Cybersecurity Update - Week 22 of 2025

Aegister's weekly cybersecurity update for Week 22 of 2025, covering major threats, trends, regulatory changes (NIS 2, DORA), GRC topics, and international initiatives.

May 29, 2025 2 min read

Desk with a printed newsletter, a coffee and a calendar Made with AI
Contents
  1. Rising cyber attacks: focus on ransomware and DDoS
  2. Emerging threats: Generative AI, APT, and new attack surfaces
  3. Evolving regulations: NIS2 and DORA in focus
  4. GRC and corporate responsibility: attention to boards
  5. Strategic initiatives and European cooperation
  6. Support for compliance and resilience
  7. Official sources

Over the past week, Italy and the European cybersecurity landscape have seen significant developments. From the increase in DDoS and ransomware attacks to regulatory and strategic news, the sector continues to evolve rapidly. Below is an updated summary of emerging trends, main risks, and ongoing initiatives.

Rising cyber attacks: focus on ransomware and DDoS

In the first quarter of 2025, Italy recorded a peak in serious attacks: +54% compared to the previous year. Particularly significant were DDoS attacks, which affected both public and private sectors (+200% compared to 2024), and ransomware attacks, up 64%. Among the most critical cases was the attack on the City of Pisa by the NOVA group, with exfiltration of 2 TB of data. For comprehensive ransomware defense strategies, check our complete guide.

Emerging threats: Generative AI, APT, and new attack surfaces

According to ACN, 40% of successful attacks involved generative AI techniques to improve the effectiveness of phishing, deepfake, and social engineering. Ransomware-as-a-service fragmentation is growing, while attacks by state-sponsored APT groups are multiplying, particularly targeting digital infrastructure, energy, and telecommunications. Discover how Aegister can help protect your organization from these advanced threats.

Evolving regulations: NIS2 and DORA in focus

Italy continues implementing the NIS 2 Directive, with ACN sending PEC emails to obligated entities and publishing minimum technical specifications for cybersecurity and incident notification. For a detailed guide on NIS2 compliance, check our dedicated insight.

GRC and corporate responsibility: attention to boards

According to the WTW Directors & Officers 2025 survey, 70% of Italian executives consider cyber risk as the main threat. Attention to governance and training is strengthening, with increasing integration of cybersecurity into 231 models, ESG plans, and Enterprise Risk Management frameworks. Learn how our Virtual CISO service can support your organization.

Strategic initiatives and European cooperation

In Italy, ACN and DTD promote cyber training for SMEs and public administration. At the European level, implementation of the Cyber Solidarity Act advances with the development of pan-European SOCs and rapid response task forces. In parallel, NATO exercises such as Locked Shields 2025 also involve Italy, demonstrating the value of international cooperation. For more on collective defense strategies, read the april report.

Support for compliance and resilience

Aegister supports organizations in adapting to this evolving scenario through Virtual CISO services, NIS2 compliance solutions, and advanced threat intelligence. To discover how we can help strengthen your cybersecurity, visit our solutions page.

Official sources

This article was reviewed with AI tools for proofreading and error checking. Despite these checks it may contain inaccuracies: for compliance decisions, always refer to the official texts.

Self-assessment · NIST CSF 2.0 · ISO 27001

Cyber Check-up

A self-assessment that returns your company's cyber profile: its security posture and the recommendations to mitigate risks and start your cybersecurity journey.

Our service

Cloud Defender

The Web Application Firewall for websites and APIs: it blocks SQL injection, XSS, malicious bots and DDoS attacks with rules updated by our threat intelligence.

Learn more
Share this post:

Related news

January 31, 2025

Cybersecurity Monthly Report - January 2025 (Italy, EU, Global)

Aegister's January 2025 monthly cybersecurity report: DORA goes live, NIS 2 registration milestones, key vulnerabilities (VPN/edge), ransomware polic…

January 31, 2026

Cybersecurity Monthly Report - January 2026 (Italy, EU, Global)

Aegister’s January 2026 monthly cybersecurity report: EU cybersecurity package with Cybersecurity Act revision and NIS 2 simplification amendments, D…

February 05, 2026

NIS 2 Response Controls (RS): Signaling and Investigation Operating Model

The NIS 2 Response (RS) domain requires structured incident response through signaling, investigation, and iterative decision loops. Practical guide …