2026. gada 1. ceturksnis Latvijas kibertelpā

At the same time, it reflects not only an actual increase in threats but also an improvement in organizational cybersecurity capabilities regarding visibility at the endpoint level, enabled by the implementation and expanded compliance of CERT.LV Security Operations Center (SOC) services. CERT.LV continues to develop automated detection capabilities, proactively identifying and blocking 266 fraudulent campaigns, including preventing several near-miss cyber incidents. Attacks are becoming increasingly automated and based on social engineering rather than just technical vulnerabilities—this is amplified by the expanding use of artificial intelligence, which accelerates fraud, intrusion, and automated attacks. Serious concerns remain about threats from hostile states against Latvia aimed at gaining control and conducting destructive actions within critical infrastructure systems to influence or even disrupt essential services. To mitigate such risks and make Latvia a more difficult target, CERT.LV continues to work on operational technology activities, providing broader visibility and threat detection, security testing, and coordinated incident response. Based on observed trends during the reporting period, it is a priority to strengthen endpoint security, resource capacity, user training, and supply chain control, while continuously improving response capabilities and operational continuity in accordance with regulatory requirements.