Live advisories and ENISA's Threat Landscape, publications, NIS2 and DORA guidance — synced from official EU sources alongside research from our team.
Drawn from the ENISA Threat Landscape — the EU's flagship annual report on the cyber threat environment.
Directive (EU) 2022/2555 expands EU cyber rules to ~160k essential and important entities across 18 sectors, with board-level accountability and tougher supervision.
ENISA's flagship annual report on the EU cyber threat environment — prime threats, threat actors, motivations and sector impact across the last 12 months.
Sector-specific guidance for operators of essential services — energy, finance, health, transport, water and digital infrastructure — aligned to NIS2 Annex I.
Operational frameworks aligned to NIS2 Article 23 and DORA Article 19 — from triage through regulator notification and post-incident review.
Post-quantum readiness and cryptographic agility — moving estates onto NIST FIPS 203/204/205 algorithms ahead of harvest-now-decrypt-later risk.
European Cybersecurity Skills Framework (ECSF), CyberHEAD database and the European Cybersecurity Month (ECSM) — anchoring our Security Academy curriculum.
Milestones we track across DORA, NIS2, the Cyber Resilience Act and the EU Cloud Certification scheme — mapped to client programmes.
EU financial entities and critical ICT third-party providers operate under Regulation (EU) 2022/2554.
National authorities expand sectoral oversight; first enforcement actions against late transposers.
Annual flagship report — ransomware, FIMI, AI-enabled attacks and supply chain remain top vectors.
Vendors of products with digital elements begin mandatory vulnerability & incident notifications to ENISA.
Common criteria for cloud services across Member States; sovereignty controls finalised.
All in-scope products must meet essential cybersecurity requirements with CE marking.
Generative AI scales phishing, deepfakes and code-assisted intrusion; defenders adopt AI for triage and detection at SOC scale.
NIST FIPS 203/204/205 ratified; ENISA urges crypto-agility roadmaps and HNDL (harvest-now, decrypt-later) risk assessments.
Energy, water and healthcare see record ICS exposure; NIS2 brings ~160k+ EU entities into scope.
SBOM adoption, signed artifacts and CRA conformity reshape vendor due diligence across the EU.
Election cycles in 2024–2026 drive a sustained uplift in state-aligned influence operations.
Token theft, MFA fatigue and OAuth abuse become the dominant initial-access vector across cloud estates.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-85046 Google Chromium V8 Type Confusion Vulnerability This type of vulnerability is a frequ
View CSAF Summary Successful exploitation of these vulnerabilities could allow for an attacker to perform a man-in-the-middle (MitM) attack, cause a factory reset, wipe credentials, or retrieve sensitive information. The following versions
View CSAF Summary Successful exploitation of this vulnerability could result in memory corruption, a device crash, or a potential remote attack vector without the originating device receiving a CIP error indicating that the request could no
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to perform remote code execution on the computer running the client with elevated privileges. The following versions of IXON VPN Client are affected: VP
CISA and the Group of Seven (G7) Cyber Security Working Group released Preparing for the Post-Quantum Era: A Call to Action highlighting the urgent need for organizations and governments to begin transitioning to post-quantum cryptography (
View CSAF Summary Successful exploitation of these vulnerabilities could result in a loss of webserver availability or allow an attacker to inject malicious scripts that will be executed when other users access the affected page. The follow
View CSAF Summary Successful exploitation of this vulnerability could give an attacker the ability to run any commands or code of the attacker's choice on a target machine at the logged-in user's permission level. The following ve
View CSAF Summary Schneider Electric is aware of a vulnerability in the following products: The Easergy C5 is a scalable and interoperable bay controller, protection and merging unit for large and critical infrastructure electrical distribu
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to take control of a high-privilege terminal during installation and run arbitrary commands. The following versions of OPCFoundation OPC UA LocalDiscove
View CSAF Summary Successful exploitation of this vulnerability could allow any authenticated user to create projects. The following versions of Inductive Automation Ignition are affected: Ignition <=8.1.53 (CVE-2026-77393) CVSS Vendor E
An NCSC assessment highlighting the impacts on cyber threat from AI developments between now and 2027.
Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.
Six streams of original content produced by our senior advisors, SOC analysts and GRC practitioners — calibrated for technical teams and executive boards.
Insights from our senior advisors and SOC team.
Time-critical advisories on active threats.
Sector-focused intelligence briefings.
In-depth research on resilience and risk.
Outcomes from enterprise engagements.
Regulatory horizon-scanning for boards.