On 16 March 2026, the Council of the European Union formally adopted Decision (CFSP) 2026/588, instituting restrictive measures against persons and entities involved in cyber-attacks that threaten the European Union or its member states. The decision specifically identified and added two individual persons and three entities to the annex list of sanctioned natural and legal persons subject to these restrictive measures under the existing CFSP framework established by Decision (CFSP) 2019/797. The Council's action underscores the continued efforts by the EU to deter and respond to cyber threats by applying targeted sanctions. Following the adoption of this decision, eight non-EU... [Continue Reading]