EU Unleashes €1.3bn Fund Blitz for Cybersecurity and AI Revolution
At a glance
- Funding Initiative: The European Commission will put €1.3 billion into artificial intelligence (AI), cybersecurity and digital skills.
- Strategic Focus: The money pays for cyber resilience tools and AI rollout across member states.
- Implementation Period: It comes from the Digital Europe Programme, which runs from 2021-2027; this work programme covers 2025 to 2027.
- Collaboration & Innovation: Calls are open to businesses, public bodies and other organizations in eligible countries.
Where the €1.3 billion is going
On 28 March 2025 the European Commission adopted the Digital Europe Programme (DIGITAL) work programme for 2025 to 2027. It sets aside €1.3 billion. AI, cloud and data, cyber resilience and digital skills all get a share, and the first calls for proposals were expected in April 2025.
Brussels frames it as tech sovereignty
The Commission calls the money an investment in Europe’s tech sovereignty. Translation: Brussels wants European companies and governments to lean less on foreign suppliers for critical technology while cyber threats keep rising.
Cyber resilience gets its own line
On the cyber side, the work programme funds an EU Cybersecurity Reserve and supports the Cyber Resilience Act’s single reporting platform. The AI money goes to uptake by businesses and public administrations, along with AI Factories and testing facilities where new systems can be tried before they reach the market.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Who can apply
The €1.3 billion will be split across many projects. Who can bid? Businesses, public administrations and other entities from EU member states, EFTA/EEA countries and countries associated with DIGITAL can all apply.
Skills academies and innovation hubs
Part of the budget goes to the European Digital Innovation Hubs, which help smaller firms and public bodies adopt new technology. New academies for advanced digital skills are planned too, including one for cybersecurity. The Commission hopes this narrows the gap between member states that are ahead on digital adoption and those that are behind.
What to watch as the calls open
The money is committed. Now comes the hard part, which is spending it well: watch which projects win the first calls, and whether the Cybersecurity Reserve is actually ready before the next large incident hits an EU member state.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.