ENISA Rates EU Cyber Threat Level as Substantial
The agency's latest State of Cybersecurity report finds the threat level unchanged while ideologically motivated attacks dominate recorded incidents.
Updated on Nov. 10, 2026 in Cybersecurity
The European Union Agency for Cybersecurity (ENISA) published its State of Cybersecurity in the European Union report on November 10, 2026, assessing the cyber threat as substantial, unchanged from its previous report. Ideologically motivated attacks accounted for 57.3% of incidents recorded in 2025.
Why it matters
The report finds that geopolitical developments, including the war in Ukraine and conflicts in the Middle East, continued to shape cyber activity affecting the EU. It also states that advanced AI is industrialising the discovery of vulnerabilities, raising the stakes for defenders across member states.
Distributed denial of service attacks made up 51.3% of recorded incidents, while the EU Cybersecurity Index averaged 71.53 out of 100 across member states. The report does not detail the specific attack methods or vulnerabilities behind the remaining incidents.
The players
European Union Agency for Cybersecurity (ENISA)
The EU agency responsible for cybersecurity coordination across member states, which authored the State of Cybersecurity in the EU report.
The details
The report measures national cybersecurity posture using the EU Cybersecurity Index, scored on a scale of 0 to 100. Two member states were rated advanced and three established, while more than 80% of member states were rated mature.
Timeline
2025: Year of incident data showing ideologically motivated attacks at 57.3%.
November 10, 2026: ENISA publishes the State of Cybersecurity in the EU report.
Over the next two years: Member States and the Commission are urged to invest in the maturity of national CSIRTs.
Market Landscape
The report uses the EU Cybersecurity Index, which scores member state cybersecurity posture on a 0 to 100 scale, to track national maturity year over year. This benchmark frames the current assessment of a substantial threat level that is unchanged from the previous report.
The report's findings on distributed denial of service attacks and the targeting of public administrations show where disruptions are most likely to reach ordinary users. Readers relying on public services or transport in EU member states may be affected by the sectors most often hit.
The takeaway
The report signals that national cybersecurity investment remains a priority, as AI accelerates vulnerability discovery and threats persist at a substantial level. Organizations in the EU should expect continued pressure on public administrations and transport operators.
What happens next
Member States and the Commission are expected to pursue investment in national CSIRT maturity over the next two years.
Further reading
For broader context on threats and defenses, explore the Cybersecurity section.
More information
Read the full ENISA State of Cybersecurity in the EU report for the complete incident data and maturity findings.
