EU sectors improve cyber defence but health, water lag

The ENISA NIS360 2026 report highlights improvements in cybersecurity across EU critical sectors, noting that while overall progress is being made, some vital areas remain vulnerable. The banking, electricity, and telecommunications sectors rank highest in maturity, with new entries like trust services and aviation joining the high maturity band. However, sectors such as health, water, rail, and space have entered the risk zone due to insufficient preparedness.

Key drivers for progress include effective legislation and increased political attention, but challenges persist, particularly with AI-enhanced threats outpacing defenses. The healthcare sector, despite overall improvements, struggles significantly with basic cybersecurity practices. The report emphasizes the need for ongoing regulatory pressure and better collaboration to address these vulnerabilities.