"Today's global context is inevitably driving major changes in the cybersecurity threat landscape. The new paradigm is shaped by the growing range of threat actors," ENISA Executive Director Juhan Lepassaar said in a statement.
About 24% of cybersecurity attacks targeted public administration and governments while 13% targeted digital services providers, the report said.
The EU's internet security agency said geopolitical situations - in particular the Russian invasion of Ukraine - were game-changers during the period under review.
Zero-day exploits in which hackers exploit software vulnerabilities before developers have a chance to fix the flaws, as well as artificial intelligence-enabled disinformation and deepfakes resulted in more malicious and widespread attacks with more damaging impact, it said.
The European Union in May agreed on tougher cybersecurity rules for essential sectors, with companies required to assess their risks, notify authorities and take measures to deal with the risks or face fines up to 2% of global turnover.