Why does the European Cybersecurity Agency rely on OpenAI to analyze software vulnerabilities?

In a context where cybersecurity is a priority for European institutions, ENISA, the EU’s cybersecurity agency, has called on OpenAI’s advanced technologies to identify and correct critical vulnerabilities. This collaboration raises questions about Europe’s digital dependence on American tools, while highlighting the urgency of strengthening security systems in the face of increasingly sophisticated threats.

The essentials to remember

  • ENISA used OpenAI’s models to detect vulnerabilities in an EU project, including a high-risk vulnerability referenced CVE-2026-73431.
  • The dependence of European institutions on American technologies highlights the need to develop local solutions for digital sovereignty.
  • Parallel initiatives are underway in Europe, such as in Poland, to strengthen cybersecurity using similar technologies.

Imagine being responsible for the IT security of a European institution. You are constantly on alert, knowing that every day, thousands of digital attack attempts threaten the systems you protect. It is in this context that ENISA decided to call on OpenAI to benefit from its expertise in code analysis and vulnerability detection. A step that, although necessary, highlights a technological dependence that continues to be debated within the EU.

ENISA’s major discoveries with OpenAI

🚀 Les 8 outils que la rédaction EmarketerZ recommande en 2026

Chaque semaine, nous sélectionnons les solutions les plus utiles pour les professionnels du digital : IA, productivité, marketing, création de contenu et business. Voici les outils que nous recommandons actuellement.

☁️ pCloud – Le stockage cloud sécurisé avec une offre à vie.
Sauvegardez vos fichiers, photos et documents importants avec plusieurs centaines de Go ou plusieurs To disponibles.
→ Découvrir l'offre pCloud

🛒 Shopify – Créez votre boutique e-commerce sans coder.
Une solution complète pour lancer, gérer et développer votre activité en ligne.
→ Tester Shopify gratuitement

🤖 Jasper – L'assistant IA pour accélérer votre marketing.
Création de contenus, campagnes publicitaires et idées marketing : gagnez du temps grâce à l'intelligence artificielle.
→ Découvrir Jasper

🎬 CapCut Pro – Le montage vidéo dopé à l'IA.
Créez rapidement des vidéos professionnelles avec des outils avancés et automatisés.
→ Tester CapCut Pro

📊 HubSpot CRM – Le CRM idéal pour structurer votre croissance.
Gérez vos prospects, vos ventes et vos campagnes marketing depuis une seule plateforme.
→ Découvrir HubSpot CRM

🧠 MindManager – Organisez vos idées et vos projets efficacement.
Un outil puissant pour créer des mind maps, structurer vos stratégies et mieux collaborer.
→ Découvrir MindManager

🇬🇧 Gymglish – Améliorez votre anglais professionnel chaque jour.
Des cours personnalisés et courts pour progresser facilement, quel que soit votre niveau.
→ Profiter de l'essai gratuit

🌍 Preply – Apprenez une langue avec un professeur particulier.
Trouvez un enseignant adapté à vos objectifs et progressez à votre rythme.
→ Trouver votre professeur

✨ Une sélection pensée pour les entrepreneurs, marketeurs, créateurs et passionnés de technologie.

ENISA, in collaboration with CERT-EU, used OpenAI’s advanced models to inspect the code of an EU project. This analysis highlighted four vulnerabilities, including one particularly concerning. The most critical vulnerability, identified under the reference CVE-2026-73431, affected the open-source vulnerability tracking software, Vulnerability-Lookup, in its versions prior to 5.5.1. This vulnerability, with a score of 8.8/10, allowed an attacker to reset passwords at will, thus threatening user account security.

European dependence on American technologies

ENISA’s use of OpenAI’s models raises concerns about Europe’s digital sovereignty. Although access to these tools required months of procedures, it reflects a dependence on technologies developed in the United States. This situation highlights the need for Europe to develop its own technological solutions to reduce its dependence on foreign providers.

Vincent Strubel, Director General of ANSSI, mentions the need to create European alternatives to avoid excessive dependence while recognizing the importance of international cooperation in the technological field.

Similar initiatives in Europe

The collaboration with OpenAI is not limited to ENISA. In Poland, CERT revealed six vulnerabilities affecting MikroTik’s RouterOS system, also using OpenAI’s models. The company AISLE, for its part, audited the code of a new reporting platform dedicated to cyber resilience, an initiative that demonstrates the growing importance of artificial intelligence technologies in the field of cybersecurity.

What are the European alternatives to American cybersecurity technologies?

Faced with this dependence, Europe is exploring the possibility of developing its own tools and solutions. Initiatives like SecNumCloud aim to offer viable European alternatives in the cloud domain. The development of local testing and analysis platforms could also allow the EU to reduce its dependence on American technologies while strengthening its digital sovereignty.

The challenges of cybersecurity in 2026

In 2026, the cybersecurity landscape is more complex than ever. Institutions and companies must navigate an environment where threats evolve rapidly, requiring constant vigilance and increasingly sophisticated tools. Companies like Palantir and Darktrace are exploring new approaches to threat detection and prevention, highlighting the importance of continuous innovations in this field.

International cooperation, although essential, must be accompanied by local developments to ensure the security and resilience of European digital infrastructures. Players like Thales and Atos are at the forefront of developing solutions tailored to the specific needs of the continent.

FAQ on ENISA’s use of OpenAI technologies

Why did ENISA choose OpenAI to analyze vulnerabilities?

ENISA chose OpenAI because of its advanced models capable of quickly and effectively detecting critical vulnerabilities in EU systems.

What are the implications of European dependence on American technologies?

This dependence raises questions about Europe’s digital sovereignty and underscores the importance of developing local technological solutions to reduce dependence on foreign providers.

What initiatives are underway to promote cybersecurity in Europe?

In addition to the collaboration with OpenAI, other initiatives in Europe include the development of solutions like SecNumCloud and partnerships with European companies to strengthen cybersecurity.

How do European companies contribute to cybersecurity?

Companies like Thales and Atos are working on developing cutting-edge technologies to meet the continent’s specific security needs while promoting Europe’s digital sovereignty.

[New] 4 ebooks on digital marketing available for free download

Did you enjoy this article? Receive our next articles by email.

Sign up for our newsletter, and you will receive an email every Thursday with the latest articles published by experts.

Other articles on the same topic:

Leave a Reply

Your email address will not be published. Required fields are marked *