🛡️ Security Bulletin – CSIRT-CAN
Edition: March 2025

✉️ Editorial
March has been a month of strategic consolidation for cybersecurity in the Canary Islands. At CSIRT-CAN, we continue to strengthen the culture of prevention, promote training, and collaborate with public and private entities to address digital challenges. In this edition, we highlight regulatory progress, emerging threats, and key activities across the archipelago.

🏛️ News from the Canary Islands

📌 Canary Islands align with the National Cybersecurity Strategy
On March 31, the document “Spain, European Cybersecurity Hub” was published, positioning the country as a digital leader. As an active part of this strategy, the Canary Islands have launched actions to strengthen critical infrastructure and promote public-private cooperation in cyber defense.

🚨 Awareness campaign in educational centers
Throughout March, CSIRT-CAN launched an awareness campaign in high schools in Lanzarote and El Hierro, addressing topics such as cyberbullying, privacy on social media, and responsible technology use. Over 800 students participated in interactive workshops.

🌐 Cybersecurity Trends

• Rise of Ransomware-as-a-Service (RaaS): An increase in attacks targeting small local entities using ransomware kits available on the dark web has been detected.
• Use of AI in disinformation campaigns: Bots mimicking real profiles have been identified spreading false content on social media.
• Increase in attacks on home routers: It is recommended to update firmware and change default passwords.

🛑 Key Alerts of the Month

• Fraudulent emails impersonating postal services and banks
• Fake job offers with malicious links
• Mobile apps posing as productivity tools and stealing data

🧳 Cybersecurity in Your Daily Life

• Avoid connecting to public Wi-Fi networks without protection
• Always verify the authenticity of senders before clicking
• Use password managers to keep your credentials secure

📌 CSIRT-CAN Recommendations

• Enable two-factor authentication on your accounts
• Keep your devices up to date
• Participate in our free training sessions for public employees and citizens

🎯 Upcoming Events and Training

📍 CiberCan 2025 – Lanzarote
On March 21, the event “Cybersecurity in Island Administration” was held, featuring experts from INCIBE, the Guardia Civil, and CSIRT-CAN. Topics included the protection of critical infrastructure and incident response.

📅 April Agenda
• April 10 – Workshop “Protect Your Digital Identity” in La Laguna
• April 25 – Cyber incident simulation in collaboration with the Cabildo of Gran Canaria

🚀 These actions are part of the cybersecurity investment plan of the Government of the Canary Islands, with over €2 million allocated to training, infrastructure, and incident response.