# EU cybersecurity resilience and evolving national defenses

> Live situation record from CLSTR: https://clstr.news/situations/european-union-cybersecurity-resilience-and-threats
> Updated: 2026-09-28T00:00:00.000Z. Sources: 46. Developments: 2.

The European Union is facing scrutiny regarding its digital security infrastructure. An audit by the European Court of Auditors has highlighted that cyber defense capabilities remain insufficient despite significant investments. A critical weakness is the limited ability to detect and manage serious attacks due to poor information sharing among member states. Notably, no EU member state has officially classified a cyber incident as ‘large-scale’ since 2016, which prevented major events, such as the 2024 CrowdStrike outage, from triggering the full European crisis mechanism.

In response to these systemic vulnerabilities and rising sabotage threats, individual member states are centralizing their defenses. Austria is launching its Federal Office for Cybersecurity (BCS) on October 1 to coordinate responses for critical sectors like energy, transport, and healthcare. This initiative addresses a surge in domestic cybercrime, which rose from 13,104 cases a decade ago to 63,459 in the previous year, though authorities currently solve only about one third of these incidents. Under new Austrian regulations, companies must register with the BCS and report incidents or face fines of up to 100,000 euros.

Parallel to security concerns, discussions regarding the funding of EU priorities like digital and defense transformations are emerging. Research from the Vienna Institute for International Economic Studies suggests the EU should move toward ‘European own resources’—such as taxes on digital corporations and financial transactions—to reduce reliance on national contributions and mitigate tax competition between member states.

## Claims

- Austria recorded 63,459 reported cases of cybercrime in the previous year. (corroborated by 3 sources)
- The new Federal Office for Cybersecurity (BCS) is scheduled to begin operations on October 1. (corroborated by 3 sources)
- Approximately one third of reported cybercrime cases in Austria are solved. (corroborated by 2 sources)
- Companies that fail to comply with new cyber incident reporting obligations face fines of up to 100,000 euros. (corroborated by 2 sources)

## Timeline

### 2026-09-28: Austria to launch Federal Office for Cybersecurity amid rising crime

Austria will launch a new Federal Office for Cybersecurity on October 1 to combat rising cybercrime, which saw 63,459 reported cases last year. New mandatory incident reporting rules will include fines.

14 sources. https://clstr.news/cluster/europe-strengthens-cybersecurity-focus-amid-sabotage-threats

### 2026-09-21: European Union cyber defenses weakened by poor data sharing

The European Court of Auditors warns that EU cybersecurity defenses are only partially effective due to poor data sharing, implementation delays, and a lack of coordination between incident response networks.

32 sources. https://clstr.news/cluster/european-union-cyber-defenses-deemed-insufficient-by-auditors

---
Cite as: EU cybersecurity resilience and evolving national defenses. CLSTR, https://clstr.news/situations/european-union-cybersecurity-resilience-and-threats