Brussels has allocated €1.4 billion to defending Europe from cyberattacks. Its own auditors found that when that funding is passed on to third parties, nobody independently checks whether it could be reaching organisations exposed to influence from hostile states.
The warning comes from a report published on Monday by the European Court of Auditors (ECA), which examined how well the EU detects and responds to major cybersecurity incidents between 2022 and 2025.