Announcements - Latest News

Record 769 arrests and USD 65 million in illicit pharmaceuticals seized in global bust

Wednesday, 2 July 2025

An INTERPOL-coordinated operation across 90 countries has resulted in the seizure of 50.4 million doses of illicit pharmaceuticals worth USD 65...

More ›››

Strengthening the fight against cybercrime

Thursday, 23 January 2025

The need to strengthen the capabilities of the Cybercrime Sub-Directorate regarding the fight against and prevention of crimes and/or anti-social...

More ›››

57 men arrested for possessing and sharing over 100 000 depictions of child sexual abuse

Wednesday, 13 March 2024

The Cyprus Police - Cybercrime Subdivision, actively participating in the actions of Europol, after training received by its members, in relation to...

More ›››

Stay cool this summer - 11 tips to be secure online on holiday

Wednesday, 9 August 2023

Summer holidays are a chance to relax, but they can be a source of high stress themselves if you are not safe online. To help with this, the European...

More ›››

Europol's 9th Internet Organised Crime Threat Assessment (IOCTA) has been released

Wednesday, 19 July 2023

Forget the cliché of a solitary figure in a hoodie hunched over a keyboard in a dark room crunching lines of codes. It is an image that no longer...

More ›››

Six sexually-abused children rescued as a result of Europol Victim Identification Taskforce

Friday, 26 May 2023

Six victims of child sexual abuse have been identified and removed from harm as a result of the 12th Victim Identification Taskforce organised by...

More ›››

Child Pornography

Child pornography is defined as representations of minors involved in sexual acts or situations that indicate sexual activities. Sometimes the definition includes images processed by a computer. Child pornography is considered a crime and is subject to criminal sanctions.

No more ransom!

Ransomware is malware that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless you pay a ransom. However this is not guaranteed and you should never pay!

CEO Business email Compromise (BEC) Fraud

CEO/BEC fraud occurs when an employee authorised to make payments is tricked into paying a fake invoice or making an unauthorised transfer out of the business account.

Ransomware

Ransomware is a type of malicious software from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid. While some simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion, in which it encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Security Tips

Important Facts

2024

Operations

69+

Evidence

1961+

Cases

445+

Child Sexual Abuse

208+

National CSIRT-CY

Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά την Διάρκεια των Ηλεκτρονικών Αγορών της Black Friday και Cyber Monday

Wednesday, November 12, 2025

️ Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά τη διάρκεια των ηλεκτρονικών αγορών της Black Friday και Cyber Monday

More ›››

Ψηφιακή Ασφάλεια για Ηλικιωμένους: Συμβουλές από τον Επίτροπο Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας

Wednesday, March 12, 2025

Η ψηφιακή εποχή που ζούμε προσφέρει αμέτρητες δυνατότητες, αλλά και σημαντικές προκλήσεις, ιδιαίτερα για τους ηλικιωμένους που μπορεί να είναι πιο ευάλωτοι σε διαδικτυακές απειλές. Το Γραφείο Επιτρόπου Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας παρέχει χρήσιμες συμβουλές για ασφαλή πλοήγηση στο διαδίκτυο.

More ›››

Εργαλείο GetSafeOnline

Thursday, November 28, 2024

Το Γραφείο Επιτρόπου Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας, με γνώμονα την προστασία των πολιτών και των χρηστών διαδικτύου, έχει αναπτύξει μία πρωτοποριακή πλατφόρμα ανίχνευσης πιθανής διεύθυνσης ηλεκτρονικού «ψαρέματος».

More ›››

Ανακοίνωση Αρχής Ψηφιακής Ασφάλειας

Friday, October 18, 2024

Η Αρχή Ψηφιακής Ασφάλειας λαμβάνει σοβαρά υπόψη και αξιολογεί τις πληροφορίες για κυβερνοεπιθέσεις και ενημερώνει τις ουσιώδεις υπηρεσίες για τη λήψη κατάλληλων προληπτικών μέτρων στο πλαίσιο των αρμοδιοτήτων της.

More ›››

Απλές και καθημερινές συμβουλές ασφάλειας στον κυβερνοχώρο για τα παιδιά και τους γονείς

Tuesday, February 13, 2024

Η έκθεση των παιδιών μας στις ψηφιακές τεχνολογίες από πολύ μικρή ηλικία προσφέρει, αφενός, ευκαιρίες και δυνατότητες για μάθηση και εκπαίδευση, εμπεριέχει, αφετέρου, κινδύνους για τους οποίους τα παιδιά πρέπει να ενημερώνονται και να μαθαίνουν να αντιμετωπίζουν.

More ›››

Πώς να ελέγξετε αν το τηλέφωνό σας έχει παραβιαστεί; 5 σημάδια για να καταλάβετε

Friday, November 17, 2023

Το κινητό σας τηλέφωνο αποθηκεύει πολλές προσωπικές πληροφορίες που θα μπορούσαν να
χρησιμοποιηθούν εναντίον σας αν πέσουν σε λάθος χέρια.

More ›››

CERT-EU RSS Feeds

2026-018: Critical Vulnerabilities in PHP

Friday, October 23, 2026

On 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution (RCE).
The PHP team released the fixes today, 21 October 2026 at 13:30 UTC, in PHP versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Both vulnerabilities can allow unauthenticated remote code execution. Technical details are now being discussed publicly, and initial proofs of concept (PoCs) have begun to circulate. This raises the likelihood that attackers are already exploiting the vulnerabilities.
[New] On 23 October, PHP disclosed a new RCE vulnerability. However, it affects only web applications configured in an unusual way, and PHP considers it an unlikely risk. PHP will not issue an out-of-band release for this vulnerability. Instead, organisations are advised to apply mitigation to fully protect from this RCE vector.
CERT-EU advises organisations to patch affected assets immediately. Where that is not feasible, organisations should consider isolating internet-facing applications from public networks until a fix is applied and verified.

More ›››

2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

Thursday, October 22, 2026

On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server.
CERT-EU recommends organisations to update affected assets as soon as possible, prioritising internet facing assets, and to run an assessment to identify compromised assets.

More ›››

2026-017: Critical Vulnerability in Cisco Secure Email Gateway

Thursday, October 15, 2026

On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system.
The Cisco PSIRT is aware of active exploitation of this vulnerability.
CERT-EU strongly recommends updating the Content Scanner Tools package or upgrading Cisco AsyncOS Software to a fixed release as soon as possible, prioritising appliances reachable from the internet. CERT-EU also recommends checking all affected appliances for indicators of compromise.

More ›››

2026-016: Critical Vulnerability in GitLab CE and EE

Monday, October 12, 2026

On 12 October 2026, GitLab released versions 19.4.2, 19.3.4 and 19.2.8 of GitLab Community Edition (CE) and Enterprise Edition (EE), fixing 24 security issues among which a critical vulnerability that could allow an unauthenticated attacker to execute arbitrary code on the server.
CERT-EU strongly recommends upgrading self-managed GitLab CE/EE instances to a fixed version as soon as possible, starting with internet-facing instances.

More ›››

2026-015: Critical Vulnerability in Multiple Atlassian Products

Wednesday, October 7, 2026

On 5 October 2026, Atlassian published a security advisory addressing a critical arbitrary file access vulnerability. It affects Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye.
CERT-EU strongly recommends upgrading all affected installations to a fixed version as soon as possible, starting with instances accessible from the internet. CERT-EU also recommends checking access logs for signs of exploitation.

More ›››

2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

Sunday, September 27, 2026

On 27 September 2026, Citrix published a security bulletin addressing 8 vulnerabilities affecting customer-managed Citrix NetScaler ADC and Citrix NetScaler Gateway, among which 2 critical unauthenticated Remote Code Execution (RCE) vulnerabilities. Citrix has confirmed active exploitation of these 2 critical vulnerabilities in the wild.
CERT-EU recommends updating affected software and running a compromise assessment on those exposed on the internet.

More ›››

Announcements - Latest News

Child Pornography

No more ransom!

CEO Business email Compromise (BEC) Fraud

Ransomware

Security Tips

Important Facts

Operations

69+

Evidence

1961+

Cases

445+

Child Sexual Abuse

208+

National CSIRT-CY

Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά την Διάρκεια των Ηλεκτρονικών Αγορών της Black Friday και Cyber Monday

Ψηφιακή Ασφάλεια για Ηλικιωμένους: Συμβουλές από τον Επίτροπο Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας

Εργαλείο GetSafeOnline

Ανακοίνωση Αρχής Ψηφιακής Ασφάλειας

Απλές και καθημερινές συμβουλές ασφάλειας στον κυβερνοχώρο για τα παιδιά και τους γονείς

Πώς να ελέγξετε αν το τηλέφωνό σας έχει παραβιαστεί; 5 σημάδια για να καταλάβετε

CERT-EU RSS Feeds

2026-018: Critical Vulnerabilities in PHP

2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions

2026-017: Critical Vulnerability in Cisco Secure Email Gateway

2026-016: Critical Vulnerability in GitLab CE and EE

2026-015: Critical Vulnerability in Multiple Atlassian Products

2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway

Get In Touch

Useful Links