ENISA’s 2025 Threat Landscape shows that ransomware, ideology-driven DDoS campaigns, and vulnerability exploitation continue to dominate cyber activity affecting the European Union. The report also highlights growing use of AI by threat actors, with public administration remaining the most targeted sector and incidents increasingly blurring the lines between cybercrime, hacktivism, and state-linked operations. #ENISA #NIS2 #DDoS #Ransomware #ClickFix
Keypoints
- Ransomware remains the most impactful short-term threat across the EU.
- Public administration is the most targeted sector, especially by ideology-driven DDoS attacks.
- Phishing, social engineering, and the ClickFix technique continue to enable intrusions.
- Vulnerability exploitation is a major intrusion vector, including N-day and 0-day flaws.
- AI is increasingly used by threat actors to support malicious operations and influence campaigns.