Researchers at Proofpoint have uncovered alarming trends in cybersecurity, particularly in Europe, where phishing threats have surged significantly. According to their findings, published in a report on November 12, the incidence of these threats has skyrocketed by 4.5 times across the continent from 2025 to 2026, starkly contrasting with a more modest global increase of just 1.5 times during the same period. This particular rise has raised considerable concern, especially in the United Kingdom, where phishing incidents have reportedly jumped six-fold.
The Proofpoint report provides valuable insights derived from telemetry data collected between July 2025 and September 2026. The data reveals a worrying reality: European users are engaging with phishing attempts more than users elsewhere, with an alarming 8.3 interactions occurring for every 100 phishing messages delivered—this is significantly higher than the global average of just 2.0.
Furthermore, the report illustrates the evolving sophistication of cyber threats, particularly focusing on precision cloud attacks. An impressive 64% of European organizations targeted by these types of attacks have shown signs of successful compromises. During a media interaction at the Proofpoint Protect London event, Daniel Blackford, the company’s Vice President of Threat Research, explained that these findings stemmed from account-takeover telemetry. This telemetry included data on unauthorized login attempts and subsequent unauthorized activities, such as the creation of email rules or the linking of unauthorized applications.
Blackford emphasized that the efficacy of these attacks stems from their targeted nature, leveraging techniques like phishing and session hijacking to breach specific user accounts. This strategic precision stands in stark contrast to more indiscriminate, brute-force attack methods, highlighting a concerning evolution in the tactics utilized by cybercriminals.
The expansion of espionage operations further complicates the cybersecurity landscape in Europe. The report indicates that threat actors from South Asia are increasingly extending their reach into Western European markets, while state-affiliated hacking groups from Russia and China are also adapting and evolving their strategies to exploit vulnerabilities in target nations.
Moreover, the growing reliance on cloud services and artificial intelligence (AI) is introducing new security challenges. Proofpoint’s findings spotlight the proliferation of AI-enabled applications, with more than 188,000 connected through authentication and OAuth frameworks. Alarmingly, there has been a 4.6-fold increase in the number of European sensors affected by attacks targeting open-source AI technologies over consecutive 90-day periods.
Blackford remarked on the accelerating adoption of AI tools by attackers, noting that while there may have been skepticism about the immediate risks posed by AI tools a year ago, the last six to eight months have demonstrated a significant shift. The widespread utilization of coding assistants and various AI applications across numerous sectors has underscored the emerging threats these technologies present.
In light of these findings, organizations across Europe are urged to adopt more robust cybersecurity measures. The implications of this report extend beyond individual companies; they reflect a growing urgency for collaborative strategies within the cybersecurity community to combat the sophisticated techniques employed by modern cybercriminals.
As European industries grapple with the realities of these persistent threats, sectors such as hospitality and healthcare are particularly vulnerable. In the hospitality sector, malware incidents account for 21% of detected threats—nearly double the global average. In healthcare, callback phishing attacks have surged by a staggering 257% year over year, coupled with an 84% increase in malware detections.
This evolving threat landscape indicates that organizations must remain vigilant and proactive in their cybersecurity strategies. Failure to adapt to these changes could result in severe repercussions, not only for affected organizations but also for the broader economy. With the specter of increasingly sophisticated cyberattacks looming large, the call for vigilance has never been more urgent.
As the Proofpoint report clearly indicates, the future of cybersecurity in Europe hinges on collective awareness and proactive measures that can effectively address the persistent and evolving threats posed by malicious actors in today’s digital age.