ENISA 2021 Threat Landscape: Initial Thoughts

ENISA's 2021 threat landscape shows escalating cyber risk driven by sophisticated supply‑chain compromises (notably SolarWinds/NOBELIUM), a sharp increase in ransomware amplified by Ransomware‑as‑a‑Service and initial‑access brokers, ongoing phishing/social‑engineering (including QR‑code and BEC schemes), and growing DDoS threats via vulnerable IoT and DDoS‑as‑a‑service — recommending stronger vendor scrutiny, zero‑trust adoption, and disruption of laundering infrastructure to mitigate impact.