Cybersecurity Threat Trends for EU Companies

🛡️ New insights on Europe’s cybersecurity landscape! The European Union Agency for Cybersecurity (ENISA) has just released its Threat Landscape 2025, mapping nearly 4,900 cyber incidents across Europe between July 2024 and June 2025. The findings reveal a rapidly evolving digital battlefield, one that’s smarter, faster, and increasingly intertwined with global politics. 🌍 This year’s report offers valuable insights into cybersecurity across the EU, from ransomware and phishing trends to AI-driven threats and cross-sector vulnerabilities. I’ve shared a short summary and my key takeaways from the report, focusing on what these trends mean for public institutions, businesses, and the resilience of Europe’s digital ecosystem. #Cybersecurity #ENISA #ThreatLandscape2025 #EU #CyberResilience #InfoSec #AI

#Cybersecurity #Trends & #Lessons from #France, #Netherlands, #Belgium, and #Luxembourg (2024–2025) Cyber threats are escalating across Europe, and organizations are responding with urgency. Here’s a snapshot of what’s shaping the landscape: #France: +15% rise in incidents, with Olympic-related attacks contained. France leads in mobile security standards and is rolling out NIS2 compliance. #Netherlands: 1 in 5 companies hit by cyberattacks. AI-driven phishing and deepfakes are emerging threats. New Cybersecurity Act enforces board-level accountability. #Belgium: +31% attack surge, including pro-Russian DDoS campaigns. Government launches €100M+ cybersecurity outsourcing for 10 ministries. NIS2 and CyberFundamentals drive resilience. #Luxembourg: +102% attack growth—2nd highest globally. DDoS attacks disrupted emergency services; a telecom breach triggered national crisis response. #Regional #Takeaways: Geopolitical tensions are fueling cross-border cyber campaigns. Ransomware, supply chain risks, and AI-enabled threats are top concerns. EU regulations (NIS2, Cyber Resilience Act) are raising the bar for governance. Cybersecurity is now a #strategic, #board-#level #priority. #AI is reshaping the threat landscape: deepfake scams, synthetic phishing, and autonomous attack tools are challenging traditional defenses. Organizations that invest in robust security, stay ahead of regulation, and foster a culture of vigilance will be best positioned to thrive. #Cybersecurity #AI #France #Netherlands #Belgium #Luxembourg #NIS2 #CyberResilience #Boardroom #DigitalTrust #Ransomware #Deepfakes #SupplyChainSecurity

Europol has just released the 10th edition of the Internet Organised Crime Threat Assessment (IOCTA), a highly authoritative report that provides a comprehensive overview of the evolving cybercrime landscape. This year's report highlights critical trends in cyber-attacks, online fraud, and the increasing use of AI and cryptocurrencies in criminal activities. Key insights include: - Recent law enforcement operations have prompted ransomware groups to splinter and rebrand under different disguises - The continuous takedowns of forums and marketplaces on the dark web have shortened the lifecycle of criminal sites - Ransomware groups increasingly target small and medium-sized businesses because they have lower cyber defences - Users continue to fall victim to phishing campaigns, business email compromise (BEC), investment and romance fraud - Offenders appear to be underage in many cases, and some have started leveraging AI, which is already becoming a component in their toolbox - The use of cryptocurrencies in a wider variety of crime areas has also become more noticeable - Mainstream end-to-end encryption (E2EE) communication platforms are increasingly used by offenders - The use of cryptocurrencies in a number of areas of crime has become more evident Stay informed and ahead of cyber threats by reading the full report here: https://lnkd.in/dQTV2Je6 #CyberSecurity #CyberCrime #Europol #IOCTA2024 #AI #Cryptocurrency #CyberThreats #threatintel #cti

The European Union Agency for Cybersecurity (ENISA) reports a surge in #cyberthreats against European financial institutions, driven by geopolitical tensions, cybercrime, and hacktivist activities. Whilst cybercrime groups focused on AI powered scams, hacktivists conducted DDoS attacks, and state-nexus actors like Lazarus Group 🇰🇵 and APT29 🇷🇺 remained espionage focused, targeting crypto platforms and financial networks. 🔸488 incidents were publicly reported across the European financial sector from January 2023 to June 2024. 🔸Geopolitical events like Russia 🇷🇺 Ukraine 🇺🇦 conflict triggered DDoS attacks on financial institutions. 🔸Hacktivists drove ideologically motivated cyberattacks, primarily against banks and government finance bodies. Notable trearts 👉DDoS Attacks (58%) – Majorly targeted banks and financial government sites, causing temporary disruptions. We have seen similar trends in Australia 🇦🇺 during late 2024, where a few big banks were affected. 👉Supply Chain Attacks (29 cases) – Ransomware and data breaches in third-party vendors impacted financial firms. 👉Data Breaches (39%) – Threat actors exploited vulnerabilities in credit institutions, insurers, and investment firms. 👉Ransomware (29%) – Affected financial service providers and insurers, leading to financial loss and data leaks. 👉Social Engineering (38%) – Phishing, smishing, and vishing used to steal customer credentials. Banking trojans were also used to compromise users’ banking credentials. 👉Fraud (6%) – Crypto scams, impersonation fraud, and investment fraud surged. Mitigation strategies 🎯Enhance SOC capabilities for early detection of ransomware, fraud, and AI driven threats. 🎯Invest in DDoS mitigation for proactive defence against politically motivated cyberattacks. 🎯Improve phishing defences to combat AI driven threats through enhanced email security, endpoint protection, and user awareness. 🎯Strengthen #supplychain security and third-party risk management. 🎯Financial institutions must collaborate on intelligence sharing to counter evolving threats. Read on ENISA Threat Landscape – Finance Sector https://lnkd.in/gTf8sB3T

European Union Agency for Cybersecurity (ENISA) has released its "Threat Landscape 2025" report. Summary below on findings for Industrial and Manufacturing companies: Ransomware: Most significant threat - 59% of incidents in manufacturing sector - Akira (49%), Qilin (20%), FOG (10%) - Prolonged downtime (Medion, Optibelt cases) State-Aligned Espionage: - China-linked PurpleHaze, ShadowPad campaigns - Focus on IP theft in defense & automotive - German manufacturing a key target Hacktivism & Geopolitics: - DDoS & OT disruption attempts - Driven by Russia-Ukraine conflict Defense/automotive manufacturers hit hardest Geographic Hotspots: - Germany, Italy, Spain, France, Belgium most impacted - Germany: highest ransomware activity Emerging Trends: - Ransomware-as-a-Service (RaaS) fragmentation - Tools disabling EDR, rapid data theft - OT increasingly at risk of physical disruption The DeNexus team has built the Heatmap below. Sources from the ENISA report: - Ransomware impact on manufacturing (p. 25–26) - State espionage campaigns targeting industry (p. 26) - Hacktivist DDoS/OT disruption attempts (p. 25) - Supply chain compromises & service provider breaches (p. 10–11) Link to the report: https://lnkd.in/dXiMrEFe #manufacturing #OTcyber #CRQ #CRQM #CyberRisk

Google Threat Intelligence Group (GTIG) released a new report confirming an expansion of DPRK IT worker operations targeting Europe. This geographic shift, likely driven by increased US scrutiny, brings heightened risks of espionage, data theft, and extortion to companies engaging remote IT talent in the region. Our latest research details this trend and evolving tactics. Findings from the report highlight: 🌍 Expanding operations worldwide, using an ecosystem of fraudulent personas for flexibility. ⚠️ Employing extortion and exploiting virtualized infrastructure as key adaptive strategies. 🤝 Rapidly growing global infrastructure with facilitators including in the UK to sustain operations. Read our report here: https://lnkd.in/gbN8bQbz

EU Cybersecurity Report: A Path to Enhanced Resilience Today, European Union Agency for Cybersecurity (ENISA) published its first State of Cybersecurity in the Union report, assessing cybersecurity maturity across Europe. Key highlights: 🔍 Findings: 🎯 Rising cyber threats, with vulnerabilities exploited across sectors. 🎯 Increased cybersecurity awareness among citizens, yet education gaps remain. 🎯 Variability in critical sector preparedness complicates uniform policy implementation. 🛠️ Recommendations: 1️⃣ Strengthen EU-level support and harmonization. 2️⃣ Revise the EU cyber incident response Blueprint. 3️⃣ Address supply chain risks via coordinated frameworks. 4️⃣ Expand cyber skills training and certification. 5️⃣ Enhance sector-specific resilience using the Cyber Solidarity Act. 6️⃣ Foster widespread cyber hygiene and awareness. 💡 Future Focus: AI and Post-Quantum Cryptography will shape cybersecurity priorities. Unified efforts in innovation, research, and operational readiness are vital. 💬 How is your organization preparing for these evolving challenges? Share your insights below! #Cybersecurity #AI #ENISA #DigitalEurope #Innovation

[THREAT INTELLIGENCE] APT Campaigns in Europe (🇩🇪Germany in Focus) ℹ️ The Federal Office for Information Security (BSI) provides a curated overview of state-aligned and strategically motivated threat actors (APT groups) that have been active against Germany and partner European countries in recent years. ℹ️ The BSI list includes: • Threat actor names + aliases • Targeted sectors (e.g., government, critical infrastructure, industry) • Operational characteristics ⚠️ Limitations & Considerations ■ The list is not exhaustive: • Some incidents remain confidential or unreported • Advanced actors may evade detection or attribution ■ Attribution can be: • Uncertain or evolving • Dependent on available intelligence ■ The threat landscape is dynamic: • Actor goals and targeting change over time • The list is continuously updated based on BSI assessments ✷ Cyber threats in Europe are more often caused by persistent, goal-focused threat actors rather than random attacks, making actor-focused intelligence crucial for an effective cybersecurity strategy. 📌 Source: Federal Office for Information Security (BSI) 🔗 https://lnkd.in/e95Wxw3G #APT #Germany #threathunting #threatdetection #threatanalysis #threatintelligence #cyberthreatintelligence #cyberintelligence #cybersecurity #cyberprotection #cyberdefense

⚖️ GDPR Fines The DLA Piper GDPR Fines and Data Breach Survey: January 2026 confirms a trend that many organizations already feel operationally: ➡️ more #cyber incidents, more breach notifications, and sustained high enforcement activity across Europe. #GDPR enforcement is not slowing down, it is maturing and sharpening its focus, especially where #cybersecurity and #governance fail. 💶 €1.2 Billion in Fines European supervisory authorities issued approximately €1.2 billion in GDPR fines in 2025. 🚨 22% Increase in Data Breach Notifications For the first time since GDPR came into force: ➡️ average daily #breach notifications exceeded 400, ➡️ reaching 443 notifications per day, ➡️ a 22% year-on-year increase. 🔐 Top Enforcement Areas Fines related to violations of: ➡️ integrity and confidentiality, ➡️ security of processing, continue to dominate enforcement across jurisdictions. Notably: ➡️ processors are increasingly fined directly, not only controllers, ➡️ #supplychain #security is under growing regulatory scrutiny. This aligns with the rise of: ➡️ ransomware, ➡️ third-party breaches, ➡️ cloud and outsourcing incidents. 🌍 International Data Transfers The largest GDPR fine in 2025 (€530 million) was imposed by the Irish DPC for breaches of international data transfer rules. Although the record fine (€1.2 billion against Meta in 2023) still stands, this shows that: ➡️  cross-border data transfers remain one of the most expensive GDPR #risk areas. ⚖️ Compensation Claims GDPR risk does not stop with regulators. The survey highlights: ➡️ increasing compensation claims, ➡️ evolving CJEU case law on non-material damage, ➡️ growing litigation exposure following incidents. With the growing number of #cyberattacks and #cyberincidents this year, and very likely next year, organizations should expect fines to follow incidents. Cybersecurity maturity is a must. When a serious incident happens, regulators will ask: ➡️ Were appropriate technical measures in place? ➡️ Were organizational and administrative measures implemented? ➡️ Was governance effective before the incident — not after? Beyond technical security, companies must strengthen administrative and governance measures to remain compliant with: ➡️ GDPR and #UKGDPR, ➡️ the #AIAct, ➡️ and other privacy and digital regulations. Regulators are clearly strengthening enforcement and penalties, and #compliance gaps are becoming more visible after incidents. #ITGRC #TheSOC2 #ITGRCAdvisory #BWAdvisory #AkademiaITGRC #Privacy #DataProtection #RiskManagement Cyber London CyberMadeInPoland Instytut Compliance UAE IAA - UAE Internal Auditors Association Piotr Kawczyński ISACA London Chapter Cloud Security Alliance Marta Chalimoniuk-Nowak

The latest State of Cybersecurity in the EU report provides a critical snapshot of the EU’s cybersecurity landscape, revealing both progress and pressing challenges. Here are key highlights from the report 🔑 The NIS2 Directive and new initiatives like the Cyber Resilience Act aim to enhance cybersecurity across sectors. 🔑 Ransomware, DDoS attacks, and geopolitical cyber activities dominate, with supply chain vulnerabilities adding complexity. 🔑 Progress & Gaps: The EU Cybersecurity Index shows progress (62.65/100), but disparities in R&D, education, and policy implementation persist. 🔑 Sector Readiness: Telecoms, finance, and electricity sectors lead in maturity, while health and gas sectors require greater attention. 🔑 Future Challenges: Emerging risks from AI, quantum computing, and unpatched vulnerabilities demand adaptive strategies. 💡 So, what is next? Harmonizing national efforts and fostering a skilled cybersecurity workforce. Strengthening supply chain security and enhancing public awareness. Leveraging the Cyber Solidarity Act for better crisis management. The report underscores the need for collective action to address evolving threats and ensure a secure digital future. 👉 Read more and join the conversation to build a resilient cyber ecosystem. #Cybersecurity #DigitalResilience #ENISA