Digitalisation of health services brings many benefits to patients, including electronic health records, telemedicine, and AI-driven diagnostics. However, healthcare is one of the most targeted sectors by cyber and ransomware attacks. To better protect its healthcare systems and create a safer...

Digitalisation of health services brings many benefits to patients, including electronic health records, telemedicine, and AI-driven diagnostics. However, healthcare is one of the most targeted sectors by cyber and ransomware attacks. To better protect its healthcare systems and create a safer...

We examine how cybercrime impacts victims' risk-taking and returns. The results from our difference-in-differences analysis of a sample of victim and matched non-victim investors on the Ethereum blockchain are in line with prospect theory and suggests that victims increase their long-term total...

The threat of phishing scams is rising, with increasingly deceptive techniques targeting social media platforms such as Instagram. Many users remain unaware of these risks, leaving them vulnerable. However, little research explores the impact of phishing education on social media, particularly...

Cyber violence against women has been rising at alarming rates in recent decades. Such acts not only harm women as individuals but have severe detrimental effects on society and the economy at large. This Brief analyzes laws from 190 economies to assess the extent and coverage of current...

This study investigates the relationship between cyber risks and dividend policy, as well as how boards, as a governance mechanism, affect the dividend policy under cyber risk. This study collected firm-level financing, corporate governance, and control variables from the Bloomberg database...

The proliferation of cryptocurrency throughout society has led to widespread usage within criminal offending. Despite this, limited research has investigated fear of cryptocurrency-based victimization, or the role that financial or cryptocurrency literacy play in influencing such fears. This...

As smart cities advance, Internet of Things (IoT) devices present cybersecurity challenges that call for innovative solutions. This paper presents a conceptual model for using AI-enabled anomaly detection systems to identify anomalies and security threats in smart city IoT networks. The...

Cyber Europe is a series of European Union-level cyber incident and crisis management exercises organised by the European Union Agency for Cybersecurity (ENISA), intended for both the public and private sector across the European Union and European Free Trade Association (EFTA) Member States....

Cyber Europe is a series of European Union-level cyber incident and crisis management exercises organised by the European Union Agency for Cybersecurity (ENISA), intended for both the public and private sector across the European Union and European Free Trade Association (EFTA) Member States....

This report aims at providing policy makers with evidence to assess the effectiveness of the existing EU cybersecurity framework specifically through data on how the NIS Directive has influenced cybersecurity investments and overall maturity of organisations in scope. As 2024 is the year of the...

This document marks the first report on the state of cybersecurity in the Union, adopted by ENISA in cooperation with the NIS Cooperation Group and the European Commission, in accordance with Article 18 of the Directive (EU) 2022/2555 (hereinafter NIS2). The report aims at providing policy...

The focus of this review is the long and broad history of attacker-defender games as a foundation for the narrower and shorter history of cyber security. The purpose is to illustrate the role of game theory in cyber security and which areas have received attention and to indicate future research...

Europe's Information and Communication Technology (ICT) sector, including ICT manufacturing such as telecom equipment and electronic components, as well as ICT services such as software, telecommunication services, and data processing, is no longer merely an economic pillar but a strategic asset...

Cybersecurity tools and services aim to protect networks, data and devices from tampering, unauthorised access or criminal uses. With so much data now stored on the internet, cybersecurity becomes an essential tool for people, governments, and corporations.

The health and medicine sector are increasingly digitized, a trend that will accelerate with more widespread adoption of artificial intelligence, wearables and internet of things-based healthcare. Yet, this digital transformation carries notable cybersecurity threats. While there is ample...

As a continuation of the ENISA report Cybersecurity Education Initiatives in the EU Member States, ENISA aims to understand the maturity of cybersecurity in primary and secondary education in each MS to further allow the creation of specific material to support cybersecurity education according...

The increasing number of cyberattacks affecting digital products, coupled with widespread vulnerabilities and insufficient timely security updates, creates heavy financial burdens on society. In response, the European Commission has drafted the Cyber Resilience Act (CRA), a new proposal for...

Taking into account the main third-party cybersecurity assessments methodologies for ICT products and cloud services as well as the number of assessment bodies, the report presents the current state of play of cybersecurity assessments based on the past 5 years data. This study aims at analysing...

This study highlights the complexities behind the notion of cyber crisis and the degree of subjectivity it involves. The elevation of a large-scale cyber incident into a cyber crisis relies predominantly on a political decision, and depends largely on the level of risk that EU Member States (MS)...

This report covers the topic of cybersecurity of Low Earth Orbit (LEO) constellations delivering telecommunications services (LEO satcom in short). The key specifics of an LEO satcom system may be summed up as (a) many assets forming the space and ground segments and (b) a worldwide distribution...

From a legal standpoint, there are significant disparities in treating online offenses targeting individuals, organizations, and nation-states. These disparities arise due to influences that vary discreetly based on crucial factors such as the target, motive, or impact. This article draws upon...

Over 100 central banks around the globe are exploring central bank digital currencies (CBDCs) to modernize payment systems. They aim to explore potential benefits, risks, and the broad range of new capabilities CBDCs might offer. Some view CBDC exploration as an opportunity to rethink their...

The scope of the assessment covered the regulation and supervision of cyber risk at the Spanish Less Significant Banking Institutions (LSIs) and Financial Market Infrastructures (FMIs).1 Thus, the financial supervisory authorities in scope were the Banco de España (BdE) and the Comisión...

This study investigates the landscape of cyber-financial risks across Europe by identifying distinct risk profiles based on financial literacy, digital comfort, and economic vulnerability. Utilizing data from the Flash Eurobarometer 525 survey, we employ K-means cluster analysis to categorize...

In the evolving landscape of cybersecurity, traditional information technology (IT) infrastructures often struggle to meet the demands of modern risk management frameworks, which require enhanced security, scalability, and analytical capabilities. This paper proposes a novel artificial...

Purpose The purpose of this paper is to try to reach the main factors that could put national security at risk as a result of government cloud computing programs. Design/methodology/approach The paper adopts the analytical approach to first lay foundations of the relation between national...

The pervasive adoption of digital payment systems globally is a crucial development, shaping the financial landscapes of diverse nations. However, this surge in adoption has precipitated a concerning rise in cybercrimes. This prompts users to reassess preferred payment modes and occasionally...

Using China's Cybersecurity Law (CSL) as an exogenous shock, I examine how personal data security affects stock crash risk. I find that the stock crash risk of treatment firms (which collect personal data) significantly decreases after the CSL, and such decrease is larger when firms face greater...