frontier AI Is Changing the Speed of Cyberattacks. Europe Needs to Catch Up
ENISA warns frontier AI compresses attack lifecycles to minutes, with exploits possible within 15 minutes of disclosure and median 72-minute breach-to-exfiltration times.
5
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities
ENISA launched the CRA Single Reporting Platform, making EU manufacturers report actively exploited vulnerabilities and severe incidents through one portal.
Launching managed CRA Article 14 reporting for open source maintainers
EU Cyber Resilience Act Article 14 reporting obligations begin, requiring 24-hour exploit and incident reports; Patchstack launches managed compliance for open-source maintainers.
2
EU's Cyber Resilience Act starts the 24-hour vulnerability clock
EU Cyber Resilience Act reporting rules take effect, requiring manufacturers to disclose actively exploited vulnerabilities to ENISA within 24 hours, with fines reaching €15 million.
EU Cyber Resilience Act to Enforce New Reporting Requirements
EU Cyber Resilience Act reporting obligations begin Friday, requiring businesses to notify serious product security incidents within 24 hours.
NIS2 compliance: Fixing IAM and access control before the 2026 audit
EU NIS2 enforcement deadlines approach; organizations are urged to prioritize service account inventory, lifecycle offboarding, and phishing-resistant MFA before audits.
1
ChatGPT and Reddit now face EU's toughest online safety rules
ChatGPT and Reddit now fall under the EU's toughest online safety rules, adding new regulatory burdens after rapid growth.
Russian Hackers Phish EU Officials Over Messaging Apps
Russian nation-state hackers are phishing EU officials via Signal and WhatsApp as espionage shifts from email to messaging apps.