{"id":466,"date":"2025-12-17T08:00:03","date_gmt":"2025-12-17T11:00:03","guid":{"rendered":"https:\/\/boasvindas.engdb.com.br\/?p=466"},"modified":"2026-04-06T12:18:54","modified_gmt":"2026-04-06T15:18:54","slug":"evolution-of-cyber-threats-in-the-enisa-report","status":"publish","type":"post","link":"https:\/\/boasvindas.engdb.com.br\/?p=466","title":{"rendered":"Evolution of Cyber Threats in the ENISA Report"},"content":{"rendered":"<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">The cyber threat landscape is constantly evolving, becoming more mature, complex, and convergent. We present to you the report\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/www.enisa.europa.eu\/sites\/default\/files\/2025-11\/ENISA%20Threat%20Landscape%202025_0.pdf\" target=\"_blank\" rel=\"noopener\"><span style=\"box-sizing: border-box; font-weight: 600;\">ENISA Threat Landscape 2025<\/span><\/a>, which analyses incidents detected between July 2024 and June 2025. It emerges that the digital infrastructure and services sector, of which we are part, remains a strategic and critical target.<\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; color: #c5004b;\"><span style=\"box-sizing: border-box; font-weight: 600;\"><br style=\"box-sizing: border-box;\" \/>MAIN THREATS IDENTIFIED IN 2025<\/span><\/span><\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Attack Vectors\u00a0<\/span>&#8211; Criminal and cyber-espionage activities are based on increasingly sophisticated and automated vectors. Here are the main ones:<\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Phishing and Social Engineering<\/span>: Phishing (including smishing via SMS and vishing via voice call) remains the most widespread initial intrusion vector, used in about\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">60% of observed cases<\/span>. Social engineering is closely linked to human behaviour. The availability of PhaaS (Phishing-as-a-Service) platforms has industrialised its use, enabling even less experienced attackers to launch complex campaigns.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Exploitation of Vulnerabilities<\/span>: The exploitation of software vulnerabilities (especially so-called zero-days, not yet known to the vendor) constitutes another prevalent intrusion vector,\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">accounting for 21.3%<\/span>. Attackers are able to weaponise a vulnerability within days of its disclosure.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\">\u00a0<br style=\"box-sizing: border-box;\" \/><\/span><span style=\"box-sizing: border-box; font-weight: 600;\">Supply Chain<\/span>\u00a0&#8211; There has been an increase in attacks on companies supplying other organisations, which occur in two ways:<\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Third-party attacks<\/span>: A service provider is targeted, causing an impact on its customers.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Digital supply chain attacks<\/span>: For example, the injection of malicious code into a software package that affects all users.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><br style=\"box-sizing: border-box;\" \/>These approaches optimise the effectiveness of attacks, allowing access to a multitude of data and systems by targeting a single entry point.<\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Technological Evolution of Cybercrime<\/span>\u00a0&#8211; Attack techniques leverage modern technologies.<\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Ransomware<\/span>\u00a0remains the most impactful threat in terms of operational continuity, and with the spread of \u2018Ransomware-as-a-Service\u2019 tools, more and more attackers can launch sophisticated attacks with limited effort. Cybercriminal groups have adopted aggressive extortion tactics, exploiting fears related to regulatory compliance (such as GDPR in Europe) to push victims to pay the ransom quickly.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\">The\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">use of Artificial Intelligence (AI) for malicious purposes<\/span>\u00a0is growing significantly. It is estimated\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">that over 80% of all phishing<\/span>\u00a0emails use AI in some way to create more convincing texts. AI is also used to accelerate malware development and for espionage, for example, to generate fake LinkedIn profiles and support communications with victims.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; color: #c5004b;\"><span style=\"box-sizing: border-box; font-weight: 600;\">MAIN RECOMMENDATIONS FOR ICT SECTOR OPERATORS<\/span><\/span><\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">Our activities are constantly targeted by criminals: a company operating in the ICT sector and acting as a producer, supplier, and customer is particularly attractive to cybercriminals.<\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">Our defensive approach must be intelligence-driven and focused on prevention, containment, and resilience.<\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">Here are the pillars of an\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">adequate defensive strategy for our sector<\/span>.<\/p>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Proactive Vulnerability Management and System Hardening<\/span><\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Asset and Library Inventory\u00a0<\/span>&#8211; It is essential to\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">know what needs to be protected<\/span>\u00a0and therefore maintain a complete inventory of assets (physical and digital) and software libraries in use. In case of alerts about campaigns or vulnerabilities, it is necessary to know whether the system or library in question is being used.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Patch Management<\/span>\u00a0&#8211;\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">The application of patches must be timely<\/span>\u00a0to mitigate the impact of the most serious vulnerabilities, such as zero-days. The speed with which attackers exploit disclosed vulnerabilities requires robust and fast update processes.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Hardening<\/span>\u00a0&#8211;\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/attack.mitre.org\/mitigations\/M1028\/\" target=\"_blank\" rel=\"noopener\"><span style=\"box-sizing: border-box; font-weight: 600;\">Strengthen the configuration<\/span><\/a><span style=\"box-sizing: border-box; font-weight: 600;\">\u00a0of operating systems<\/span>\u00a0and use mechanisms for\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/attack.mitre.org\/mitigations\/M1038\/\" target=\"_blank\" rel=\"noopener\"><span style=\"box-sizing: border-box; font-weight: 600;\">execution prevention<\/span><\/a>\u00a0and\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/attack.mitre.org\/mitigations\/M1040\/\" target=\"_blank\" rel=\"noopener\"><span style=\"box-sizing: border-box; font-weight: 600;\">behavioural prevention on endpoints<\/span><\/a>\u00a0to block initial execution and persistence of malware.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\"><br style=\"box-sizing: border-box;\" \/>Development, Integration, and Code Auditing<\/span><\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\">According to the principle of\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">Security by Design<\/span>, security must be integrated into the design and development phases of software, which must be conducted based on industry guidelines (e.g.\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/attack.mitre.org\/mitigations\/M1013\/\" target=\"_blank\" rel=\"noopener\">Mitre<\/a>,\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/owasp.org\/www-project-top-ten\/\" target=\"_blank\" rel=\"noopener\">OWASP<\/a>,\u00a0<a style=\"box-sizing: border-box; color: #000000; text-decoration-line: none; background-color: transparent; outline: none; transition: 0.3s ease-in-out; position: relative; display: inline-block;\" href=\"https:\/\/www.sans.org\/top25-software-errors\" target=\"_blank\" rel=\"noopener\">SANS<\/a>) to reduce exploitable defects.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\">It is essential to carry out\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">integrity and security tests on code<\/span>\u00a0distributed on systems, especially in the context of supply chain attacks exploiting compromised repositories.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\"><br style=\"box-sizing: border-box;\" \/>Access and Privileges<\/span><\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">The implementation of Multi-Factor Authentication<\/span>\u00a0(MFA) is crucial to strengthen identity and counter credential abuse.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\">In\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">Privileged Account Management<\/span>, the principle of\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">least privilege<\/span>\u00a0must be applied to limit opportunities for damage and lateral movement following credential compromise.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\">The use of\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">code signing<\/span>\u00a0helps ensure that only trusted components are present on systems.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><span style=\"box-sizing: border-box; font-weight: 600;\"><br style=\"box-sizing: border-box;\" \/>Resilience and Containment<\/span><\/p>\n<ul style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Network segmentation<\/span>\u00a0isolates threats within confined zones, limiting lateral movement and the spread of ransomware and espionage activity.<\/li>\n<li style=\"box-sizing: border-box; margin: 0px 0px 0.25rem; list-style: none; position: relative; display: block;\"><span style=\"box-sizing: border-box; font-weight: 600;\">Backups and remote storage<\/span>\u00a0are essential to ensure operational continuity and mitigate the destructive impact of ransomware.<\/li>\n<\/ul>\n<p style=\"box-sizing: border-box; margin: 0px 0px 1em; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\"><br style=\"box-sizing: border-box;\" \/>The cyber threat, especially that linked to vulnerabilities in the supply chain, requires constant attention. A systemic approach based on intelligence, with a focus on\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">security by design<\/span>\u00a0and careful management of access and vulnerabilities, increases resilience and, if applied as part of a continuous and updated process, constitutes an effective defence against most threats.<\/p>\n<p style=\"box-sizing: border-box; margin: 0px; font-size: 1rem; color: #0b162c; font-family: CocoEng, Roboto, 'Helvetica Neue', Arial, sans-serif; font-variant-ligatures: none;\">Each of us, by paying attention to these topics while managing and planning our work, forms the\u00a0<span style=\"box-sizing: border-box; font-weight: 600;\">#FirstLineofDefence<\/span>, which is essential for safeguarding the stability of our business.<\/p>\n<p><em><strong>Link para o artigo no Engage: <a href=\"https:\/\/engage.eng.it\/en\/internal-communications\/evolution-of-cyber-threats-in-the-enisa-report\">Link<\/a><\/strong><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The cyber threat landscape is constantly evolving, becoming more mature, complex, and convergent. We present<span class=\"excerpt-hellip\"> [\u2026]<\/span><\/p>\n","protected":false},"author":4,"featured_media":469,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[],"class_list":["post-466","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguranca"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/boasvindas.engdb.com.br\/wp-content\/uploads\/2025\/12\/Screenshot_ENISA-1.png","_links":{"self":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/466","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=466"}],"version-history":[{"count":2,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/466\/revisions"}],"predecessor-version":[{"id":470,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/466\/revisions\/470"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=\/wp\/v2\/media\/469"}],"wp:attachment":[{"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=466"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=466"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/boasvindas.engdb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=466"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}