ENISA's 2026 Threat Landscape is out. Two numbers belong together. Where ENISA could identify the intrusion vector, 60% of unauthorised-access incidents came through a vulnerability, N-day or zero-day. And 2025 published over 48,000 new CVEs, up 22% on the year before. More doors, and the doors are the preferred route in. The other thread is dependencies. Supply-chain and third-party attacks are what produce the large-scale incidents. Which is why the point about patch clocks shrinking to days is not pedantry. The patch programme and the supplier register are the same control now.
https://www.enisa.europa.eu/news/exploring-the-evolution-of-the-cyber-threat-landscape-how-dependencies-weaken-our-digital-resilience
#CyberSecurity #InfoSec #ENISA #DigitalSovereignty
#enisa
3 posts · Last used Sep 24
Discover the new Cyber Resilience Act reporting rules. EU digital product manufacturers face strict 24-hour deadlines for actively exploited vulnerabilities.
#CyberResilienceAct #ENISA #VulnerabilityReporting #CyberSecurity #EUCompliance
🚨 Cyber Resilience Act: Die CRA-Meldepflichten rücken näher.
Ab 11. September 2026 müssen Hersteller aktiv ausgenutzte Schwachstellen und schwerwiegende Sicherheitsvorfälle mit Auswirkungen auf die Produktsicherheit über die von #ENISA bereitgestellte CRA Single Reporting Platform melden.
🌍 Damit entsteht erstmals ein EU-weit einheitlicher Meldeweg.
Mehr Infos findet ihr hier: https://www.bsi.bund.de/dok/cra#CybernationDeutschland #Cybernation #BSI #CyberResilienceAct #CRA
You've seen all posts

