Vulnerability exploitation led to malware deployment as a follow-up activity in 68% of cases.

Ransomware remained the most impactful cybercrime tool despite a reported decrease of 11% compared to the previous ENISA Threat Landscape (ETL) report.

NoName057(16) was responsible for over 60% of claims in the realm of hacktivism, sustained by its DDoSia platform

Insider threats accounted for 0.8% of initial access vectors.

Botnet accounted for 9.9% of initial access vectors.

Essential entities (including public administration, transport, digital infrastructure and services, finance, and manufacturing) represent 53.7% of the total number of recorded incidents in the EU.

Malicious applications accounted for 8% of initial access vectors.

Within Public Administration, incidents were dominated by low-impact DDoS campaigns (94.8%).

In North America and Europe, over 60% of websites lack any bot protection.

11% of organizations actively pursuing CMMC 2.0 certification are in Europe.

Globally, Europe is the most prepared region for AI-driven attacks with 66% saying they are prepared.

100% of Europe's top financial firms suffered supplier breaches.

North America accounts for nearly 90% of observed AI crawler traffic, receiving a heavy skew compared to other regions like Europe, Asia, and Latin America.

Europe experienced an 8% drop in June 2025, accounting for 21% of ransomware attacks (79 cases). This was fewer than half the number recorded in North America.

Overall, 79% of all global ransomware cases in June 2025 took place in North America and Europe combined

Despite high investment in enhanced software supply chain security, Europe ranks lowest at 23% in prioritizing engaging with software suppliers about security credentials

67% of European organizations are investing in enhanced software supply chain security, which is the highest of all regions.

In Europe, 51% of organizations say they are prepared for software supply chain attacks.

Europe saw a 5.1% increase in fraud rates in the iGaming industry, from 1.18% in 2024 to 1.24% in 2025.

Geographically, 82% of hacktivist attacks targeted Europe.