Tag: european union
121 articles
ENISA Pursues Elevated Status in Global CVE Program
The European Union's cybersecurity agency, ENISA, is taking a major step forward in global cybersecurity by seeking top-tier status in the prestigious CVE Program, a move that could reshape the landscape of vulnerability management. If approved, ENISA would join an elite group of just three organizations with the highest level of authority in this critical program.
European Commission Cloud Hack Compromises 30 EU Entities
A massive cloud hack has struck the European Commission, compromising the data of at least 30 EU entities, including the Commission itself, at the hands of the notorious threat group TeamPCP. This alarming breach raises critical questions about who holds the keys to the EU's cloud and what happens when they fall into the wrong hands.
Lazarus Group Exclusive: DreamJob Threatens EU Defenses
“If you build it, they will steal it” — North Korea’s Lazarus Group is quietly targeting EU drone engineers, lifting schematics, firmware, and supplier data to speed or sabotage adversaries’ emulation of Western platforms. The result: stolen designs and corrupted files that can derail production and readiness without a single shot fired.
bulletproof hosting: Stunning Risks Evade Sanctions
KrebsOnSecurity reveals how Stark Industries — a bulletproof hosting service tied to Kremlin-linked cyberattacks — slipped past EU sanctions by rebranding and shifting assets into shell companies, showing how adaptable abuse networks outpace enforcement. If sanctions are to matter, Europe needs faster cross-border coordination, tougher pressure on registrars and clear rules on who really owns these services.
zero trust Must-Have: Europe’s Best Security Playbook
Across Europe, zero trust has moved from IT theory to a regulatory expectation—policymakers now expect identity-centric controls, measurable resilience and risk reporting, so organizations must re-architect defenses or accept growing exposure. Start pragmatically: protect your highest-value assets with IAM, MFA and segmentation, measure risk reduction, and build privacy-preserving telemetry as you go.
commercial spyware firms: Risky EU Ties Exposed
European MPs are demanding answers after investigations showed EU research grants and procurement money have flowed — sometimes via subcontractors — to companies tied to commercial spyware, raising urgent questions about whether public funds are enabling surveillance of journalists, activists and political rivals. Europe must reconcile its push for tech sovereignty with stronger transparency, vetting and clawback rules to ensure funding defends, not undermines, democracy.
phishing Warning: Exclusive Risky Threat & Must-Have Fixes
ENISA warns that simple phishing emails and unpatched systems were behind most EU cyber intrusions last year, turning tiny mistakes into big national-security headaches. It’s a wake-up call to harden the basics—MFA, patching, email defenses, and smarter user training—before the next click becomes a crisis.
Cyber Resilience Act: Must-Have or Risky Regulation
Linux maintainer Greg Kroah‑Hartman pushes back on doomsday takes about the EU’s Cyber Resilience Act, arguing it’s unlikely to upend everyday open‑source work — but adds the real risk comes from fuzzy definitions and heavy‑handed implementation. If regulators carve out volunteers and focus on commercial actors, the CRA could boost software safety without choking the collaborative culture that powers so much of the internet.
foreign interference: Exclusive Risky Teen Scandal
When Dutch authorities arrested several teenagers allegedly linked to foreign interference, it exposed a modern dilemma: how do we protect democracy from digital meddling without criminalizing curious, tech‑savvy kids?
Entry/Exit System: Risky Exclusive EU Biometric Rollout
Starting next month the EU replaces passport stamps with a biometric Entry/Exit System that will record faces and fingerprints of short‑stay visitors to 29 Schengen countries. Officials say it will speed up checks and curb overstays — but privacy advocates warn it could expand surveillance and put sensitive data at risk.
ransomware attack: Stunning Risk to European Airports
ENISA says ransomware knocked out check‑in systems at major European airports, forcing staff to go manual and stranding travellers in long queues. The disruption highlights how legacy IT and weak vendor security can turn a cyberattack into a real‑world travel crisis.
bulletproof hosting Exposed: Risky Evasion Still Thrives
When the EU sanctioned Stark Industries, the bulletproof hosting firm just rebranded and moved assets to sister companies — a stark reminder that Kremlin-linked operators can easily dodge enforcement and keep malicious infrastructure online. To make sanctions stick, policymakers and tech firms must pair legal designations with faster takedowns, transparency rules, and tighter cooperation across registrars, payment processors and ISPs.
Salty2FA: Exclusive Dangerous Phishing Threat
A new phishing kit called Salty2FA is turning multi-factor authentication into an exploitable step, automating interception of codes, cookies, and push prompts to bypass SMS and app-based 2FA. Organizations should treat 2FA as an architecture—move to phishing-resistant methods like FIDO2, tighten session controls, and ramp up detection before attackers rent this tool and hit your users.
artificial intelligence Must-Have Reforms to Avoid Risk
AI can make government faster and fairer—but left unchecked it risks concentrating power, eroding accountability, and amplifying bias. Thoughtful rules, independent audits, and public participation can keep innovation from becoming a cover for opaque, unchallengeable decisions.
Rewiring Democracy: Exclusive Must-Have Roadmap
In Rewiring Democracy, Bruce Schneier and Nathan Sanders warn that AI is reshaping our institutions and offer an urgent, practical roadmap to embed transparency, accountability, and human oversight so democracies can reap AI’s benefits without losing public trust. Covering elections, lawmaking, administration, courts, and civic life, their concrete reforms show how governments can act now to prevent opacity and strengthen democratic norms.
GPS jamming: Stunningly Dangerous Threat to Europe
When GPS signals were deliberately jammed over southeastern Europe, even the plane carrying EU Commission President von der Leyen had to fly without satellite guidance — a stark reminder that our reliance on GNSS leaves aviation, infrastructure and economies vulnerable to cheap, deniable interference. Europe’s push to harden Galileo, boost anti‑jamming tools and speed up detection shows this isn’t hypothetical: GPS jamming is a present, systemic threat that needs urgent action.
EU Cybersecurity Reserve Must-Have: Best Defense
ENISA’s new €36M EU Cybersecurity Reserve turns a long‑talked idea into a real, deployable digital fire brigade — pooling expert teams, forensic tools and logistics to help member states and critical infrastructure bounce back faster from cross‑border cyberattacks. If Europe pairs this funding with clear rules, joint exercises and legal certainty, the Reserve could become a reliable, lifesaving safety net rather than just another well‑intentioned plan.
sovereign cloud: Must-Have Trust for Best Security
As AI assistants surge, customers are asking Google for clear, enforceable data boundaries—sovereign cloud controls that let teams harness generative AI while keeping compliance, privacy, and competitive secrets intact.
ChatGPT queries: Stunningly Risky Privacy Leak
Think your private chat with an AI stays private? Not always — companies log, analyze and sometimes share prompts to improve models or run services, which can let sensitive queries leak into public searches. Check your privacy settings, consider paid privacy options, and avoid sharing identifying details if you don’t want your questions to become public.
Hackers Breach Dutch Lab: Stunning Privacy Risk
Half a million people who trusted a Dutch cancer‑screening lab with their most intimate health details have had that trust shattered after hackers stole sensitive records — a breach that threatens patient privacy, public‑health confidence, and the future of screening programs. As investigators work to pin down the scope, this crisis is a clear wake‑up call for stronger cybersecurity, better policies, and swift support for those affected.
NIS2 Directive compliance: Stunning Risky Failures
Eight EU countries risk penalties and increased vulnerability after missing the NIS2 transposition deadline—it’s a wake-up call to shore up cyber defenses before trust in essential services is eroded.
AI Adoption Sparks Confusion Over Terms of Service Changes
As AI becomes a part of our everyday tech, the question of data control is more crucial than ever! WeTransfers recent ToS changes sparked a wave of user concern, highlighting the ongoing struggle between innovation and privacy—reminding us all just how important it is to stay informed about how our data is being used.
NIST Updates Privacy Framework Linked to Latest Cybersecurity Guidelines
Stay ahead of evolving cyber threats with the latest NIST Privacy Framework update—designed to make managing privacy risks easier, smarter, and more aligned with today’s cybersecurity realities.
France to Increase Military Spending Amid Rising Global Tensions
Facing threats unseen since World War II, France is ramping up its military with a €6.5 billion boost to safeguard freedom and lead the way in cutting-edge defense technology.