European Union Agency for Cybersecurity (ENISA)’s Post

Phishing and other scams are the most important threats that your business and your users face. The more you can understand this threat, the safer you and your users will be.

This October, we are boosting our cyber immunity. Just as good habits like washing your hands keep you healthy, good cyber hygiene helps prevent almost 80% of cyber-attacks. As part of Cybersecurity Awareness Month, we’re focusing on every day steps that make a real difference: phishing vigilance, stronger password practices and responsible AI use. AI can accelerate innovation, but it can also be misused by cybercriminals to scale attacks. Remember these practical tips when using AI tools: ▪️ Never share sensitive personal or company data with AI. ▪️ Treat AI outputs as a starting point: validate facts, figures and quotes before sharing. ▪️ Be alert for deepfakes and misinformation: verify sources, run reverse-image searches and check metadata. Stay tuned for more cybersecurity tips this month! #CyberSecurityMonth #CyberHygiene #MSDPlaceToBe #CyberAwareness

⚔️ 2025: The Rise of the Enterprising Adversary The CrowdStrike Global Threat Report 2025 reveals a stark truth — cyber adversaries now operate like modern enterprises, powered by speed, precision, and AI. ⏱ Average breakout time: 48 minutes (fastest: 51 seconds) 📞 Voice phishing (vishing): up 442% in 2024 🤖 AI-powered deception: Generative AI now fuels phishing, deepfakes, and disinformation 🧩 Malware-free attacks: 79% of detections show attackers using legitimate tools instead of malware 🐉 China-nexus activity: surged 150%, with some industries hit up to 300% more The message is clear — cyber defense can’t rely on old playbooks. Organizations must evolve toward AI-native security to stay one step ahead. “Never underestimate the enterprising adversary.” — CrowdStrike 2025 Report #CyberSecurity #CrowdStrike #ThreatIntelligence #AIinSecurity #GlobalThreatReport2025 #CyberDefense

When you think everything is under control… and then THIS happens! 👀 Just like at conferences, where unexpected surprises sneak into your perfect photo, cyber threats often appear where you least expect them - even from trusted sources. ‼️ 😯 Phishing emails from compromised vendors are one of the hardest to spot because they look legitimate. Traditional security tools often miss them, leaving your team exposed. 🫢 ‼️ At the end of the day, we're only human, which is exactly why anomaly detection is a necessary GAME-CHANGER. Darktrace's Self-Learning AI doesn't rely on static rules/signatures, it learns what “normal” looks like and flags the unusual, even when it comes from someone you trust. Check out this Darktrace blog for a real-world example of how these attacks work and why proactive detection matters: 👉 https://lnkd.in/dD4PpgAU Because in cybersecurity (and in photos), the unexpected is always lurking! #CyberSecurity #AI #Darktrace #EmailSecurity #Phishing

🔐 Cyber threats in Europe aren’t slowing down; they’re evolving. The EU’s new Cybersecurity Threat Landscape 2025 report paints a clear picture: attackers are converging, automating, and industrialising their methods. From AI-supported phishing to state-sponsored ransomware, the speed and scale of attacks are increasing fast. But there’s opportunity in this shift. Reports like ENISA’s give us the data and context to move from reactive defense to proactive resilience, helping teams focus on what truly matters instead of chasing noise. Here are a few takeaways that stood out: 💡 Phishing is still the #1 entry point, but it’s no longer just email. 🤖 Attackers are using AI — so should you. 💰 Ransomware has become industrialised, now offered “as a service.” 🎭 The line between hacktivism and state-sponsored activity is blurring fast. Read Dr. Katie Paxton-Fear’s full breakdown of ENISA’s findings and what they mean for the future of security 👉 https://lnkd.in/gWPUZYs8 #Cybersecurity #ThreatIntelligence #ENISA #InfoSec #AppSec #AI

🔐 Phishing has entered its AI-powered era and the rules have changed. In the past year alone, we’ve seen: ⚠️ AI-generated emails that sound exactly like your CEO ⚠️ QR codes leading to fake Microsoft 365 login pages ⚠️ Deepfake voices used to authorize fund transfers And despite better tools, phishing attacks are up over 400%. Why? Because attackers have evolved and many businesses haven’t. In our latest blog, we break down: 👉 How AI and leaked data are fueling this new wave of deception 👉 Real-world cases where even trained employees were tricked 👉 Practical defenses that actually work, from FIDO2 authentication to smarter simulations 👉 How top organizations are turning phishing resilience into a trust advantage If you still think “spotting the fake email” is enough, think again. The future of cybersecurity isn’t about avoiding every attack. It’s about building a culture that can’t be fooled twice. ➡️ Read our full blog here: https://lnkd.in/gfwBR5J2 #evvolabs #CyberSecurity #Phishing #byyourside #AI #CyberAwareness #DataProtection #DigitalTrust #CyberResilience

🔐 Your password isn’t as strong as you think. Hackers don’t need luck—they’ve got algorithms, AI, and endless tries. You’ve got… “Password123”? Let’s fix that. This Cybersecurity Awareness Month, we’re sharing simple, powerful ways to stay untouchable online. 💥 Tip #1: Use Strong, Unique Passwords Go long. random. unique. Think 16+ characters with a mix of letters, numbers, and symbols. Strong passwords protect you from brute force attacks, dictionary attacks, and even AI-powered credential hacks—the kind that crack millions of weak passwords in seconds. 💡 Pro Tip: Swap the password for a passphrase—like CoffeeSunset!42RainyDay. Easy for you. A nightmare for them. 🔍 Want to know where your cybersecurity really stands? Run Intwo’s Cybersecurity Scan 👉 https://lnkd.in/e-2dr_Dp #CyberSecurityAwarenessMonth2025 #ThinkSecure #StrongPasswords #Intwo #StaySafeOnline #CyberSecurity

While long, unique passwords and two-factor authentication (2FA) may feel tedious when accessing accounts, they are essential for preventing unauthorized access. In cybersecurity, prevention is everything—and these simple steps go a long way in protecting your data. #Intwo #SecurityConcierge

🔒 Is your organisation truly cyber-ready? Cyber threats are evolving rapidly, and staying ahead means understanding your current security posture and knowing where your vulnerabilities lie. Intwo’s Cybersecurity Scan provides a clear, holistic view of your organisation’s security landscape—delivering actionable, fact-based recommendations based on internationally recognised frameworks (CIS controls v8, with NIS 2.0 mapping for Europe). Whether you choose the free Self-Service Scan or a comprehensive Full Scan, you’ll gain: +A quick, data-driven assessment of your IT environment +Prioritised recommendations to strengthen your defences +Insights to help you build a resilient, future-proof business Take the first step towards greater cyber resilience. Find out more and get started here: Intwo Cybersecurity Scan https://lnkd.in/g8cbHpCj #CustomerSuccess #Cybersecurity #CloudSecurity #Compliance#CyberResilience

🚨 Phishing 2.0 is here — powered by AI, deepfakes, and hyper-targeted deception. Cybercriminals are no longer sending generic “bank alerts.” They’re using AI-driven reconnaissance, voice cloning, and synthetic identities to impersonate people you trust — your boss, your vendor, even your friend. At Axivus Advisory, we help organizations build AI-aware cybersecurity defenses — from email gateway hardening and phishing simulations to data-driven awareness programs that actually work. 🧠 Remember: Awareness isn’t enough — adaptation is survival. 👇 Read our latest insights on how to detect and defend against next-gen phishing: #CyberSecurity #PhishingAwareness #AI #DeepfakeSecurity #DataProtection #AxivusAdvisory #CyberAwareness #InfoSec #AIinSecurity #EmailSecurity