{"id":1730,"date":"2025-10-10T16:26:53","date_gmt":"2025-10-10T15:26:53","guid":{"rendered":"https:\/\/www.gecad.isep.ipp.pt\/pc2phish\/?p=1730"},"modified":"2025-10-10T18:42:35","modified_gmt":"2025-10-10T17:42:35","slug":"panorama-de-ameacas-ciberneticas-europeias-principais-tendencias-do-enisa-threat-landscape-2025-eng","status":"publish","type":"post","link":"https:\/\/www.gecad.isep.ipp.pt\/pc2phish\/en\/panorama-de-ameacas-ciberneticas-europeias-principais-tendencias-do-enisa-threat-landscape-2025-eng\/","title":{"rendered":"Article: European Cyber Threat Landscape \u2014 Key Trends from the ENISA Threat Landscape 2025"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Article: European Cyber Threat Landscape \u2014 Key Trends from the ENISA Threat Landscape 2025<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Introduction<\/strong>
The report ENISA Threat Landscape 2025<\/em> provides a comprehensive analysis of the cyber threat landscape in the European Union between July 1, 2024, and June 30, 2025. Drawing on thousands of reported incidents across multiple countries, the document identifies emerging attack vectors, threat actors, attack techniques, and strategic recommendations to strengthen digital resilience in both public and private organizations.<\/p>

Key Threats and Trends<\/strong><\/p>

Phishing and Social Engineering<\/strong>
Phishing remains the dominant initial intrusion vector. More sophisticated campaigns employ persuasive techniques, well-crafted messages, and the use of artificial intelligence to make fraudulent emails increasingly realistic.<\/p>

Exploitation of Vulnerabilities<\/strong>
Attacks exploiting known vulnerabilities continue at a large scale, making it critical for organizations to maintain up-to-date patches and visibility into security flaws.<\/p>

DDoS and Availability Attacks<\/strong>
Threats targeting system availability (DDoS) remain prominent, particularly in the context of geopolitical conflicts, impacting critical infrastructures.<\/p>

Supply Chain Attacks and Abuse of Legitimate Services<\/strong>
Attacks targeting supply chains and the misuse of legitimate services continue to grow, representing significant risk to organizations relying on interconnected systems.<\/p>

Convergence of Threat Actors and Advanced Technologies<\/strong>
The report highlights that hacktivist groups and nation-state actors are increasingly sharing techniques and tools. Artificial intelligence, while mostly used to optimize existing attacks, poses a growing risk as a vector for automated or manipulated attacks.<\/p>

Relevance for Local Public Administration<\/strong>
The public sector, including municipalities and local entities, is frequently targeted due to the volume of sensitive data they manage. A successful incident can compromise not only individual data but also interdependent service chains. Key guidance from the report includes:<\/p>