Foreign Information Manipulation and Interference (FIMI) and Cybersecurity — Threat Landscape

This joint ENISA-EEAS report addresses one of the most important analytical gaps in the counter-FIMI field: the relationship between information manipulation and cybersecurity threats. Most FIMI analysis treats the information domain as separate from the cyber domain; this report argues they are systematically linked — cyber intrusions provide the data for targeted disinformation, technical infrastructure supports narrative amplification, and hybrid operations routinely combine both.

The analytical framework linking FIMI and cybersecurity threat landscapes is the report's primary contribution. It demonstrates that effective counter-FIMI analysis requires visibility into technical infrastructure — the domains, servers, and accounts that carry disinformation campaigns — and that cybersecurity teams and strategic communications teams need to share intelligence rather than operate in separate silos. For practitioners building integrated counter-hybrid threat capabilities, this is the foundational document for the FIMI-cyber nexus.