ENISA Report Highlights Increased Cyberattacks on EU Operational Technology Systems

What's Happening?

The European Union's cybersecurity agency, ENISA, has released its 2025 Threat Landscape report, revealing that a significant portion of cyberattacks over the past year targeted operational technology (OT) systems. The report analyzed nearly 4,900 cybersecurity incidents, with 18.2% aimed at OT systems, following mobile and web threats. Many attacks were attributed to hacktivists and state-sponsored groups, including the pro-Russian hacker group NoName057(16) and the Z-Pentest Alliance. These groups have been linked to attacks on industrial control systems (ICS) and other critical infrastructure, aiming to exploit vulnerabilities and exert geopolitical influence.

Why It's Important?

The report underscores the growing vulnerability of industrial and critical systems as they become more interconnected. The targeting of OT systems poses significant risks to national security, economic stability, and public safety, as these systems are integral to essential services and infrastructure. The findings highlight the need for enhanced cybersecurity measures and international cooperation to protect against state-sponsored cyber threats. The report also serves as a call to action for industries to bolster their defenses and for policymakers to prioritize cybersecurity in national security agendas.

What's Next?

ENISA's findings may prompt increased investment in cybersecurity infrastructure and the development of more robust defense strategies against OT-targeted attacks. The report could influence policy decisions at both national and EU levels, leading to stricter regulations and standards for protecting critical infrastructure. Additionally, the cybersecurity community may see a push for greater collaboration and information sharing to counteract the evolving threat landscape.