Serious vulnerabilities are being exploited increasingly quickly

Based on the reports submitted to the National Cyber Security Centre, the cybersecurity threat level in Finland remains elevated. During the past year, the number of serious incidents has increased significantly, and for example, several organisations have been targeted by ransomware.

Software vulnerabilities have also increased. Particularly concerning is how quickly new vulnerabilities are being exploited in attacks. This trend represents a clear change compared with the previous year.

The increase in phishing and scam messages is a growing concern

Increasing phishing and scam messages are a growing problem. During the previous quarter, the number of scam and phishing messages reported to the centre increased by 64 per cent. The figures are affected by monthly variations. Certain themes become more common in scams depending on the time of year. Bank-related phishing messages have become an established phenomenon. These changes in the cybersecurity threat landscape pose a broad challenge to society’s overall security.

“Changes in cyber threats have been reflected in the activities of the National Cyber Security Centre, particularly through the increased number of tasks related to serious incidents. Cybercrime is international, and technological development increases its opportunities for action. It is important that our society continues to function and that people can trust our digital society in the future as well. This requires ensuring sufficient resources for cybersecurity,” says Anssi Kärkkäinen, Director General of the National Cyber Security Centre.

Finland is well prepared for various cyber threats – but continued vigilance is needed

Traficom’s National Cyber Security Centre maintains a comprehensive cybersecurity situational picture covering society as a whole and provides broad support to organisations across different areas of cybersecurity. By analysing information, it is possible to assess the impacts of disruptions and how the cybersecurity situation has developed over the long term.

Director General Kärkkäinen reminds us that Finland is well prepared for various cyber threats, but continued vigilance is required at all times. Cooperation between different sectors of society is close, and information is shared daily. There are cases where a company has actively shared information about an attacker’s activities, enabling other companies in the same sector to protect their operations. This is a good example of cooperation between businesses and authorities.

State-sponsored cyber activity targeting Finland remains active

The Finnish Security and Intelligence Service combats and gathers information on cyber espionage and cyber influence activities by foreign states targeting Finland, and produces intelligence information on these activities for other authorities, among others. According to the Finnish Security and Intelligence Service’s assessment, the development of the cyber threat posed by Russia against Finland is particularly affected by how Russia’s military actions in Ukraine continue.

“When the war in Ukraine subsides or ends, Russia will be able to redirect the cyber capabilities currently tied to Ukraine also against Finland,” says Teemu Liikkanen, Head of the Finnish Security and Intelligence Service’s Counterintelligence Department.

According to the Finnish Security and Intelligence Service’s assessment, China’s cyber activity targeting Finland remains active. China also actively exploits Finnish network infrastructure and poorly protected consumer network devices in its cyber operations targeting third countries.

Society must continuously prepare for changes in the threat landscape – also online

According to Director General Kärkkäinen, the different sectors of society must continuously prepare for changes in the threat landscape. In this, information sharing, anticipation and the continuous development of effective cooperation are key factors.

“We continue to encourage organisations to report all cybersecurity incidents to us with a low threshold, whether they involve phishing messages, denial-of-service attacks or attempted data breaches. Information sharing helps us ensure the operational resilience of critical infrastructure that is important for national security. It is important that essential services for the functioning of society, such as energy, telecommunications, healthcare and communications, remain protected and operate without disruption in all situations,” says Director General Kärkkäinen.

More information

Traficom’s media service, tel. +358 295 345 648, viestinta@traficom.fi

Finnish Security and Intelligence Service communications, tel. +358 50 402 6981 media@supo.fi

Traficom and the Finnish Security and Intelligence Service: Cybersecurity threat level in Finland remains elevated and serious data breaches are increasing – how you can protect yourself