EU authorities “closely monitoring” cyber attacks
5th November 2026
EUROPE: The European Commission has said it is closely monitoring the situation following the new wave of cyber attacks on refrigeration units.
It has also reminded organisations that under the EU’s cyber resilience act, manufacturers of hardware and software products must report severe incidents and actively exploited vulnerabilities.
The commission accepts that, given the large-scale nature of these incidents, cooperation, rapid information-sharing and coordinated response at European level is essential.
Following the latest wave of incidents, the commission says that its communications networks, content and technology directorate (DG CNECT), is acting with the European Union Agency for Cybersecurity (ENISA), Europol’s European Cybercrime Centre (EC3), the EU national computer security incident response teams (EU CSIRTs Network) and the European cyber crisis liaison organisation (EU- CyCLONe), to advise organisations to take immediate action to mitigate exposure in the affected systems.
It reports affected EU member states are aware of the situation and are currently investigating the incidents, while providing guidance. The EU CSIRTs Network (EU Member States-appointed CSIRTs and CERT-EU) and EU-CyCLONe (EU national authorities in charge of cyber crisis) are actively exchanging information and monitoring the situation. ENISA and all relevant EU stakeholders will continue to monitor the incidents and contribute to the overall situational awareness at EU level.
The commission also advises that as of 11 December 2027, manufacturers of hardware and software products will be required to implement security-by-design and ensure security support during the lifecycle of such products, including the remediation of vulnerabilities without delay.
