Cybersecurity Awareness Month: understanding today’s threats

How safe is your digital life today?

Every October, Cybersecurity Awareness Month puts online security in the spotlight. It is an opportunity for citizens, businesses and organisations to look at how they protect their data, systems and digital identities, and to understand how the cybersecurity threat landscape is changing.

Across Europe, cybersecurity is becoming an increasingly important part of digital resilience. From phishing and ransomware to the growing use of artificial intelligence by cybercriminals, the threats facing the online environment continue to evolve.

For organisations responsible for digital infrastructure, this makes cybersecurity an ongoing responsibility rather than a once-a-year exercise.

What are the biggest cybersecurity threats today?

While familiar threats remain significant, new technologies are also giving attackers additional tools to exploit.

Phishing and social engineering continue to exploit human trust. Fraudulent emails, messages and websites can encourage people to disclose credentials, transfer money or download malicious software.

Ransomware also remains a major concern. These attacks can disrupt organisations by encrypting systems or data and demanding payment for their restoration.

Artificial intelligence is changing the threat landscape. Cybercriminals can use AI to create convincing content, automate tasks and scale malicious campaigns. At the same time, organisations are introducing AI into their own systems, creating new dependencies and security considerations.

Another challenge is the growing number of software vulnerabilities. Keeping systems and applications updated and monitoring vulnerabilities are therefore important parts of good cybersecurity practice.

The message is simple: online security requires continuous attention and adaptation.

Why does cybersecurity matter for the internet infrastructure?

When we think about cybersecurity, we often think about our own devices, accounts and passwords. But a secure online environment also depends on the infrastructure that allows websites and online services to function.

This includes the Domain Name System (DNS) and the organisations responsible for managing domain name registries.

For EURid, cybersecurity is directly connected to our responsibility for managing the .eu, .ею and .ευ domain names.

A domain name is only one part of the online infrastructure, but the systems supporting it need to remain secure, resilient and available. EURid therefore uses a multi-layered approach to domain security and cyber resilience, including information security management, business continuity, monitoring, security assessments, incident response and recovery measures.

EURid holds ISO/IEC 27001 certification for information security management and ISO 22301 certification for business continuity management. These internationally recognised standards provide a framework for managing security and maintaining critical operations.

How EURid helps create a safer online space

Protecting a domain name registry involves more than securing its own systems. It also means addressing the ways in which domain names can be misused.

EURid uses a combination of automated systems, data analysis and cooperation with trusted cybersecurity organisations to identify potentially abusive domain names.

Its Abuse Prevention and Early Warning System (APEWS) analyses registration patterns to identify domains that may be associated with malicious activity. EURid also carries out automated checks and investigates reports of suspected abuse.

The quality of registration data is another part of this work. EURid's Know Your Customer (KYC) processes and data verification measures help maintain reliable registration information, making it easier to investigate and respond to suspected abuse.

Technical measures such as DNSSEC also help protect the integrity of DNS responses and reduce the risk of certain types of attacks.

Cybersecurity is a shared responsibility

No single organisation can address the full range of cyber threats facing Europe.

A safer online environment depends on cooperation between registries, registrars, cybersecurity researchers, technology companies, public authorities and internet users.

EURid participates in European and international cybersecurity communities to share information, exchange expertise and strengthen the resilience of the domain name system. This cooperation helps organisations identify emerging threats and improve their ability to respond.

For individuals and businesses, Cybersecurity Awareness Month is also a useful opportunity to review everyday security practices: keep software updated, use strong and unique passwords, enable multi-factor authentication where available, be cautious with unexpected messages and check links before clicking.

For organisations, it is a chance to look beyond individual actions and consider the resilience of their systems, suppliers and digital infrastructure.

A safer internet depends on security at every layer, from everyday online habits to the infrastructure that keeps the internet running.