Europol has warned that militants from so-called Islamic State (IS) will aim to step up attacks on European targets, as they face defeat in the Middle East.
The European police force says more foreign fighters will try to come back to Europe, and "several dozen" capable of attacks could already be there.
Their tactics could include car bombs, kidnappings and extortion, it said.
But the report plays down the likelihood of attacks on critical infrastructure, such as nuclear sites.
It says that IS militants now prefer soft targets, and there is now a greater emphasis on "lone actors" such as the perpetrator of the lorry attack in Nice in July.
It warns that some Syrian refugees in Europe may be vulnerable to recruitment by extremists who infiltrate refugee camps.
Europe has been shaken by a series of attacks in recent years blamed on IS militants.
The report said the EU faced a range of threats and attacks from both organised networks and lone actors, either directed or inspired by IS and involving a range of weapons including bladed weapons and vehicles.
Home-made, commercial and military explosives in improvised devices such as those used in Syria and Iraq had not yet been used in Europe but this was "conceivable... at some stage", it added.
More EU woe.
More EU woe.
“If you trust in yourself, and believe in your dreams, and follow your star. . . you'll still get beaten by people who spent their time working hard and learning things and weren't so lazy.”