🛡️ Security Bulletin – CSIRT-CAN
Edition: April 2025

✉️ Editorial
April has been a key month for the consolidation of cybersecurity in the Canary Islands. At CSIRT-CAN, we continue working to strengthen the digital protection of our institutions and citizens. In this edition, we highlight regulatory developments, relevant incidents across the islands, and newly detected threats.

🏛️ News from the Canary Islands

🧩 Canary Islands prepare for the NIS2 Directive
On April 24, the National Security Council approved the procedure to develop a new National Cybersecurity Strategy aligned with the NIS2 Directive. This strategy will have a direct impact on public administrations in the Canary Islands, which will need to enhance their prevention and response capabilities against cyber incidents.

🚨 Cyberattack thwarted at the Lanzarote Island Council
The island council detected and neutralized an intrusion attempt in its IT systems. Thanks to active monitoring by CSIRT-CAN, the theft of sensitive data was prevented. The incident underscores the importance of early detection systems and trained personnel.

🌐 Cybersecurity Trends

• Increase in ransomware attacks targeting tourism SMEs
Several data encryption attempts were recorded in hotel sector companies in Tenerife and Fuerteventura.

• Disinformation campaigns on social media
Fake profiles were detected spreading manipulated news about public services, aiming to generate distrust.

🛑 Key Alerts of the Month

• Fraudulent emails impersonating the Social Security agency
• Fake traffic fine notifications with malicious links
• Mobile apps posing as public transport services and stealing credentials

🧳 Cybersecurity in Your Free Time

With Easter and spring travel:
• Avoid connecting to open Wi-Fi networks without protection
• Use strong, unique passwords for each service
• Review app permissions for those installed during your holidays

📌 CSIRT-CAN Recommendations

• Check account access from unknown devices
• Set up security alerts on your banking services
• Join CSIRT-CAN’s free training sessions for public employees

🎯 Training and Events

📍 Cybersecurity workshops in schools
In April, CSIRT-CAN held workshops in high schools in Gran Canaria and La Palma, raising awareness among over 1,200 students about safe internet use, social media, and online gaming.

📅 Upcoming Events
• May 10 – “Cybersecurity in Local Administration” conference in Las Palmas
• May 29 – Hackron 2025 Congress in Santa Cruz de Tenerife

🚀 These initiatives are part of the cybersecurity investment plan of the Government of the Canary Islands, with over €2 million allocated to training, infrastructure, and incident response.