June 9, 2026
Cyber Security Report 2026 – Year 2025. Presented this morning at the Chamber of Deputies
Threat analysis and scenario evolution
In 2025, the Cyber Security Report depicts a context in which the pressure of cyber threats intensifies : DDoS attacks are becoming more concentrated and are oriented towards sensitive targets (46% of events affecting companies and institutions in Italy concern the Government sector), ransomware is accelerating, malware campaigns are extending on a global scale, and vulnerabilities are taking on an increasing weight even on a strategic level (over 50% of the exploitation activity attributed is attributable to state-sponsored actors).
In this scenario, artificial intelligence emerges as a key transformational factor , capable of amplifying the speed and scale of certain threats, but also of strengthening defense and analysis tools.
Produced by TIM and the Cyber Security Foundation, with the contribution of the TIM Research Center, the Cyber Security Report is based on evidence gathered by TIM Group's defense units and is enriched, in this edition, with insights from Insikt Group, Recorded Future's Threat Intelligence unit, to offer a broader understanding of the transformation of cyber risk at the international level.
CYBERSECURITY: AI AND GEOPOLITICS ACCELERATE THREATS, BUT COUNTRY SYSTEM RESPONSE IS GROWING
Ransomware attacks are growing worldwide (+42%) and in Italy (+14%): the second edition of the Cyber Security Report by TIM and the Cyber Security Foundation, presented to the Chamber of Deputies, highlights increasing risks but also the role of awareness, public-private collaboration and digital sovereignty in strengthening the resilience of critical infrastructures.
In a scenario where cybersecurity is increasingly intertwined with geopolitical balances, cyber risks for citizens, businesses, and institutions are growing. Artificial intelligence, on the one hand, accelerates and makes threats more scalable; on the other, it offers new analytical and defense capabilities. In this context, in 2025, ransomware attacks were claimed globally, a 42% increase compared to 2024. In Italy, there were 166 cases, a 14% increase.
Approximately four out of ten incidents detected in our country were concentrated in the Northwest, with Lombardy accounting for over 30% of the national total. This is one of the findings emerging from the second edition of the "Cyber Security Report – Threat Analysis and Scenario Evolution," produced by the Cyber Security Foundation and TIM with the contribution of the TIM Research Center, presented today at the Chamber of Deputies. At the same time, the report also highlights a positive trend: growing awareness and cooperation between institutions, businesses, and the technical community now represents a key lever for transforming threat analysis into concrete prevention, response, and resilience capabilities. …
The European NIS2 Directive
The third part of the report addresses the NIS2 Directive, one of the European Union's main instruments for raising the common level of cybersecurity in critical sectors. Following the entry into force of Directive (EU) 2022/2555 in January 2023, 2024 marked the transition to the national transposition phase (to be completed by October 17, 2024). In Italy, this transposition took place with Legislative Decree No. 138 of September 4, 2024, which entered into force on October 16, 2024. Since that date, the National Cybersecurity Agency (ACN) has acted as the competent national NIS authority and single point of contact. …
NIS2: Business Awareness. Format Research Survey
The implementation phase of NIS2 occurs in a market where awareness of the regulation is still limited. According to a recent survey conducted by Format Research 12— aimed at understanding Italian companies' knowledge of cyber risks—when asked spontaneously for knowledge, 62,2% of companies stated they were unaware of NIS2, and 13,3% were unsure whether they were aware of it. Only 24,5% stated they were at least partially aware of it, with just 3,9% declaring "detailed" knowledge. Awareness of NIS2 is increasing among companies closest to the regulation's scope, particularly among larger companies and those in sectors most directly affected by the requirements.
The full text of the Format Research in-depth analysis is on page 102 of the Cyber Security Report 2026.
