The European Union Agency for Cybersecurity

So this form is called the Single Reporting Platform.

It's managed by ENISA, the European Cyber Agency.

And the manufacturer will then report through this CRA Single Reporting Platform.

You should register to make sure you have access to it if you're subject to the CRA.

And, and many of our clients are asking for us to make sure we have access to the credentials to support them in, in doing this.

The notification then goes from ENISA to the different national certs or national authorities per member state.

So if you make a product and you're subject to CRA, and there's an exploited vulnerability, and it affects customers or entities in your business in ten countries in, in the EU, you click those different countries, and then your notification will then go to those member states' authorities.

It could be a cert, it could be the telecommunications regulator, it could be their ministry of defense or interior, and they're naturally gonna follow up.

And that shift from data loss to physical safety is exactly why we need to unpack the threat landscape first.

Looking at the ENISA threat landscape findings, transport hasn't just, you know, popped up on the radar as a minor concern.

No, not at all.

It's been a top five targeted sector for the past two years running.

Right.

We are tracking highly focused sustained campaigns targeting European transport infrastructure.

But the part that really stands out to me is from the ENISA NIS 360 report.

Oh, yeah, the NIS 360 report.

of the framework set out by other cyber-related legislation set out by the EU.

From the 11th of September, 2026, the first obligations under the Cyber Resilience Act become applicable because they require to identify the products that are under the regime of the Cyber Resilience Act and to report exploitative vulnerabilities and incidents to the single reporting platform set out by ENISA.

There's a safeguard rule in this law that was supposed to be a good news.

And this rule protects products already on the market from the lowest technical requirement.

Secondly, they set out a policy identifying when an incident or a vulnerability needs to be reported.

Thirdly, they identify the roles within the organization.

Who's in charge of mapping the products, identifying the vulnerability of the incident? Who's in charge of deciding as to whether the vulnerability needs to be reported? Who's in charge of performing the actual notification to ENISA or to the affected individuals? And then testing this procedure because sometimes we see that procedures are very nice on the paper but they've never been tested and since the first reporting obligation starts within 24 hours from the identification of the vulnerability or the incident, the procedure needs to be very well tested in order to make sure that you're not late.

This rule has been defined as asymmetric rather than retroactive.

really do.

We are pulling from sources like Gartner, Forrester, CISA, ENISA, all to prepare you for the rapidly approaching October 2026 Cybersecurity Awareness Month.

Which is going to be a big one this year.

Huge.

Exactly.

And across the Atlantic, we are seeing a very similar shift in mindset.

ENISA, the European Union Agency for Cybersecurity, is running their campaign under the banner, Cybersecurity is a Shared Responsibility.

Yes.

Digital forensics executives face charges over alleged Russian ties.

ENISA maps Europe's cyber threats.

The U.S. and China have very different ideas about AI safety.

Our guest is Kurt Dusek, technical product advisor at AppDome, sharing thoughts on segregation of duties and AI agents.

The Justice Department isn't alleging the software contained malicious code, enabled unauthorized access, or produced inaccurate results.

Digital forensics experts say the allegations could nevertheless prompt defense attorneys to scrutinize evidence obtained using Oxygen's tools.

ENISA, the European Union Agency for Cybersecurity, is the EU agency responsible for helping member states and EU institutions improve cybersecurity and resilience.

Their 2026 Threat Landscape Report finds an increasingly interconnected cyber threat environment across the European Union, with dependencies on third parties and supply chains expanding organizations' attack surfaces.

When preparing for and developing the 2026 INISA Threat Landscape, our analysts collected and analyzed more than 8,000 incidents spanning over 2025.

Using mainly information from open sources as well as anonymized information shared by EU member states and members of the ENISA Cyber Partnership Program, this is a program in which ENISA cooperates with private sector in advancing EU cyber situational awareness.

DDoS attacks feature heavily, but these are generally lower impact, whereas ransomware continues to be far more disruptive.

Around 30% of threats were financially motivated.

Since then, EC3 has become a major hub for coordinating the efforts of EU member states law enforcement agencies and has been supporting countless investigations and operations that have disrupted the cyber crime ecosystem.

Before becoming head of EC3, Ed Vadas was Deputy Police Commissioner General of the Lithuanian Police.

Our second guest is ENISA's Head of Sector for Threat Analysis Services, Jamila Boutemeur, who is one of the authors of the 2026 ENISA Threat Landscape.

Jamila specializes in state-aligned activities.

it? So basically, in Europe, you have to report to two entities.

One is ENISA.

This is the European National Body for Europe, basically, where you need to report those incidents if they are severe or actively exploited.

And the second one is for your local country, where there's a C-cert that is another local body that actually is the national body.

AWS struggles to restore its Bahrain region and a UAE zone six months after drone strikes.

ENISA uses an OpenAI model to uncover vulnerabilities in EU code.

And finally, we explore the intersection of API and AI gateways in governance and execution.

Coming up, MediaTek's leap into the two nanometer chip race with TSMC's technology.

This situation serves as a stark reminder of the potential risks associated with cloud dependency, especially in conflict-prone regions.

As businesses increasingly rely on cloud services, the need for robust disaster recovery plans becomes more critical.

ENISA used an open AI model to find four flaws in EU code, Politico reports.

The European Union Cybersecurity Agency, ENISA, has successfully used an open AI model to identify four vulnerabilities in EU project code.