Securing Europe’s Critical Infrastructure by Tackling Technical Debt

With emerging technologies like AI and quantum computing, recent headlines have focused on novel threats and futuristic defenses, while outdated network equipment and software are building up in critical infrastructure and posing growing risk of exploitation. Globally, nearly half of business network infrastructure assets were aging or already obsolete at the beginning of this decade.

Continued reliance on unsupported technology for which security patches or support are no longer provided creates a significant danger. Not only does it make it easier for attackers to get in the door, it enables them to do more damage while they are there, and makes it harder for defenders to boot them back out. Malicious cyber actors are taking note. Volt Typhoon is just one example of high-profile nation-state sponsored campaigns targeting unpatchable technology.

Europe’s Policy Tools to Address Technical Debt

While much of the EU’s cybersecurity policy framework was…