A recent surge in cyberattacks has heightened security challenges for European countries, with hackers targeting vital infrastructure and digital systems. These attacks have exploited weaknesses in aging technology and security gaps. According to Joyce Hukme, a researcher specializing in cybersecurity policy, these incidents reveal accumulated defects in European system protections. For instance, hackers recently breached cooling systems at nearly 700 stores across France, leading to significant food waste.
The attacks have not been limited to France, with similar incidents reported in Belgium, Luxembourg, Sweden, Ireland, and other countries. Despite this, no entity has publicly claimed responsibility for the attacks. French authorities have accused Iran of carrying out what they describe as an "unprecedented attack." These developments are part of a series of cyber incidents in Europe over the past few years, drawing attention to known but unaddressed security vulnerabilities.
The ongoing conflict between Russia and Ukraine has increased the risks faced by Europe, placing the continent at the forefront of hybrid threats, including cyberattacks and other forms of pressure and targeting. Protecting infrastructure and digital systems has become a challenge that extends beyond technical aspects to include security and strategic dimensions. Hukme identifies four main challenges contributing to the vulnerability of Europe's systems: the continued use of outdated technology, the development of new products without integrating security requirements, the growing capabilities of attackers using artificial intelligence, and some countries' use of cyberattacks to exert influence.
Outdated systems are a significant weakness, with many sectors in Europe still relying on technology that is no longer supported and does not receive security updates. This leaves known vulnerabilities that hackers can easily exploit. The recent attacks on cooling systems in France exemplify this, as most compromised temperature control units were outdated and no longer receiving updates. The risks escalate with operational technology systems that directly control physical equipment and facilities, as these often continue to operate for decades even after manufacturers stop updating them.
Many institutions and governments lack a precise inventory of their equipment and software, making it difficult to identify and address weaknesses in a timely manner. A 2025 report by the UK's National Audit Office found that government departments rely on hundreds of outdated technology systems. Similarly, the German Federal Audit Office noted that parts of the federal government's networks had become so outdated that they no longer received security updates. Although institutions are aware of these vulnerabilities, replacing these systems is costly and can disrupt operations.
Basic cybersecurity measures, known as "cyber hygiene," can mitigate some of these threats. The European Union's cybersecurity agency reports that two-thirds of the vulnerabilities exploited by attackers have available security updates. However, institutions using unsupported equipment must reduce their exposure to risks or work on replacing them. The challenge lies in the weak implementation of existing regulations and guidelines, particularly within smaller institutions.
The European Union has adopted the Cyber Resilience Act, which will come into effect in December 2027, aiming to prevent the marketing of connected products that do not meet minimum security requirements. The Act also holds manufacturers responsible for protecting their products throughout their lifecycle. Nevertheless, these requirements do not guarantee that all vulnerabilities will be addressed. The use of artificial intelligence by attackers accelerates the search and exploitation of vulnerabilities, reducing the time defenders have to respond.
Key points
- Europe faces increased cyberattack threats due to outdated systems and security gaps.
- The European Union has adopted the Cyber Resilience Act to enhance product security.
- Artificial intelligence is being used by both attackers and defenders, impacting the speed and scope of cyberattacks.
