The 2025 edition of the Cybersecurity Forum opened with a warning message. “Winter is coming,” warned Vincent Strubel, Director General of ANSSI, calling for a “scale-up” in response to increasingly systemic threats. Through the contributions of ANSSI and the experts gathered in Monaco, several key trends are emerging for 2026. Cybersecurity is entering a phase of industrialization and mutualization.

1. The post-quantum shift

ANSSI has issued its first post-quantum algorithm certifications to Thales and Samsung, marking a major evolution in security products. Starting in 2027, cryptography resistant to quantum computing will be part of the requirements for qualified solutions. Public and private players are already anticipating the migration of their critical systems and are integrating these criteria into their procurement and compliance strategies.

2. Frameworks adapted to the diversity of stakeholders

To extend protection beyond major operators, ANSSI is revising its PASSI and PRIS* frameworks. A “substantial” level is being added to these frameworks to facilitate compliance for SMEs and local authorities. The goal: to establish a progressive approach to resilience, based on accessible standards and the upskilling of regional service providers.

*Information system security audit providers (PASSI) and security incident response providers (PRIS).

3. AI serving detection

The innovations showcased at the Forum confirm the rise of automation tools for incident detection and response. Artificial intelligence is helping to enhance their capabilities, while also raising sovereignty concerns: training data hosting, model transparency, and dependency on providers. In 2026, controlling these parameters will be just as strategic as technical performance.

4. Strengthened European cooperation against cybercrime

Speakers emphasized the growing strength of European cooperation: sharing of attack indicators, creation of inter-state operational centers, and harmonization of legal frameworks. This coordination is essential to counter increasingly organized and transnational criminal actors.

5. Toward a shared culture of resilience

National exercises, such as REMPAR25, mark a shift: cybersecurity is becoming a shared concern within organizations. Cyber culture awareness, training, and simulation has now become as essential a lever as the technologies themselves.

Key takeaways

By 2026, cybersecurity is establishing itself as a collective governance issue. From post-quantum cryptography to a culture of resilience, the 2025 Forum highlights the emergence of shared maturity, based on cooperation, transparency, and anticipation.

Similar Insights

All insights