The European Union Agency for Cybersecurity (ENISA) has released its latest report titled "State of Cybersecurity in the Union," which is published biennially, highlighting the ongoing security challenges facing member states. Despite notable progress in defensive capabilities, the report confirmed that the level of cyber threats remains extremely high in light of a changing technical and geopolitical environment.
The impact of artificial intelligence and ideological motives
The report indicated that the threat landscape has become more complex, with ideology playing a key role in motivating cyberattacks, in parallel with geopolitical developments that shape the nature of these activities. The agency also warned that artificial intelligence acts as a "force multiplier," as it contributes to accelerating the discovery and exploitation of security vulnerabilities, thereby enhancing the capabilities of both attackers and defenders.
Cyber maturity indicators in the European Union
The ENISA Cybersecurity Index for 2026, which measures the maturity of capabilities and resources in member states, revealed an average score of 71.53 out of 100. The report explained that most EU countries have reached advanced or mature levels in their security capabilities, with a general consensus in national policies, which reached an average maturity score of 66.72 points.
Why does this news matter?
The importance of these findings lies in demonstrating the gap between legislative and technical development and the field reality of attacks. Despite progress in implementing directives such as (NIS2) and the Cyber Resilience Act, the report emphasizes the need for:
- Cross-border coordination: The necessity of simplifying the overlap between different legislations to enhance joint response.
- Supply chain management: Addressing technical risks that transcend national borders and affect critical infrastructure.
- Operational coordination: Activating the "2025 Roadmap" to ensure faster and more efficient information sharing during crises.
In this context, the agency's Executive Director, Juhan Lepassaar, confirmed that the progress made represents a strong foundation, but it requires constant updating of strategies to keep pace with increasing threats, especially after the detection of cyber incidents targeting cooling systems in data centers, which revealed gaps in operational coordination.