As Ireland prepares to host the European Political Community Summit on 12 November and the Informal Meeting of EU Heads of State or Government on 13 November 2026, Integrity360 would like to highlight the potential cybersecurity risks associated with these high-profile international events and provide an update on our monitoring activities.
High-profile political events have historically attracted attention from politically motivated threat actors, particularly pro-Russian hacktivist groups such as NoName057(16), which has conducted extensive Distributed Denial of Service (DDoS) campaigns against European government institutions, public services and organisations in countries supporting Ukraine.
Other groups, including Cyber Army of Russia Reborn (CARR) and Z-Pentest, have also been associated with attacks against European critical infrastructure. Beyond DDoS, documented activities include attempts to gain unauthorised access to internet-exposed remote management interfaces and industrial control systems, particularly where weak authentication or insecure configurations are present.
The Irish National Cyber Security Centre (NCSC) has also highlighted additional threats relevant to Ireland's EU Presidency, including cyber espionage, website defacement, account compromise, phishing, ransomware and information manipulation. While these activities are not necessarily attributable to the same hacktivist groups, they represent relevant risks during periods of heightened geopolitical attention.
In response, Integrity360 has instructed its Cyber Security Operations Centre (CSOC) analysts to exercise additional vigilance when reviewing security detections involving our Irish customers, with particular attention to activity potentially associated with these threats.
Our existing monitoring and detection capabilities, depending on the technologies and log sources included in each customer's service, provide visibility into suspicious authentication attempts, anomalous account activity, potentially malicious endpoint execution, network-based threats and indicators of unauthorised access linked to these threat actors.
These capabilities allow our analysts to investigate suspicious behaviour that may indicate credential compromise, exploitation attempts or malicious activity within monitored environments. During this period, particular attention is being given to relevant alerts affecting Irish customers, using our existing detection, investigation and incident escalation processes. This enhanced vigilance it represents an increased operational focus on relevant threats using the monitoring capabilities already available within our managed security services.
We also recommend reviewing your existing DDoS protection arrangements, particularly for public-facing websites, VPN gateways and other critical internet-accessible services, and confirming that appropriate mitigation arrangements are in place with your network, hosting or cloud providers.
We also recommend ensuring that internet-exposed remote access services are appropriately secured, multi-factor authentication is enforced wherever possible, and unusual authentication activity or unexpected service disruptions are promptly reported.
Should any suspicious activity be identified through our monitored security technologies, our CSOC will investigate and escalate it in accordance with the established incident management procedures and your agreed service scope.
If you do not have a CSOC service with Integrity360, we recommend contacting your security providers to confirm that they have the appropriate level of visibility across your environment to detect, investigate and escalate suspicious activity during this period.
We will continue to maintain heightened awareness throughout the events and encourage customers to contact us through their usual support or incident-reporting channels should they have any concerns.