As of: 22 Sep 2026
Summary
ENISA's 2026 Threat Landscape Report analyses events observed in 2025.
What happened?
ENISA has published its 2026 Threat Landscape Report. It analyses events observed in 2025, including ransomware, social engineering and attacks involving suppliers and third parties. Publication in 2026 does not make the underlying incidents 2026 events.
Why does it matter?
The report shows attacks increasingly come via service providers, software supply chains and social engineering – routes small businesses barely control themselves.
Who is most affected?
Businesses heavily dependent on external IT providers and cloud services; indirectly individuals via social engineering.
What does it mean for businesses?
Identify the accounts, platforms and providers you rely on most, then plan recovery and fallback options.
What can you do now?
- 1List providers with access to your systems
- 2Enable remote maintenance access only when needed
- 3Keep backups separate and test restores
Editorial assessment
Our conclusion
For small businesses the main takeaway is that your own security also depends on your providers. A simple overview of who can access what is a realistic first step. The events analysed date from 2025.
Source
ENISA · Source date
To the source (publisher website): www.enisa.europa.eu/publications/enisa-threat-landscape-2026
Status / reviewed on: