Cybersecurity risks to Europe’s energy infrastructure escalate

Experts at the 9th Cybersecurity Forum in Brussels have warned that Europe’s energy infrastructure faces escalating risks from artificial intelligence, connected devices, and geopolitical tensions. Recent incidents, such as the December 2025 attacks on Poland’s wind, solar, and heat power facilities, demonstrated that attackers can gain access to communication systems between facilities and operators, even if electricity generation remains uninterrupted.

Ukraine’s national electricity transmission operator, Ukrenergo, is currently managing a grid under sustained attack, utilizing AI to enhance cybersecurity response speeds. These real-world examples highlight a growing gap between evolving cyber threats and practical defensive capabilities.

An annual report from the European Union Agency for Cybersecurity (ENISA) corroborates these concerns, noting an unprecedented surge in ransomware and the blurring of lines between cybercrime and state-sponsored activity. Ransomware remains the most destructive threat, often involving data theft and double extortion. The public sector was the primary target, accounting for nearly one-third of incidents, while approximately 75% of victims were classified as essential or critically important entities under European regulations. Additionally, the discovery of over 48,000 new vulnerabilities has increased supply chain risks across software and cloud infrastructure.