Announcements - Latest News

Record 769 arrests and USD 65 million in illicit pharmaceuticals seized in global bust

Wednesday, 2 July 2025

An INTERPOL-coordinated operation across 90 countries has resulted in the seizure of 50.4 million doses of illicit pharmaceuticals worth USD 65...

More ›››

Strengthening the fight against cybercrime

Thursday, 23 January 2025

The need to strengthen the capabilities of the Cybercrime Sub-Directorate regarding the fight against and prevention of crimes and/or anti-social...

More ›››

57 men arrested for possessing and sharing over 100 000 depictions of child sexual abuse

Wednesday, 13 March 2024

The Cyprus Police - Cybercrime Subdivision, actively participating in the actions of Europol, after training received by its members, in relation to...

More ›››

Stay cool this summer - 11 tips to be secure online on holiday

Wednesday, 9 August 2023

Summer holidays are a chance to relax, but they can be a source of high stress themselves if you are not safe online. To help with this, the European...

More ›››

Europol's 9th Internet Organised Crime Threat Assessment (IOCTA) has been released

Wednesday, 19 July 2023

Forget the cliché of a solitary figure in a hoodie hunched over a keyboard in a dark room crunching lines of codes. It is an image that no longer...

More ›››

Six sexually-abused children rescued as a result of Europol Victim Identification Taskforce

Friday, 26 May 2023

Six victims of child sexual abuse have been identified and removed from harm as a result of the 12th Victim Identification Taskforce organised by...

More ›››

Child Pornography

Child pornography is defined as representations of minors involved in sexual acts or situations that indicate sexual activities. Sometimes the definition includes images processed by a computer. Child pornography is considered a crime and is subject to criminal sanctions.

No more ransom!

Ransomware is malware that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless you pay a ransom. However this is not guaranteed and you should never pay!

CEO Business email Compromise (BEC) Fraud

CEO/BEC fraud occurs when an employee authorised to make payments is tricked into paying a fake invoice or making an unauthorised transfer out of the business account.

Ransomware

Ransomware is a type of malicious software from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid. While some simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion, in which it encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Security Tips

Important Facts

2024

Operations

69+

Evidence

1961+

Cases

445+

Child Sexual Abuse

208+

National CSIRT-CY

Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά την Διάρκεια των Ηλεκτρονικών Αγορών της Black Friday και Cyber Monday

Wednesday, November 12, 2025

️ Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά τη διάρκεια των ηλεκτρονικών αγορών της Black Friday και Cyber Monday

More ›››

Ψηφιακή Ασφάλεια για Ηλικιωμένους: Συμβουλές από τον Επίτροπο Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας

Wednesday, March 12, 2025

Η ψηφιακή εποχή που ζούμε προσφέρει αμέτρητες δυνατότητες, αλλά και σημαντικές προκλήσεις, ιδιαίτερα για τους ηλικιωμένους που μπορεί να είναι πιο ευάλωτοι σε διαδικτυακές απειλές. Το Γραφείο Επιτρόπου Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας παρέχει χρήσιμες συμβουλές για ασφαλή πλοήγηση στο διαδίκτυο.

More ›››

Εργαλείο GetSafeOnline

Thursday, November 28, 2024

Το Γραφείο Επιτρόπου Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας, με γνώμονα την προστασία των πολιτών και των χρηστών διαδικτύου, έχει αναπτύξει μία πρωτοποριακή πλατφόρμα ανίχνευσης πιθανής διεύθυνσης ηλεκτρονικού «ψαρέματος».

More ›››

Ανακοίνωση Αρχής Ψηφιακής Ασφάλειας

Friday, October 18, 2024

Η Αρχή Ψηφιακής Ασφάλειας λαμβάνει σοβαρά υπόψη και αξιολογεί τις πληροφορίες για κυβερνοεπιθέσεις και ενημερώνει τις ουσιώδεις υπηρεσίες για τη λήψη κατάλληλων προληπτικών μέτρων στο πλαίσιο των αρμοδιοτήτων της.

More ›››

Απλές και καθημερινές συμβουλές ασφάλειας στον κυβερνοχώρο για τα παιδιά και τους γονείς

Tuesday, February 13, 2024

Η έκθεση των παιδιών μας στις ψηφιακές τεχνολογίες από πολύ μικρή ηλικία προσφέρει, αφενός, ευκαιρίες και δυνατότητες για μάθηση και εκπαίδευση, εμπεριέχει, αφετέρου, κινδύνους για τους οποίους τα παιδιά πρέπει να ενημερώνονται και να μαθαίνουν να αντιμετωπίζουν.

More ›››

Πώς να ελέγξετε αν το τηλέφωνό σας έχει παραβιαστεί; 5 σημάδια για να καταλάβετε

Friday, November 17, 2023

Το κινητό σας τηλέφωνο αποθηκεύει πολλές προσωπικές πληροφορίες που θα μπορούσαν να
χρησιμοποιηθούν εναντίον σας αν πέσουν σε λάθος χέρια.

More ›››

CERT-EU RSS Feeds

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

Wednesday, September 9, 2026

On 8 September 2026, as part of its September Security Patch Day, SAP released Security Notes addressing two critical vulnerabilities affecting a broad range of SAP products[3]. The most severe, CVE-2026-44756 (CVSS 10.0), is a memory corruption vulnerability in SAP Extended Passport (EPP) processing, nicknamed "OVERPASS" by the Onapsis Research Labs (ORL), which discovered and responsibly disclosed it[3]. The second, CVE-2026-58240 (CVSS 9.8), nicknamed "S4GET", is a missing authentication check in the SAP NetWeaver Message Server[6].
Both are remotely exploitable without authentication. According to the reporting researchers, successful exploitation of either can result in arbitrary operating system command execution under the account that owns the SAP installation, leading to full compromise of the affected system and the business data it holds[6].
CERT-EU strongly recommends applying SAP Security Notes 3747649 and 3759472 as soon as possible.

More ›››

2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Wednesday, August 19, 2026

On 19 August 2026, Citrix published a security advisory addressing multiple critical vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway).
CERT-EU recommends updating affected devices as soon as possible.

More ›››

2026-009: Critical Vulnerabilities in Microsoft SharePoint

Thursday, July 23, 2026

[UPDATED] On 14 July 2026, Microsoft released security updates addressing critical remote code execution (RCE) vulnerabilities in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code and subsequently observed active exploitation of CVE-2026-50522, a vulnerability part of an ongoing series of actively exploited flaws affecting on-premise SharePoint Server instances, including CVE-2026-32201, CVE-2026-45659, CVE-2026-56164, and CVE-2026-58644.
CERT-EU strongly recommends updating affected servers immediately, rotating credentials for any assets that may have been exposed to the internet, and conducting a compromise assessment.

More ›››

2026-009: Critical Vulnerability in Microsoft SharePoint

Wednesday, July 22, 2026

On 14 July 2026, Microsoft released a security update addressing a critical Remote Code Execution (RCE) in Microsoft SharePoint Server. On 20 July 2026, WatchTowr identified a proof-of-concept exploit code, and later, successful exploitation attempts.
CERT-EU strongly recommend to update affected servers and to rotate credentials on any assets that may have been vulnerable and exposed on the internet.

More ›››

2026-008: Critical vulnerabilities in Ivanti Sentry

Wednesday, June 10, 2026

On 9 June 2026, Ivanti released a security advisory addressing two critical vulnerabilities in their Sentry products[1]. An attacker could exploit those flaws to achieve unauthenticated remote code execution on the vulnerable device.

More ›››

2026-007: Critical Vulnerability in Windows Netlogon

Wednesday, June 10, 2026

On 12 May 2026, Microsoft published a security advisory addressing a critical vulnerability affecting Windows Server when acting as a domain controller. This vulnerability allows an unauthenticated attacker to execute arbitrary code over a network.
According to The Centre for Cybersecurity Belgium (CCB), this vulnerability is currently exploited by threat actors. It is strongly recommended updating affected Windows servers as soon as possible.

More ›››

Announcements - Latest News

Child Pornography

No more ransom!

CEO Business email Compromise (BEC) Fraud

Ransomware

Security Tips

Important Facts

Operations

69+

Evidence

1961+

Cases

445+

Child Sexual Abuse

208+

National CSIRT-CY

Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά την Διάρκεια των Ηλεκτρονικών Αγορών της Black Friday και Cyber Monday

Ψηφιακή Ασφάλεια για Ηλικιωμένους: Συμβουλές από τον Επίτροπο Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας

Εργαλείο GetSafeOnline

Ανακοίνωση Αρχής Ψηφιακής Ασφάλειας

Απλές και καθημερινές συμβουλές ασφάλειας στον κυβερνοχώρο για τα παιδιά και τους γονείς

Πώς να ελέγξετε αν το τηλέφωνό σας έχει παραβιαστεί; 5 σημάδια για να καταλάβετε

CERT-EU RSS Feeds

2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server

2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

2026-009: Critical Vulnerabilities in Microsoft SharePoint

2026-009: Critical Vulnerability in Microsoft SharePoint

2026-008: Critical vulnerabilities in Ivanti Sentry

2026-007: Critical Vulnerability in Windows Netlogon

Get In Touch

Useful Links