Latest news and stories about cyber security in Portugal for expats and residents.
The underwriting agency Innovarisk has a new Cyber Risk insurance solution aimed at companies. This insurance combines extensive financial coverage with an incident response service available 24 hours a day. Coverage for prolonged business interruption and the reputational and legal consequences that follow a cyber incident...
The Portuguese Judiciary Police (PJ) has concluded an investigation into a criminal organisation suspected of 'CEO Fraud' and 'Invoice Fraud', which moved over 3.5 million euros. Nine Brazilian nationals were arrested during an operation last year and remain in custody. The investigation revealed a hierarchical structure with a leadership core based abroad. Authorities have frozen 418,000 euros and identified 17 victims with losses totalling 1.4 million euros. According to the Annual Internal Security Report, CEO Fraud remains a significant threat, with 192 incidents recorded in 2025, a 20% increase from the previous year.
In a statement released this Wednesday, the Portuguese Security Intelligence Service (SIS) reveals that the Russian military intelligence service, the GRU, carried out an operation aimed at 'compromising routers' with the goal of intercepting and extracting 'sensitive information of a governmental, military, and critical infrastructure nature'.
The Portuguese Security Intelligence Service (SIS) has issued an alert regarding a global cyber-espionage attack by the Russian military intelligence service, the GRU, involving the compromise of routers to intercept sensitive government, military, and critical infrastructure information.
The Security Intelligence Service warns of an attack, ongoing since 2024, which originates from Russian military intelligence services.
Interpol states that this crime is among the top global criminal threats.
In the 21st century, threats rarely come through conventional means. They can manifest as the collapse of an information system, the disruption of a power grid, or the paralysing of a hospital.
Cyber risk management is not limited to an organisation's perimeter; it requires explicitly considering the risks associated with third parties and critical suppliers.
