ENISA Threat Landscape 2026: ransomware and system dependencies continue to test organisational resilience
The new report reviews events from 2025. Distinguish the report year from the period actually observed.
ENISA published its 2026 Threat Landscape report on 22 September, covering observations from January–December 2025. It identifies ransomware as an incident type with substantial short-term impact.
The report also examines the attack surface expanded by network dependencies and the possible use of AI models for malicious activity. Its conclusions reflect the samples and period covered, not real-time global incident statistics.
Inventorying critical service dependencies, external connections and recovery order produces more actionable improvements than focusing on threat names alone.
Original sources
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
Illustration