19 October 2023 – the EU Agency for Cybersecurity (ENISA) published the 11th edition of the ENISA Threat Landscape Report 2022, providing an independent review on top cyber threats, major trends observed with respect to threats, threat actors and attack techniques as well as describing relevant mitigation measures.
For any organisation operating in the digital space, security against threats is a key focus, and cybersecurity has been confirmed as one of the European Commission's top priorities – described as a "cornerstone of the digital and connected Europe".
The ENISA Threat Landscape 2023 Report highlights and directs attention toward eight prime threat groups. These particular threat groups have been singled out due to their prominence over the years, their widespread occurrence and the significant impact resulting from the realisation of these threat. The prime threats identified and analysed include:
For each of the identified threats, the ENISA Threat Landscape Report 2023 determines impact, motivation, attack techniques, tactics and procedures to map relevant trends and proposes targeted mitigation measures. Ransomware has been, once more, one of the prime threats during the reporting period, with several high profile and highly publicised incidents. According to ENISA’s Threat Landscape for Ransomware Attacks report, ransomware is defined as a type of attack where threat actors take control of a target’s assets and demand a ransom in exchange for the return of the asset’s availability. This action-agnostic definition is needed to cover the changing ransomware threat landscape, the prevalence of multiple extortion techniques and the various goals, other than solely financial gains, of the perpetrators.
ENISA’s Threat Landscape Report can be used by companies to help guide their preparations and responses to the major cyber threats facing their industries.
*Information is accurate up to 22 April 2024
