AI is industrialising cyberattacks and shrinking the time for exploitation, says EU cybersecurity agency

The European Union faces a growing threat from cyberattacks, which are becoming increasingly sophisticated due to advancements in artificial intelligence (AI). The EU's cybersecurity agency, ENISA, warns that AI is playing a significant role in accelerating both the exploitation of vulnerabilities and the speed with which hackers weaponize them.

Recent incidents have highlighted the vulnerability of European systems. For instance, PHP vulnerabilities prompted numerous EU governments to take down their websites to prevent exploitation. In France and eight other countries, hackers targeted refrigeration systems in supermarkets and blood banks, exploiting outdated software.

AI is not just a tool for hackers; it is also changing the way companies defend themselves. ENISA's report suggests that frontier AI models are narrowing response and patch timings. Companies can now use AI to proactively check for vulnerabilities and address them before they are exploited. However, AI also enables more convincing phishing operations through deepfake videos, audio, and messages, making it easier for attackers to trick people and disrupt corporate operations.

The report finds that 57.3% of cyber incidents in 2025 were ideologically driven by geopolitical events, while 29.3% were financially motivated, with ransomware being the most impactful incident type on businesses. The ease of sharing ransomware and malware tools is fueling a professional criminal ecosystem. State-like cyberespionage campaigns are also targeting European countries to steal intellectual property.

Despite the numerous cyber rules implemented by the EU, there are still gaps in cybersecurity, particularly in connected infrastructure. The NIS2 Directive, which entered into application in October 2024, has not been transposed into law in all EU member states. The Cyber Resilience Act, set to be fully applicable in December 2027, introduces reporting obligations through a single portal to speed up information sharing and coordination.

ENISA emphasizes the need for more AI experts to bolster Europe's cybersecurity defenses. The report reveals that organizations across all sectors struggle to attract and retain cybersecurity talent, with 45% of surveyed organizations facing difficulties in finding professionals with the requisite skills. To address this, ENISA calls on member states to expand activities and amplify EU programs in the cybersecurity field.