Loading story…
Link11, a European web infrastructure security provider, has released an analysis identifying five major cybersecurity trends expected to shape defense strategies for organizations across Europe in 2026. The report highlights the increasing use of DDoS attacks as diversionary tactics, where attackers leverage these disruptions to mask more damaging activities such as network infiltration, data theft, or covert malware deployment. The findings are based on current threat activity, industry research, and insights from the Link11 European Cyber Report, as well as broader market indicators like PwC’s Global Digital Trust Insights 2026, which notes that geopolitical instability and underinvestment in proactive security measures are leaving critical gaps for attackers to exploit.
The report urges European organizations to strengthen their incident response frameworks, treating any DDoS alert as a potential indicator of more serious, concurrent threats. The evolving threat landscape, marked by rapid advances in artificial intelligence and fractured supply chains, is driving a need for more robust monitoring, testing, and hardening of defenses. Link11's insights are intended to guide organizations in preparing for the complex and sophisticated cyber operations anticipated in the coming year, emphasizing the importance of proactive and comprehensive security strategies.
See attribution, scope, and your downstream exposure.
1 event from the most recent confirmed update back to the earliest known activity.
On December 16, 2025, Link11 announced five cybersecurity trends expected to shape European defense strategies in 2026. The forecast highlighted DDoS diversion attacks, API-first risks, movement toward integrated WAAP platforms, the need for AI-driven DDoS mitigation, and increasing compliance pressure from frameworks such as NIS2 and DORA.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
4 references tracked. Mallory keeps watching after this page renders.
hackread.com
Open sourcesecurityonline.info
Open sourcecybersecuritynews.com
Open sourcesecuritysenses.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Link11's latest report reveals a 225% increase in DDoS attacks in the first half of 2025 compared to the previous year, with attackers employing more sophisticated and prolonged methods. The attacks reached volumes of 438 terabytes and included advanced Layer 7 techniques that mimic legitimate traffic, as well as politically motivated campaigns by groups like NoName057(16). The report urges organizations to adopt real-time monitoring, AI-driven defenses, and robust contingency planning to counter these evolving threats.
Jun 29, 2026
The cybersecurity landscape in 2025 was marked by a series of high-impact incidents and evolving threat trends, with identity-driven intrusions, large-scale breaches, and record-breaking DDoS attacks dominating the year. Notable breaches at organizations such as Ingram Micro, Conduent, and Kettering Health resulted in hundreds of millions of dollars in losses, with regulatory filings and industry analyses highlighting the significant operational and financial impacts. Attackers increasingly exploited known vulnerabilities, with the CISA Known Exploited Vulnerabilities (KEV) catalog serving as a critical indicator of attacker intent, and legacy flaws resurfacing as major risk factors. The year also saw a strategic shift in security operations, with organizations prioritizing risk-based decision-making over exhaustive control coverage, and automation and real-time intelligence becoming essential for defense. DDoS attacks reached unprecedented scales, with Cloudflare reporting attacks peaking at 31 Tbps and the emergence of massive botnets like Aisuru. These attacks were often used as smokescreens for deeper intrusions, and the growing sophistication and speed of DDoS campaigns rendered traditional scrubbing-center defenses increasingly obsolete. Geopolitical tensions further shaped the threat landscape, with critical infrastructure and sectors such as gaming and gambling frequently targeted. The industry’s response emphasized the need for adaptive, globally distributed mitigation strategies and highlighted the importance of governance, consent management, and just-in-time administration to separate resilient organizations from those more vulnerable to systemic risk.
Jun 29, 2026
Geopolitical instability, rapid technological advancement, and persistent skills shortages are fundamentally reshaping the cybersecurity landscape for organizations worldwide. According to a PwC report, 60% of executives now rank cyber risk investment among their top three strategic priorities, driven by concerns over political instability, trade disputes, and shifting alliances. Despite this heightened awareness, only about half of surveyed organizations feel very capable of withstanding cyberattacks on common vulnerabilities, and a mere 6% report preparedness across all vulnerabilities, highlighting significant exposure through legacy systems and complex supply chains. The financial impact of breaches remains severe, with over a quarter of respondents experiencing incidents costing at least $1 million in the past three years, disproportionately affecting large enterprises and technology-driven sectors. Spending on cybersecurity is increasing, with 78% of organizations expecting budget growth, yet only 24% are channeling more resources into proactive measures such as monitoring, testing, and training, indicating a continued reactive posture. The ENISA Threat Landscape 2025 report underscores the professionalization of cybercrime, the convergence of criminal and state-aligned actors, and the rise of hacktivist groups leveraging ransomware for both ideological and financial gain. Ransomware remains the most disruptive threat across the EU, with groups adopting decentralized operations, double- and triple-extortion tactics, and exploiting regulatory compliance fears to pressure victims. The proliferation of Ransomware-as-a-Service (RaaS), public leaks of builder tools, and the emergence of access brokers have lowered barriers to entry, fueling a diverse and persistent threat ecosystem. Weak authentication practices persist in many organizations, with passwords and SMS codes still dominant despite their vulnerability to phishing and credential theft. A significant portion of employees have never received cybersecurity training, and outdated policies further exacerbate risk, as personal and professional security habits often overlap, creating additional attack vectors. The adoption of stronger authentication methods, such as device-bound passkeys, remains limited, and resistance to multi-factor authentication is common due to perceived complexity. The use of AI in both attack and defense is accelerating, with AI-generated phishing campaigns and adaptive malware becoming more prevalent, while defenders also leverage AI for predictive threat detection. The overall picture is one of rising threat sophistication, uneven organizational preparedness, and a pressing need for sustained investment in proactive security measures, workforce training, and the adoption of advanced technologies to build resilience against an increasingly complex cyber threat landscape.
Jun 29, 2026