{"id":383818,"date":"2026-11-11T02:20:00","date_gmt":"2026-11-11T10:20:00","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=383818"},"modified":"2026-11-11T02:20:01","modified_gmt":"2026-11-11T10:20:01","slug":"enisas-eu-cybersecurity-index-is-out-patching-still-takes-months","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/enisas-eu-cybersecurity-index-is-out-patching-still-takes-months\/","title":{"rendered":"ENISA\u2019s EU Cybersecurity Index is out: patching still takes months"},"content":{"rendered":"

ENISA, the European Union Agency for Cybersecurity, has published an updated EU Cybersecurity Index along with new findings on suppliers. The picture is mixed: national scores are strong, but providers are still taking too long to patch.<\/p>\n

\r\n
\r\n
\r\n
\r\n \"IObit\r\n <\/div>\r\n
\r\n IObit Software Updater<\/span>\r\n Download<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

According to ENISA, 45% of the EU IT<\/strong> service management providers it surveyed took more than three months to patch their systems, and 43% went a full year without a cybersecurity assessment. That matters because one supplier can serve a lot of customers. When patching slips, the risk spreads with it. ENISA says attackers can exploit disclosed flaws within five days, while known bugs are behind about 60% of breaches, one-third of ransomware attacks, and breach costs of $4.88 million.<\/p>\n\n

Country scores also don’t tell you everything about operational readiness. ENISA puts the EU average at 71.53 out of 100, with 22 of the 27 member states scoring between 60 and 80, and two above 80<\/strong>. Even with that, suppliers can still struggle to patch systems, verify that fixes actually worked, and test updates without causing problems. ENISA has also kept the threat level at substantial through July 2026. And although member states scored 89.91 on supply-chain practices, with 25 rated advanced, 37% said this was the hardest requirement under the NIS2 Directive. More than one-third outside the banking sector say they don’t feel prepared, and poorly tested automation<\/a> can break critical systems and cause downtime.<\/p>\n\n

If you rely on outside IT providers, this report is worth a look. You can read it on ENISA’s website.<\/p>","protected":false},"excerpt":{"rendered":"

ENISA, the European Union Agency for Cybersecurity, has published an updated EU Cybersecurity Index along with new findings on suppliers. The picture is mixed: national scores are strong, but providers are still taking too long to patch. According to ENISA, 45% of the EU IT service management providers it surveyed took more than three months … Continue reading “ENISA\u2019s EU Cybersecurity Index is out: patching still takes months”<\/span><\/a><\/p>\n","protected":false},"author":9349,"featured_media":383817,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[],"usertag":[],"vertical":[],"content-category":[6771],"class_list":["post-383818","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","content-category-ai"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t