Ukraine’s cyber warfare experience informs future defenses
Summary and headline written by AI from the source article. How we work
Ukraine has developed extensive knowledge of Russian cyber warfare since the start of the full-scale invasion in February 2022.
In the initial weeks, Ukrainian cyber defense analysts worked around the clock to respond to an unprecedented volume of attacks, fourteen to twenty critical incidents daily. Over the next two years, registered Russian cyber attacks against Ukraine nearly doubled, rising from 2,194 to 4,315, but the number of severe incidents decreased from 1,048 to 59.
Experts at institutions like Kyiv’s SET University have observed that Russian cyber operations initially targeting Ukraine frequently reappear in other countries, especially within the European Union and NATO member states. They emphasize that data from Ukraine should be used as an ongoing detection resource, providing real-time insights that go beyond standard reports.
International cooperation is crucial, as demonstrated by a joint advisory issued in April 2026, which detailed Russian military intelligence targeting companies supporting Ukraine and compromising cameras near critical infrastructure in Ukraine and neighboring countries. However, Western institutions often prioritize receiving briefings instead of coordinating responses quickly, creating a gap in effective defense. To improve cybersecurity, Ukraine’s partners should prioritize joint training programs, shared analysis of cyber incidents, and collaborative research.
Ukraine is already developing its own training infrastructure, including the CISO Campus initiative, and is well-positioned to lead realistic cybersecurity exercises, but has not yet been invited to design the scenarios for international events.
