Weekly summaries

8 weekly summaries, newest first — the strategic lens over each ISO week: multi-day chains, research and threat-actor developments, annual reports, policy, and the look ahead.

• CTI Weekly Summary — 2026-W27
  weekly34 strategic entries
  Netherlands NIS2 (Cyberbeveiligingswet) clears the lower house — entry into force targeted for 1 July 2026
  2026-W27
• CTI Weekly Summary — 2026-W26
  weekly41 strategic entries
  G7 Évian cybersecurity declaration calls PQC an "urgent priority" — and the expected hacktivist DDoS materialised on day one
  2026-W26
• CTI Weekly Summary — 2026-W24
  weekly28 strategic entries
  European Commission refers France and Spain to the CJEU over NIS2 non-transposition
  2026-W24
• CTI Weekly Summary — 2026-W23
  weekly24 strategic entries
  VerdantBamboo / UNC5221 / WARP PANDA — 18-month undetected China-nexus intrusion through MSP pfSense
  2026-W23
• CTI Weekly Summary — 2026-W22
  weekly31 strategic entries
  ENISA NIS360 2026 — public administration, health and water sit in the NIS2 "risk zone"
  2026-W22
• CTI Weekly Summary — 2026-W21
  weekly39 strategic entries
  EU 20th Russia sanctions package — managed-security-services prohibition effective 25 May; Switzerland adopted most measures 22 May
  2026-W21
• CTI Weekly Summary — 2026-W20
  weekly51 strategic entries
  EU Digital Omnibus political agreement — AI Act high-risk Annex III compliance deadline extended to 2 December 2027
  2026-W20
• CTI Weekly Summary — 2026-W19
  weekly52 strategic entries
  Critical infrastructure water (PL)
  2026-W19