The National Cyber Threat Assessment (NCTA) 2025-2026 offers a comprehensive analysis of the cyber threats facing Canada, highlighting the increasingly complex and sophisticated landscape shaped by both state and non-state actors. This report draws on public and classified intelligence to assess current threats and forecast emerging trends, aiming to equip Canadian individuals and organizations with the knowledge needed to defend against cyber risks.
Key findings from the NCTA reveal:
- Rising State-Sponsored Threats: Canada faces escalating threats from state-sponsored cyber programs, particularly from nations like China, Russia, and Iran. These programs use cyber operations to pursue political, economic, and military objectives, often targeting Canada’s critical infrastructure.
- Persistent Cybercrime: Cybercriminals continue to target individuals, businesses, and governments across Canada, with ransomware emerging as the top threat to critical infrastructure. Financially motivated criminals are increasingly leveraging new tools and methods, including Cybercrime-as-a-Service (CaaS) and advanced technologies like artificial intelligence, to evade detection and enhance their capabilities.
- Evolving Threat Landscape: Cyber threat actors are adapting quickly, using emerging technologies and illicit business models that enable more actors to engage in disruptive activities. This includes non-state actors exploiting geopolitical tensions and major global events to further their agendas.
The National Cyber Threat Assessment 2025-2026 underscores the critical need for vigilance and collaboration as cyber threats continue to evolve. The report calls on all Canadians, from individuals to large organizations, to contribute to national cyber resilience by staying informed and prepared for future threats.
Scroll to view the PDF version of the report:
