CERT-EU
Cybersecurity service for European Union institutions and agencies.
Created in 2011, CERT-EU provides shared cyber defence and incident-response services to European Union institutions, bodies, offices and agencies.
Last refreshed: 22 October 2026
Will EU institutions patch PHP before public exploits spread?
Timeline for CERT-EU
Warned about the PHP flaws
Cybersecurity: Threats and Defences: PHP2Shell: no fix for PHP 8.1 and olderBackground
CERT-EU is the inter-institutional cybersecurity service for the European Union’s institutions, bodies, offices and agencies. It covers incident prevention, detection, response and recovery, alongside cyber threat intelligence. The service also coordinates security information exchange across its EU constituents.
The European Commission’s Directorate-General for Digital Services hosts CERT-EU administratively. Strategic governance sits with the Interinstitutional Cybersecurity Board. This structure gives EU bodies a shared operational service while keeping oversight inter-institutional. CERT-EU also works with peer computer-security response Teams and the European Union Agency for Cybersecurity, linking its internal constituency to wider European response networks.
What is CERT-EU?
Who governs CERT-EU?
What does CERT-EU do for EU institutions?
What did CERT-EU advise about the October 2026 PHP flaws?
Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.