Announcements - Latest News

Record 769 arrests and USD 65 million in illicit pharmaceuticals seized in global bust

Wednesday, 2 July 2025

An INTERPOL-coordinated operation across 90 countries has resulted in the seizure of 50.4 million doses of illicit pharmaceuticals worth USD 65...

More ›››

Strengthening the fight against cybercrime

Thursday, 23 January 2025

The need to strengthen the capabilities of the Cybercrime Sub-Directorate regarding the fight against and prevention of crimes and/or anti-social...

More ›››

57 men arrested for possessing and sharing over 100 000 depictions of child sexual abuse

Wednesday, 13 March 2024

The Cyprus Police - Cybercrime Subdivision, actively participating in the actions of Europol, after training received by its members, in relation to...

More ›››

Stay cool this summer - 11 tips to be secure online on holiday

Wednesday, 9 August 2023

Summer holidays are a chance to relax, but they can be a source of high stress themselves if you are not safe online. To help with this, the European...

More ›››

Europol's 9th Internet Organised Crime Threat Assessment (IOCTA) has been released

Wednesday, 19 July 2023

Forget the cliché of a solitary figure in a hoodie hunched over a keyboard in a dark room crunching lines of codes. It is an image that no longer...

More ›››

Six sexually-abused children rescued as a result of Europol Victim Identification Taskforce

Friday, 26 May 2023

Six victims of child sexual abuse have been identified and removed from harm as a result of the 12th Victim Identification Taskforce organised by...

More ›››

Child Pornography

Child pornography is defined as representations of minors involved in sexual acts or situations that indicate sexual activities. Sometimes the definition includes images processed by a computer. Child pornography is considered a crime and is subject to criminal sanctions.

No more ransom!

Ransomware is malware that locks your computer and mobile devices or encrypts your electronic files. When this happens, you can’t get to the data unless you pay a ransom. However this is not guaranteed and you should never pay!

CEO Business email Compromise (BEC) Fraud

CEO/BEC fraud occurs when an employee authorised to make payments is tricked into paying a fake invoice or making an unauthorised transfer out of the business account.

Ransomware

Ransomware is a type of malicious software from cryptovirology that threatens to publish the victim's data or perpetually block access to it unless a ransom is paid. While some simple ransomware may lock the system in a way which is not difficult for a knowledgeable person to reverse, more advanced malware uses a technique called cryptoviral extortion, in which it encrypts the victim's files, making them inaccessible, and demands a ransom payment to decrypt them.

Security Tips

Important Facts

2024

Operations

69+

Evidence

1961+

Cases

445+

Child Sexual Abuse

208+

National CSIRT-CY

Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά την Διάρκεια των Ηλεκτρονικών Αγορών της Black Friday και Cyber Monday

Wednesday, November 12, 2025

️ Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά τη διάρκεια των ηλεκτρονικών αγορών της Black Friday και Cyber Monday

More ›››

Ψηφιακή Ασφάλεια για Ηλικιωμένους: Συμβουλές από τον Επίτροπο Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας

Wednesday, March 12, 2025

Η ψηφιακή εποχή που ζούμε προσφέρει αμέτρητες δυνατότητες, αλλά και σημαντικές προκλήσεις, ιδιαίτερα για τους ηλικιωμένους που μπορεί να είναι πιο ευάλωτοι σε διαδικτυακές απειλές. Το Γραφείο Επιτρόπου Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας παρέχει χρήσιμες συμβουλές για ασφαλή πλοήγηση στο διαδίκτυο.

More ›››

Εργαλείο GetSafeOnline

Thursday, November 28, 2024

Το Γραφείο Επιτρόπου Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας, με γνώμονα την προστασία των πολιτών και των χρηστών διαδικτύου, έχει αναπτύξει μία πρωτοποριακή πλατφόρμα ανίχνευσης πιθανής διεύθυνσης ηλεκτρονικού «ψαρέματος».

More ›››

Ανακοίνωση Αρχής Ψηφιακής Ασφάλειας

Friday, October 18, 2024

Η Αρχή Ψηφιακής Ασφάλειας λαμβάνει σοβαρά υπόψη και αξιολογεί τις πληροφορίες για κυβερνοεπιθέσεις και ενημερώνει τις ουσιώδεις υπηρεσίες για τη λήψη κατάλληλων προληπτικών μέτρων στο πλαίσιο των αρμοδιοτήτων της.

More ›››

Απλές και καθημερινές συμβουλές ασφάλειας στον κυβερνοχώρο για τα παιδιά και τους γονείς

Tuesday, February 13, 2024

Η έκθεση των παιδιών μας στις ψηφιακές τεχνολογίες από πολύ μικρή ηλικία προσφέρει, αφενός, ευκαιρίες και δυνατότητες για μάθηση και εκπαίδευση, εμπεριέχει, αφετέρου, κινδύνους για τους οποίους τα παιδιά πρέπει να ενημερώνονται και να μαθαίνουν να αντιμετωπίζουν.

More ›››

Πώς να ελέγξετε αν το τηλέφωνό σας έχει παραβιαστεί; 5 σημάδια για να καταλάβετε

Friday, November 17, 2023

Το κινητό σας τηλέφωνο αποθηκεύει πολλές προσωπικές πληροφορίες που θα μπορούσαν να
χρησιμοποιηθούν εναντίον σας αν πέσουν σε λάθος χέρια.

More ›››

CERT-EU RSS Feeds

2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")

Thursday, April 30, 2026

On 29 April 2026, a high local privilege escalation vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named "Copy Fail", was publicly disclosed.
The vulnerability affects every mainstream Linux distributions shipping a kernel built since 2017. A public proof-of-concept exploit has been released.
As of the date of this advisory, no distribution has shipped a fixed kernel package. The mainline fix was committed on 1 April 2026, but vendor updates are still pending across all major distributions. CERT-EU strongly recommends applying the interim mitigation immediately, prioritising Kubernetes nodes, and CI/CD runners exposed to untrusted workloads.

More ›››

2026-004: Critical Vulnerability in SharePoint Exploited

Wednesday, March 25, 2026

On 17 March 2026, Microsoft updated one of its January 2026 security advisories related to a remote code execution vulnerability in Microsoft SharePoint. Specifically, Microsoft raised the CVSS score and changed the FAQ section to indicate that the vulnerability could be exploited by an unauthenticated attacker. This vulnerability was added in the CISA's Known Exploited Vulnerabilities (KEV) catalogue on 18 March 2026.
Additionally, three further RCE flaws affecting Microsoft SharePoint were addressed in the March 2026 release.
CERT-EU strongly recommends updating SharePoint servers as soon as possible, prioritising internet-facing assets. CERT-EU also encourages IT administrators to take necessary remediation actions.

More ›››

2026-003: Multiple Vulnerabilities in Citrix NetScaler and Citrix ADC

Monday, March 23, 2026

On 23 March 2026, Citrix published a security advisory addressing multiple vulnerabilities affecting NetScaler ADC and NetScaler Gateway. These vulnerabilities may lead to sensitive information disclosure and user session mix-up under specific configurations.
At the time of writing, there is no public evidence of active exploitation. It is strongly recommended updating affected gateways, prioritising internet-facing assets. It is also recommended to preserve evidence for further investigation.

More ›››

2026-002: Multiple Vulnerabilities in Cisco Products

Thursday, February 26, 2026

On 25 February 2026, Cisco released security advisories addressing multiple high and critical severity vulnerabilities in Cisco Catalyst SD-WAN controllers and Cisco SD-WAN Manager. If exploited, these vulnerabilities could allow attackers to gain administrative access to compromised systems.
It is recommended to capture forensic evidence, hunt for indicators of compromise, and apply updates as soon as possible.
One of the vulnerabilities, CVE-2026-20127, is exploited in the wild since 2023.

More ›››

2026-001: Critical vulnerabilities in Ivanti EPMM

Friday, January 30, 2026

On 29 January 2026, Ivanti released a security advisory addressing two critical vulnerabilities in their EPMM products. An attacker could exploit those flaws to achieve unauthenticated remote code execution on the vulnerable device. One of these vulnerabilities have been exploited in a limited number of cases.

More ›››

2025-042: Critical Vulnerability in Cisco Secure Email and Web Manager

Thursday, December 18, 2025

On December 17, 2025, Cisco released a security advisory for a critical vulnerability affecting Cisco Secure Email Gateway and Cisco Secure Email and Web Manager products.
It is recommended to follow Cisco's recommendations to check whether vulnerable appliances have been compromised, and to remediate the issue. There is no patch available for this vulnerability yet.

More ›››

Announcements - Latest News

Child Pornography

No more ransom!

CEO Business email Compromise (BEC) Fraud

Ransomware

Security Tips

Important Facts

Operations

69+

Evidence

1961+

Cases

445+

Child Sexual Abuse

208+

National CSIRT-CY

Συμβουλές για Ενίσχυση της Ψηφιακής Ασφάλειας κατά την Διάρκεια των Ηλεκτρονικών Αγορών της Black Friday και Cyber Monday

Ψηφιακή Ασφάλεια για Ηλικιωμένους: Συμβουλές από τον Επίτροπο Επικοινωνιών - Αρχή Ψηφιακής Ασφάλειας

Εργαλείο GetSafeOnline

Ανακοίνωση Αρχής Ψηφιακής Ασφάλειας

Απλές και καθημερινές συμβουλές ασφάλειας στον κυβερνοχώρο για τα παιδιά και τους γονείς

Πώς να ελέγξετε αν το τηλέφωνό σας έχει παραβιαστεί; 5 σημάδια για να καταλάβετε

CERT-EU RSS Feeds

2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")

2026-004: Critical Vulnerability in SharePoint Exploited

2026-003: Multiple Vulnerabilities in Citrix NetScaler and Citrix ADC

2026-002: Multiple Vulnerabilities in Cisco Products

2026-001: Critical vulnerabilities in Ivanti EPMM

2025-042: Critical Vulnerability in Cisco Secure Email and Web Manager

Get In Touch

Useful Links