Skip to main content
National Cyber Security Center
Report incidents
Report incidents
Report incidents

National Cyber Security Centre Finland

News

  • As the school year begins, it is a good time to remind children about safe internet use

    , updated at 15:35

    Many children get their first phone when they start school or begin using digital services more independently than before. However, a safe digital everyday life does not happen by itself: children need to learn digital safety skills together with their families at home. Support, interest and open discussion from parents and guardians remain the most important ways to keep children safe online.

  • Cyber Weather for June 2026

    , updated at 11:51

    The global FortiBleed attack campaign brought dark clouds to the Cyber Weather in June, but Finland has so far avoided the storm. The month also saw the return of scams that are typical of the summer holiday season.

  • Cyber weather for May 2026

    , updated at 13:26

    May’s cyber weather was mixed and at times unsettled. During the month, recurring and wide-ranging scam campaigns were observed, with criminals impersonating, among others, children, authorities, banks and service providers.

View all news

Vulnerabilities

  • Microsoft 365 accounts compromised – beware of phishing

    , updated at 13:50

    In August, the NCSC-FI received 70 reports related to Microsoft 365 account breaches. After the summer holiday season ended, the number of cases has risen significantly, and at present, organisational email accounts are being compromised at an accelerating pace. Numerous organisations have been exposed to breaches and subsequent phishing emails, and within a single organisation there may be several – even dozens – of compromised accounts. Criminals use stolen credentials to log in to Microsoft 365 services, and the hijacked accounts are then exploited to send new phishing messages and to carry out invoicing fraud.

  • Data breaches to Palo Alto GlobalProtect products – requires immediate action

    , updated at 14:29

    A vulnerability (CVE-2024-3400) in a Palo Alto GlobalProtect product that is widely used in organisations is being actively exploited. The vulnerability has significant effects and requires updating and investigating the devices. Devices susceptible to the vulnerability should be suspected of being breached.

  • A wave of data breaches is spreading between organisations – cut off the phishing

    , updated at 11:28

    Email accounts of Finnish organisations are being hijacked through a widely-spread phishing campaign. Criminals have been phishing the usernames and passwords of employees via email and scam pages, using the credentials to log in to Microsoft 365 email systems. The hijacked accounts are used to send new phishing messages both within the organisation and to other organisations.

View all vulnerabilities

Everyday information security

Not everything online is what it seems. Learn to recognize common scams and protect your personal information.

Information and guidance Ulkoinen verkkopalvelu.