Brussels, January 21, 2026 – The Europe Today: The European Commission on Tuesday announced a new cybersecurity package aimed at enhancing the European Union’s resilience against growing cyber and hybrid threats targeting critical services and democratic institutions, media reports said.
At the center of the package is a revised Cybersecurity Act, designed to safeguard the EU’s information and communication technology (ICT) supply chains, with particular attention to risks posed by third-country suppliers with cybersecurity concerns. The act establishes “a harmonized, proportionate, and risk-based” framework to help the EU and its member states identify and mitigate threats across 18 critical sectors.
“In today’s geopolitical landscape, supply chain security is no longer just about technical product or service security, but also about risks related to a supplier, particularly dependencies and foreign interference,” the European Commission said in a statement.
The package also includes measures to ensure the mandatory derisking of European mobile networks from high-risk suppliers, building on initiatives already implemented under the EU 5G security toolbox.
Once approved by the European Parliament and the EU Council, the revised Cybersecurity Act will come into immediate effect, reinforcing the EU’s ability to respond to evolving digital threats and protect key infrastructure.
