74% of employees in the EU have received suspicious content at work

Suspicious content reaches three out of every four employees

According to Flash Eurobarometer 576, 74% of employees in the European Union report having received suspicious emails, messages, voice messages, or links at work over the past six months.

The most frequently cited threat is phishing and other deceptive content (39%). This is followed by:

• attempts to steal personal data – 18%;
• malware attacks – 17%;
• attempts to steal passwords – 16%;
• scams created using artificial intelligence – 15%.

The data reveals a gap between risk awareness and practical preparedness. Although 83% of employees believe that the consequences of a cyberattack would be serious for their organization, only 45% state that their employer regularly provides information and up-to-date guidance on cybersecurity. At the same time, 85% are interested in improving their skills.

Current State Assessment and Planning

Paraflow supports organizations with:

• initial consultation;
• IT infrastructure audit and assessment;
• vulnerability identification and prioritization;
• gap analysis of current compliance;
• strategy and implementation planning;
• technology solution deployment;
• development of policies, procedures, and documentation.

Protection of Networks, Systems, and Electronic Communication

Paraflow designs and implements multi-layered technological protection, which may include:

• Next-Generation Firewalls (NGFW);
• Intrusion Detection and Prevention Systems (IDS/IPS);
• network segmentation and secure remote access;
• email protection against phishing, malware, and data leakage;
• DNS protection;
• endpoint protection (including EDR);
• vulnerability management solutions;
• data protection via DLP;
• cryptographic and PKI solutions.

Monitoring, Detection, and Response

SIEM solutions collect and analyze events from various infrastructure components to provide comprehensive visibility and enable the early detection of anomalies.

When combined with SOC services, they facilitate:

• continuous monitoring of the environment;
• threat detection and analysis;
• incident prioritization;
• timely response;
• the collection of information required for regulatory reporting.

This is particularly important for significant incidents, for which the Cybersecurity Act mandates early warning within 24 hours and subsequent notification within 72 hours.

An Integrated Approach to Cybersecurity

As a systems integrator, Paraflow connects individual security components into a unified architecture—covering network security, endpoints, email, identities, data, monitoring, and backup and recovery.

Solutions are implemented using technologies from leading vendors and developers, including Cisco, Palo Alto Networks, Check Point, Fortinet, Microsoft, Broadcom, Cynet, and Rapid7.

The approach is tailored to the specific organization’s IT infrastructure, risk profile, and regulatory obligations. The goal is not merely to tick boxes for specific requirements, but to build a manageable and resilient environment where people, processes, and technologies function as a single system.

European Cybersecurity Month is an ideal time for organizations to assess their current status and determine their next practical steps.

Contact the Paraflow team for an initial consultation, an IT infrastructure audit, or an assessment of readiness to meet the requirements of the NIS2 Directive and the Cybersecurity Act.

Sources:

ENISA Threat Landscape 2026, published on September 22, 2026;

Flash Eurobarometer 576: Cybersecurity at the workplace: awareness and preparedness among employees, published on September 30, 2026;

Act Amending and Supplementing the Cybersecurity Act, published in the State Gazette, Issue 17 of February 13, 2026.