An analysis of 8,257 incidents shows how phishing, vulnerability exploitation, and AI are reshaping the cyberthreat landscape.

DDoS attacks appeared in 51% of incidents analyzed, while 40% resulted in unauthorized access.

Among unauthorized access incidents, 60% involved vulnerability exploitation.

What does the ENISA Threat Landscape 2026 reveal?

Among those unauthorized access incidents, 60% involved exploitation of vulnerabilities in internet-facing infrastructure, edge devices, cloud and identity systems, legacy Internet of Things (IoT) platforms, developer tools, or third-party platforms.