Cyber Weather

Our monthly Cyber Weather reports are targeted at parties who work with information security issues at different levels of organisations. The aim of Cyber Weather is to report on cyber events in a concise and easy-to-understand form. Cyber Weather summarizes the month's most significant events and complements other publications of the National Cyber Security Centre, such as the Weekly Review. We reformed the Cyber Weather at the beginning of 2026. We updated the product's visual identity and made minor changes to its content and structure.

Cyber Weather includes three categories for cyber security phenomena:

sunny = situation is calm
cloudy = situation is worrying
stormy = situation is serious

Cyber Weather consists of five main sections:

Events of the past month
Cyber weather phenomena
Cyber weather in numbers
Cyber weather forecast
Developments, regulation and standards in the information security sector.

Events of the past month

This section contains Cyber Weather's key figures, an overview of the month, and practical tips and recommended measures to improve preparedness.

We introduced the Hailstorm of the Month slide as part of the redesign carried out in 2026. The section highlights current, significant or otherwise noteworthy cybersecurity topics. The column is also intended for guest articles and infographic presentations on cybersecurity and information security topics.

Cyber weather phenomena

In this section, we examine the developments and trends of various phenomena observed during the past month. The phenomena covered in Cyber Weather include:

data breaches and leaks
malware
vulnerabilities
scams and phishing
automation and IoT
network performance.

The content is divided across multiple pages. The familiar six-panel overview page summarising all phenomena remains and is suitable for use in presentations and briefings.

Cyber weather in numbers

As new content, we review case statistics based on reports received by the National Cyber Security Centre. The statistical graphics also enable comparisons between the current and previous year.

Cyber weather forecast

The cyber weather forecast provides a summary based on previous observations and an indicative assessment of cyber threats and their likely developments in the coming months. The overall cyber weather and threat level remain rainy in nature (worrying).

TOP 5 threats

We publish the Top 5 threats twice a year, in the March and September editions of Cyber Weather. The section reviews the five most significant cyber threats from an organisational perspective. TOP 5 threats are based on the regular analyses of our teams of experts. We review the prioritization of the Top 5 threats on a semi-annual basis.

Long-term (+5 years) Cyber weather

We monitor long-term cyber phenomena whose developments are widely connected to our society and may have long-term effects on several sectors and the daily lives of people. We also address long-term monitoring topics twice a year in the March and September editions of Cyber Weather. The long-term cyber phenomena are based on the regular analyses of our teams of experts. Long-term monitoring topics are updated annually.

Developments, regulation and standards in the information security sector

In the section on developments, regulation and standards in the information security sector, we provide information on key reforms and changes in national and EU regulation, for example.