The Canadian Centre for Cyber Security (Cyber Centre) has released its National Cyber Threat Assessment 2025-2026 (NCTA 2025-2026). As with previous assessments, it provides a snapshot of cyber threats affecting Canada and Canadians and forecasts how they may evolve in the coming years. The Cyber Centre's flagship report helps build Canada's resilience to cyber threats.
Canada is confronting an expanding and complex cyber threat landscape with a growing cast of malicious and unpredictable state and non-state cyber threat actors. The Cyber Centre assesses that state-sponsored and financially motivated cyber threats are increasingly likely to affect Canadians, and foreign threat actors are moving beyond espionage to conduct more disruptive activities.
NCTA 2025-2026 shows that cybercrime remains a persistent, widespread and disruptive threat to individuals, organizations and all levels of government across Canada, and that ransomware is the top cybercrime threat facing Canada's critical infrastructure. It also says that the Cybercrime-as-a-Service business model is almost certainly contributing to the continued resilience of cybercrime in Canada and around the word.
The report states that state-sponsored cyber threat actors are becoming more aggressive and are almost certainly combining disruptive computer network attacks with online information campaigns to intimidate and shape public opinion. Well-known state adversaries continue to support sophisticated, active programs against Canada and our allies to serve their own political, economic or military objectives.
Additionally, the report highlights key trends that will shape the cyber threat environment from now until 2026, like the impact of AI in amplifying threats and how geopolitical tensions are inspiring cyber threat activity from non-state groups.
As cyber threats continue to become more complex and sophisticated, the Government of Canada has made cyber security a priority. Budget 2024 proposed $917.4 million over five years to enhance intelligence and cyber operations programs to respond to these evolving threats. Canada's defence policy update, Our North, Strong and Free, also announced the Canadian Armed Forces (CAF) Cyber Command, a joint Canadian cyber operations capability between CSE and the CAF that will play a pivotal role in maintaining Canada's cyber security.
As Canada's leading authority in cyber security, the Cyber Centre continues to publish its best advice and guidance for Canadians, Canadian organizations and critical infrastructure to address the cyber security threats outlined in our reports and assessments.
