Norway’s National Security Authority (NSM), the state body that assesses digital threats, has raised the country’s cyber risk level to “high,” the second-highest step on its scale, after a surge in Norway cyber attacks on businesses.
The decision was announced at a news conference on Tuesday. NSM Director Arne Christian Haugstoyl tied the move to a deteriorating security situation and to events in recent months. He said successful cyber operations against Norwegian businesses have tripled over the past year, and that several incidents had serious consequences.
Why the risk level rose
According to Haugstoyl, attackers have been hitting Norwegian firms more often and with greater impact. One publicly known case involved the municipality of Lorenskog, where a large amount of data was stolen in a breach. That stolen information was later sold on the dark web.
NSM also pointed to artificial intelligence (AI) — software that can learn and act with less human guidance — as a factor that lets threat actors find and exploit security gaps far more efficiently than before. That shift, the authority warned, shortens the time companies have to respond once a weakness is known.
What businesses were told to do
Haugstoyl urged Norwegian companies to strengthen their digital defences and to address known software vulnerabilities at once. “Businesses therefore have hours, not days or weeks, to close known vulnerabilities,” he said.
In a press release, NSM called on firms nationwide to put preventive security measures in place without delay and published a list of 21 recommended actions. Justice and Emergency Preparedness Minister Astri Aas-Hansen likewise pressed companies to assess their IT security and to fix weaknesses quickly.
What the higher alert signals
The elevated assessment underlines official concern that digital vulnerabilities are easier to exploit as attack methods improve. For companies operating in or with Norway, the message from NSM is practical: treat known flaws as urgent, not routine maintenance. The authority’s list of 21 steps is meant to apply across business types, not only to large technology firms.
The rise in Norway cyber attacks over the past year, including cases with lasting damage such as the Lorenskog data theft, is the backdrop NSM gave for moving the national rating to high. Officials did not say how long the higher level will remain in force, only that firms should act immediately on defences and known gaps.
Aasan alfaaz mein
Norway ki security agency NSM ne cyber khatre ki level “high” kar di hai. Pichle ek saal mein businesses par successful cyber attacks teen guna barh gaye hain. Companyon ko kaha gaya hai ke known software kamzoriyan turant band karein — hours mein, dinon ya hafton mein nahi. AI ki wajah se attackers ab gaps tez dhoondhte hain, is liye digital hifazat ab zyada zaroori hai.
