SopraSteria-State-of-Security-2026.md

State of Cyber Security 2026 provides a strategic threat-intelligence overview for Nordic organisations, describing accelerating AI-driven threats, nation-state APT activity (Russia, China, Iran, North Korea), organised cybercrime (RaaS, IAB, IaaS), supply-chain attacks, and active exploitation of critical vulnerabilities. The report highlights mobile and OT/ICS as primary enterprise attack surfaces, documents specific exploitation trends (ClickFix, Paragon zero-click spyware, npm/Salesloft supply-chain incidents, notable CVEs), and prescribes operational mitigations: Zero Trust, identity-first defenses, MDM+MTD, patching/asset hygiene, incident response exercises, and governance and regulatory alignment (NIS2/DORA/Digital Security Act).