An EU survey found widespread employee exposure to suspicious messages and strong interest in cybersecurity training, while identifying time, cost and employer support as barriers. ENISA also highlights threats from its latest landscape report and workplace learning and
ENISA’s 2025 EU threat-landscape analysis finds ransomware, DDoS and vulnerability exploitation remain prominent, with public administration the most targeted sector and cyber dependencies a source of significant risk.
ENISA launched a platform for reporting actively exploited product vulnerabilities and severe incidents under the EU Cyber Resilience Act, enabling manufacturers to notify relevant authorities through a single channel.
ENISA now oversees 20 CNAs under its CVE Root, including 12 onboarded directly and 8 transferred from MITRE Root, as it expands support for vulnerability identification and CVE record publication.
ENISA is consulting on a draft EU certification scheme for managed security services. It proposes common baseline requirements and service-specific criteria, initially focused on incident response, and supports services provided under the EU Cybersecurity Reserve.
ENISA is implementing a healthcare cybersecurity support mechanism under a three-year, €6 million agreement with the European Commission and has published updated procurement guidelines for hospitals and healthcare providers.
ENISA has launched a podcast series on cybersecurity topics. Its first episode explores Frontier AI’s impact on cybersecurity and discusses ENISA recommendations for building capabilities to address machine-speed threats.
ENISA’s survey of 194 organisations across 31 countries found gaps between SMEs’ awareness of the Cyber Resilience Act and practical readiness, with microcompanies generally less mature and seeking templates and financial support.
Team Europe won the first Women International Cybersecurity Challenge in Dublin. Nine regional teams competed in technical challenges including cryptography, forensics, exploitation, hardware security, and attack and defence.
ENISA has opened data collection for its 2027 NIS360 assessment of cybersecurity maturity and criticality in high-criticality sectors. The survey closes on 30 October 2026.