Latest cybersecurity reporting from selected sources.

Analysis of ransomware incidents by researchers at Black Kite found that attacks have risen by over 50% in the last year, with supply chain attacks increasing

ENISA's de Vries on DDoS, Security Training and Road to Single Reporting PlatformEurope's cybersecurity posture is hardening, but the threat landscape is evolving faster, says Hans de Vries, chief cybersecurity and operations officer at ENISA. From supply chain disruptions to ransomware legislation, the pressure to build genuinely resilient societies has never been greater.

Revised Cybersecurity Act Would Also Boost ENISACountries across the EU could be forced to kick Chinese telecom manufacturers such as Huawei and ZTE out of their critical infrastructure supply chains, under a far-reaching proposal published by the European Commission on Tuesday.

At this week's Black Hat Europe conference, two researchers urged developers to adopt a shared responsibility model for open source software and not leave it all up to GitHub to handle.

Also: AI's Promise and Pitfalls and Why Community, Communication, and Basics MatterLive from Infosecurity Europe 2025 in London, ISMG editors and guest CISO Ian Thornton-Trump wrap up a week of standout insights - from AI-driven security and operational resilience to supply chain risk and mental health in cyber. A celebration of community, innovation and cybersecurity basics.

Ransomware, Quantum Computing, Geopolitics, Gen AI and More on the AgendaInfosecurity Europe is set to return June 3 to London. Hot topics at this year's event include everything from quantum computing, geopolitics and artificial intelligence, to supply chain attacks, insider threats and the cybercrime juggernaut that continues to be ransomware.

Ransomware, Quantum Computing, Geopolitics, GenAI and More on the AgendaInfosecurity Europe is set to return June 3 to London. Hot topics at this year's event include everything from quantum computing, geopolitics and artificial intelligence, to supply chain attacks, insider threats and the cybercrime juggernaut that continues to be ransomware.

During Infosecurity Europe 2025 experts will explore how to strengthen organizational resilience against persistent third-party risks

ENISA's Marnix Dekker on Supply Chain Attacks, Harmonizing the New NIS2 RegulationsThe European Union Agency for Cybersecurity is at the center of rolling out new cybersecurity frameworks for critical infrastructure providers across Europe. But a major priority, according to ENISA's Marnix Dekker, is helping smaller vendors withstand supply chain attacks.

SecurityScorecard claims 100% of Europe’s top financial services companies have suffered a supply chain breach in the past year

A Chinese threat actor infiltrated several IT and security companies in a bring-your-own VS code, with an eye to carrying out a supply-chain-based espionage attack.

Act Imposes Mandatory Patching for IoT DevicesThe European Council adopted Thursday security-by-design regulation that makes patching and vulnerability updates mandatory for connected devices. The regulation will ensure that "products with digital components are made secure throughout the supply chain and throughout their lifecycle."

Europe's Cyber Resilience Act Pressures Open-Source Foundations and ManufacturersFoundations housing seven large open-source projects are banding together ahead of what they say is a nearly impossible 2027 deadline created by Europe's Cyber Resilience Act - the world's first digital supply chain regulation. European Union lawmakers approved the act in March.

In this Black Hat Europe preview, devices bridging critical machinery with the wider Internet are exposed and subject to numerous supply chain-induced bugs.

The X_Trader software supply chain attack that led to last month's 3CX breach has also impacted at least several critical infrastructure organizations in the United States and Europe, according to Symantec's Threat Hunter Team. [...]

Fuel supply chain impacted by possible ransomware