CyberNEMO joins 1st ECSCI Cluster Webinar of 2026

On 20 July 2026, Synelixis Solutions took part in the 1st Webinar of the 2026 ECSCI (European Cluster for Securing Critical Infrastructures) Webinar Series, representing the CyberNEMO project.

The online event brought together three EU Horizon-funded projects — ResilMesh, SONIC, and MIRANDA, presenting cybersecurity solutions for critical infrastructures.

ResilMesh

ResilMesh presented an intent-based approach to threat hunting, built on high-level, purpose-defined intents and an agent architecture.It leverages OpenC2, with a CACAO-based extension, and NATS messaging, with risk scored through weighted risk factors.

SONIC

SONIC introduced a security marketplace that orchestrates protection functions across multiple providers, complemented by an explainable-AI (XAI) library to help analysts interpret configurations and priorities.

MIRANDA

MIRANDA shifts supply-chain security from the software supply chain toward the service chain, covering not only development but also the operation of running services with supplier registration, dynamic parsing, and generative-AI-based prediction of network traffic, including PI networks and LoRa.

Synelixis identified common grounds with CyberNEMO, including:

  • Taxonomy alignment (MITRE / CVE).
  • Spatio-temporal scalability of asset discovery.
  • Attack-graph construction.

Further details: 1st Webinar of the 2026 ECSCI Cluster Webinar Series .

Read More

CyberNEMO Presents at the AIOTI WG Standardisation Focus Group on EU-Funded Projects

On 3 July 2026, CyberNEMO joined the AIOTI WG Standardisation FG landscape maintenance on EU-funded projects meeting, contributing the project perspective on cybersecurity challenges and standardization for the IoT–Edge–Cloud–Data continuum.

The project was represented by Andreas Papadakis and Ilias Seitanidis from Synelixis Solutions (SYN). More specifically, CyberNEMO presented its partners’ contributions in the following working groups:

  • IDMEF v2 for event detection, extended for the computing continuum.
  • EE-ISAC and STIX-based automation of NIS2 incident reporting flows.
  • CEN/CLC JTC21/WG5 – Cybersecurity for AI Systems: “Artificial Intelligence — Cybersecurity specifications for AI Systems”.
  • CEN/CLC JTC13/WG9 – Horizontal Cybersecurity for Products with Digital Elements (CRA).
  • CNCF Cloud Native Computing Foundation – participation in the CNCF Open Source Working Group.

The Alliance for AI, IoT and Edge Continuum Innovation (AIOTI) is a leading European multi-stakeholder organization dedicated to the Internet of Things, edge computing, and other converging technologies. AIOTI brings together industry, SMEs, start-ups, academia, research centers, and public bodies from across the digital value chain, with the mission to drive policy, research, and innovation in IoT and edge computing.

The AIOTI Working Group on Standardization is a horizontal group focusing on IoT and edge computing high-level architectures, gap analysis, and semantic interoperability. The working group produces, among others, the IoT and Edge Computing EU-Funded Projects Landscape Report.

During the Focus Group session on 3 July 2026, CyberNEMO presented and discussed its results and standardization activities. The CyberNEMO coordinator discussed with George Karagiannis, Chairman of AIOTI WG Standardization, aspects related to securing the compute continuum and its expanding attack surface, the need for real-time threat detection at scale, explainable decision support, and the project’s contribution to standardization efforts.

CyberNEMO’s contribution has been accepted and will be included in the forthcoming AIOTI report.

Read More

CyberNEMO Reaches a Key Milestone with Its Mid-Term Review 

The CyberNEMO consortium has reached an important milestone in the project lifecycle with the successful preparation and execution of its Mid-Term Review with the European Commission. 

This review marks the completion of the first 18 months of the project and provides an opportunity to present the progress achieved across all work packages, highlighting both the technical developments and the collaborative efforts that have driven the project forward. 

During the review, the consortium presented the work carried out so far, including advances in Zero Trust architectures, AI-driven cybersecurity capabilities, security orchestration, pilot preparation, dissemination activities, and collaboration with the wider European cybersecurity ecosystem. The session also provided an opportunity to demonstrate how the project is progressing towards its objective of strengthening cybersecurity across the IoT–Edge–Cloud continuum. 

Managing a project of this scale, involving a large and multidisciplinary consortium, has also generated valuable lessons learned. Throughout the first half of the project, partners have worked together to coordinate complex technical developments, align different areas of expertise, and establish efficient collaboration mechanisms that enable the integration of multiple technologies into a coherent cybersecurity framework. 

The Mid-Term Review is not only an assessment of the work completed so far but also an opportunity to reflect on the challenges encountered and the knowledge gained during the implementation process. These experiences will help guide the next phase of the project and contribute to the successful delivery of its final objectives. 

Looking ahead, CyberNEMO now enters its second half with a strong focus on system integration, pilot validation, stakeholder engagement, and the demonstration of its technologies in real-world environments. The consortium remains committed to delivering innovative cybersecurity solutions that contribute to a more secure, resilient, and trustworthy European digital ecosystem.

Read More

Gaps and opportunities in Europe’s Edge Cybersecurity Market: what remains unsolved

Understanding a market means understanding not just where money is flowing, but where genuine needs are going unmet. In European edge security, the gaps are structural and well-documented — and they represent the exact space where projects like CyberNEMO operate.

The SME security divide is perhaps the most acute. Small and Medium Enterprises face a compound problem: the upfront cost of edge infrastructure is already a stretch, and layering credible security on top of it is frequently prohibitive. Survey data identifies “high costs” and “unclear ROI” as the primary barriers to adoption. The consequence is a two-tier market where large industrial players deploy sophisticated edge security, while SMEs — which represent over 99% of European businesses and the backbone of manufacturing — remain largely exposed. ENISA’s Threat Landscape reports that nearly 40% of cyberattacks in Europe already target SMEs, making this divide a systemic risk, not just a commercial gap.

The skills shortage compounds every other problem. According to the 2024 ISC2 Cybersecurity Workforce Study, Europe faces a shortage of approximately 424,000 skilled cybersecurity workers — a gap that widened by nearly 10% in a single year. Within the EU specifically, 65% of organisations reported a cybersecurity staffing shortage in 2024. Edge security demands an especially rare profile: practitioners must simultaneously understand Kubernetes (IT), SCADA systems (OT), and 5G protocols — a combination that barely exists in the current talent pool. This scarcity is a hard ceiling on how fast the market can actually deploy the solutions it needs.

Against these structural challenges, several clear opportunities are emerging for vendors and integrators willing to address root causes rather than symptoms.

Compliance as a Service is the most immediately actionable. NIS2 and the CRA create mandatory audit, documentation, and reporting obligations that are genuinely complex to satisfy at scale. Vendors offering edge platforms that are “pre-certified” — automatically generating required audit logs and compliance artefacts — will face strong demand from organisations that lack the internal capacity to manage this themselves.

Privacy-Enhancing Technologies (PETs) — including Federated Learning and Homomorphic Encryption — are moving from academic research into commercial deployment, enabling “Privacy-by-Design” architectures where data can be processed without being exposed. For healthcare and finance in particular, this is not a differentiator: it is a prerequisite for using edge infrastructure at all.

The Sovereign Stack gap remains largely unaddressed. There is unmet demand for a seamless European alternative that combines the developer experience and scalability of a hyperscaler with the legal certainty of a local provider. And OT/IoT Managed Detection and Response (MDR) — specialist services that understand industrial protocols well enough to distinguish a cyberattack from a mechanical fault — are in high demand and chronically short supply. With the European managed security services market set to grow at roughly 10% CAGR through 2033, the structural shortage of OT-literate security specialists means that supply will struggle to keep pace with demand for years to come.

These are not niche edge cases. They are the dominant unmet needs of the market CyberNEMO is designed to serve.

Read More

Partner Spotlight: SPACE Hellas

1. Company Profile and Evolution

Founded in 1985, SPACE Hellas has evolved from a pioneering network service provider into a leading international Digital Integrator and Value-Added Solutions Provider. With nearly 40 years of sustainable growth, the company holds a dominant position in the high-technology arena, designing and supporting complex ICT, Hybrid Cloud, and Security solutions for the enterprise, government, and defense sectors.

Headquartered in Athens and listed on the Athens Stock Exchange, SPACE Hellas has expanded its footprint across the EMEA region with subsidiaries in five countries. The company is distinguished by its 24/7 state-of-the-art Network and Security Operations Center (NOC/SOC) and an extensive technical support network that handles over 45,000 calls annually. This evolution is underpinned by a commitment to quality and security, evidenced by a robust portfolio of ISO certifications and over 700 vendor-leading accreditations.

2. Focus on Research and Development

Innovation is a core pillar of SPACE Hellas’ strategy. The company’s dedicated R&D Department focuses on bridging the gap between niche scientific research and commercial exploitation. With a track record of participating in and coordinating over 45 European and National projects (including Horizon Europe, H2020, and EDF), the organization actively shapes the future of the computing continuum.

Space Hellas’ R&D expertise spans several critical domains:

  • Cybersecurity & Cyber Defense: Leading initiatives in threat hunting, incident response, and zero-trust architectures (e.g., PANDORA, PALANTIR).
  • Future Networks: Expertise in 5G/6G ecosystems, satellite communications, and software-defined infrastructures.
  • Smart & Secure Cities: Developing AI-driven solutions for IoT, situational awareness, and critical infrastructure protection.
  • Space Technologies: Advancing Earth Observation and satellite payload data management.

3. SPACE Hellas Role in CyberNEMO

In the CyberNEMO project, SPACE Hellas leverages its extensive experience in security orchestration to lead the development of the Computing Continuum Access Security Broker (CASB) component. Acting as a strategic technical partner, SPACE Hellas is responsible for the architectural design and implementation of this critical security layer, which ensures protected data flows across the project’s meta-Operating System.

Beyond its technical leadership in Task 3.3, the organization plays a horizontal role in ensuring system-wide interoperability. By defining the interaction between the CASB, the Event Bus, and the Intelligent Policy Decision Making (IPDM-DSS) framework, SPACE Hellas ensures that security policies are consistently enforced across diverse pilot environments. Furthermore, the company contributes its operational expertise to the project’s validation trials, ensuring that the developed security innovations are robust, scalable, and ready for deployment in real-world critical infrastructures like energy, water, and healthcare.

Read More

CyberNEMO attends the CEI-Sphere and LSP O-CEI and COP-Pilot Webinar on Privacy-Enhancing Technologies

CyberNEMO partners (Synelixis and Maggioli) attended the webinar on Privacy-Enhancing Technologies for Information Security in Edge-Cloud Applications, organized by CEI-Sphere and Large Scale Pilots O-CEI and COP-Pilot.

The webinar explored the growing challenge of securely sharing and processing data across distributed environments, from industrial platforms to smart infrastructures, where large numbers of devices, man-in-the-middle threats, and purpose limitation requirements create complex security landscapes. Protecting sensitive data today goes well beyond personal data as business data sovereignty is equally at stake.

Presentations from Fraunhofer ISST and insights from the O-CEI and COP-PILOT Large-Scale Pilots highlighted how technologies such as Federated Machine Learning (FML), Trusted Execution Environments, Homomorphic Encryption, and Zero-Knowledge Proofs can be embedded directly into system design. The “black sheep problem” in FML, identifying and mitigating malicious or corrupted participants in federated learning, is a as a shared concern directly relevant to CyberNEMO’s work on ZT-FML.

CyberNEMO identified synergies in two areas a) the Zero-Trust Federated Machine Learning (ZT-FML) and b) the use of LLMs and MCP-based architectures for privacy-aware decision support functionality.

Read More

CyberNEMO Meets IDMEFv2: Employing, Supporting and Contributing to Incident the Detection Standard

CyberNEMO project, represented by the Coordinator Synelixis and partner Maggioli, met Gilles Lehmann, lead of the IDMEFv2 Task Force, on 30 April 2026, for a focused exchange on IDMEFv2 standardisation developments and its usage in the context of the project.

In the context of IDMEFv2 standardisation effort, draft v08 has been published in April 2026 and the IETF meeting scheduled for July 2026, where the standard is seeking to advance towards an Experimental RFC status.

CyberNEMO is as one of the projects employing IDMEFv2 (link). Specifically, IDMEFv2 is used in the communication backbone between heterogeneous security detectors and the Decision Support System. By adopting a standardised, JSON-based incident description format, the project enables diverse sensors to feed alerts into a unified pipeline. The usage of IDMEFv2 across the computing continuum allows for suggestions to the standard on behalf of the CyberNEMO consortium, an effort led by partner Maggioli who provides one of the main detector AI-based Firewall as a Service.

Both sides concluded that this partnership is going to level up the standard and bring some serious momentum to the project, while this contribution is foreseen to have a significant impact on the domain and will play a pivotal role in future developments.

Read More

EC Cybersecurity cluster 3rd meeting

The CyberNEMO project was present in the 3rd meeting of the European Cybersecurity Cluster along with INTACT, CASTOR, and MIRANDA following the meeting that took place on January 16th. This strategic gathering was scheduled to review the projects’ updates since their last meetup and align the shared goals of these leading EU-funded initiatives.

Among the various topics discussed, for CyberNEMO, the presentation of the CyberNEMO Decision Support component was an important milestone. In addition, the projects demonstrated significant interest in co-organizing a workshop in Paris this fall.

The exchange was further enriched by the introduction of three new projects to the cluster: Mediate, CoCyber and GuardAI, expanding the group’s collective expertise in securing the digital landscape.

Read More

CyberNEMO Holds its 6th General Assembly in Rome

The CyberNEMO consortium is meeting this week in Rome, Italy, for its 6th General Assembly, hosted by Engineering Ingegneria Informatica.

This plenary gathering represents an important moment in the project’s evolution, bringing together partners to review progress, align on next steps, and reinforce collaboration across the consortium in the view of the upcoming 1st half review.

Discussions during the meeting focus on key areas such as AI-driven cybersecurity, risk assessment and mitigation, system integration, and validation of technologies in complex IoT–Edge–Cloud environments. The sessions also address the project’s broader impact, including dissemination, standardisation, and engagement with stakeholders.

A central objective of this General Assembly is to advance the integration of CyberNEMO components into a cohesive framework, moving from individual developments toward interoperable and scalable solutions for securing critical infrastructures.

Beyond the technical work, the meeting provides a valuable opportunity to strengthen collaboration, ensuring alignment and continuity as the project progresses toward its next milestones.

Read More