ENISA Threat Landscape 2025: EU Cyber Threat Ecosystem Report (enisa.europa.eu)

• Phishing accounts for 60% of initial intrusion vectors.
• Ransomware remains central to cybercrime; RaaS lowers barriers.
• State-aligned groups target EU public administration, transport, and digital infrastructure.

"ENISA's annual threat landscape report covers July 2024 to June 2025, analyzing nearly 4,900 incidents. Key findings: phishing remains the primary intrusion vector (60%), ransomware is core to cybercrime, and state-aligned groups target telecommunications and logistics. Hacktivist DDoS operations account for almost 80% of recorded incidents but have low impact. Vulnerability exploitation is exploited rapidly after disclosure. AI-driven phishing is now over 80% of social engineering globally. The report highlights converging threats and the need for basic cyber hygiene."