critical infrastructure

Defense Minister Mykhailo Fedorov announced new air defense measures for Sumy region after Russia conducted over 12,000 attacks since the year's start, killing 122 civilians and injuring over 1,200. The decision aims to protect critical infrastructure and frontline communities from drone and guided bomb strikes.

Polish officials, including Prime Minister Donald Tusk, have confirmed preparations for potential Russian security provocations following US intelligence warnings. The intelligence highlights threats such as limited ground incursions from Russia or Belarus and drone strikes on critical infrastructure. Polish leadership emphasizes defense modernization while advising the public against panic.

The FCC is expanding its ban on Chinese telecom and surveillance gear to include older models, effective in early July. The prohibition covers equipment used in public safety, government facilities, and critical infrastructure.

Israeli cyber chief Yossi Karadi reported a significant increase in Iranian cyberattacks against Israel, rising from 1,600 incidents in June 2025 to 4,800 in June 2026. The attacks targeted critical infrastructure, central organizations, small to medium-sized companies, and public entities like law and accounting firms.

The UK's National Cyber Security Centre reported that 75% of cyberattacks on critical infrastructure are linked to hostile states. Richard Horne, NCSC head, stated 200 such incidents were handled in the year to May 2026, with Russia, China, and Iran identified as key perpetrators.

NCSC CEO Richard Horne warned that nation-state adversaries are prepositioning in Britain's critical infrastructure, with hostile states responsible for three-quarters of attacks. He emphasized that future kinetic targeting will rely on intelligence gathered today.

Ukraine has used drones to counter Russian forces, targeting critical infrastructure and military installations. The effectiveness of these drone operations has contributed to the growing importance of counter-drone technology.

The Pentagon's Cyber Defense Command is drafting a plan to defend critical infrastructure. The Department of Defense's Cyber Defense Command is working to develop a joint task force for this defense.

President Trump signed an executive order establishing a voluntary framework for AI companies to share frontier models with the federal government before release, aiming to promote secure innovation and strengthen cybersecurity for critical infrastructure. The order acknowledges the success of the US AI industry through limited regulation but highlights emerging security risks.

Anthropic has expanded its Claude Mythos AI model to critical infrastructure systems across 15 countries. The deployment focuses on integrating the technology into essential services and infrastructure operations.

Anthropic is expanding its security vulnerability program, Project Glasswing, and access to Mythos to 150 organizations across 15 countries. The initiative targets critical infrastructure in power, water, healthcare, and communications sectors, aiming to protect systems where a cyberattack could affect 100 million people.

Hybrid non-kinetic warfare, involving cyberattacks, sabotage, and disinformation, is increasingly used by threat actors to destabilize adversaries without direct military confrontation. Iran and Russia have targeted critical infrastructure in the US and Europe, while disinformation campaigns aim to divide societies and influence political outcomes.

The article argues that traditional deterrence strategies are ineffective against modern synthetic asymmetry, where non-state actors and cyber operations exploit technological convergence to cause disproportionate economic and societal disruption. It emphasizes the need for democracies to adopt 'synthetic resilience'—a capacity to absorb and adapt to multi-domain attacks—highlighting examples like the 2021 Colonial Pipeline ransomware attack, which caused billions in downstream economic losses.

GCHQ, the UK's spy agency, has warned that Russia is 'relentlessly targeting' critical infrastructure and democracy. The agency's head will outline specific threats and proposed countermeasures in an address on Wednesday.

GCHQ has stated that Russia is 'relentlessly targeting' critical infrastructure and democracy. The agency's head will outline threats to the UK and proposed measures to address them on Wednesday.

State cyber leaders are urging Congress for increased funding and support due to federal cutbacks in critical cyber grants and information sharing programs. These reductions have left states vulnerable to damaging cyber attacks targeting critical infrastructure.

Salt Typhoon's multi-year cyber campaigns against U.S. telecommunications networks reveal China's data-centric intelligence strategy focused on collecting and analyzing vast amounts of digital information at scale. This approach represents a shift from traditional espionage methods and poses a significant intelligence challenge to the United States. The article contrasts China's exhaustive data collection model with America's historical reliance on narrowly sourced, high-confidence intelligence.

AI hallucinations are introducing security risks into critical infrastructure by generating highly confident yet incorrect outputs, exploiting human trust and lacking mechanisms to recognize uncertainty. These inaccurate responses are based on patterns in training data. This creates real security risks.

The article argues that corporate networks have become the primary battleground of national security, with private companies now direct participants in conflict rather than peripheral actors. Modern adversaries employ 'Synthetic Asymmetry'—using inexpensive, networked technologies to achieve disproportionate impact against corporate infrastructure that nations depend on. The piece contends that most corporations remain underprepared for this reality, treating cybersecurity as a cost center rather than a national security imperative.

The CI Fortify initiative aims to help critical infrastructure organizations operate offline during cyberattacks by proactively disconnecting from third-party dependencies and finding alternative ways to function without reliable telecommunications and internet. This effort focuses on isolation and recovery. The goal is to ensure continuity of essential services.

Lawmakers and industry experts are debating whether data centers should be designated as a standalone critical infrastructure sector to enhance federal protection against cyber and physical threats. Recent attacks on Amazon data centers and growing reliance on cloud providers like AWS, Microsoft Azure, and Google Cloud have intensified the discussion, with the UK already recognizing data centers as critical infrastructure.

A bill in Colorado (SB26-090) attempting to weaken the state's 2024 right-to-repair law by creating exceptions for 'critical infrastructure' failed in a House committee vote. The law, which ensures access to repair tools and documentation for digital electronics, was supported by repair advocates who opposed the proposed carve-out. The bill, backed by companies like Cisco and IBM, passed the Senate but was defeated in a 7-to-4 vote in the House committee.

Critical infrastructure company Itron, which provides water and energy monitoring and utility meters to hundreds of millions of homes and businesses, has confirmed it was hacked. The breach impacts a major U.S. technology firm essential to utility services.

Senator Tom Cotton is pushing a bill to enhance the defense of critical infrastructure, such as power grids and wastewater plants, against emerging drone threats. The current legal framework is considered inadequate in protecting these high-risk sites from potential drone attacks.

The article highlights the growing threat of advanced, commercially available drones to U.S. military and civilian infrastructure, including power grids, airports, and ports. It emphasizes the vulnerability of critical systems to drone-based surveillance, contraband delivery, and explosive attacks, while noting legal and technological gaps in current countermeasures.

The UK's cybersecurity chief warned that businesses and critical infrastructure are underestimating spyware threats, with 100 countries reportedly possessing surveillance technology capable of hacking phones.

Iran is demanding $270 billion in compensation for war damages attributed to US and Israeli attacks on critical infrastructure. The claim comes amid impending fresh talks between Iran and the United States.

The U.S. has issued warnings about Iranian-linked hackers targeting Rockwell/Allen-Bradley programmable logic controllers (PLCs) within critical infrastructure networks. The threat highlights vulnerabilities in industrial control systems that could disrupt essential services.

FBI Director Christopher Wray warned national security and intelligence experts that China's government poses a 'broad and unrelenting' threat to U.S. critical infrastructure. Wray emphasized that these risks to American national and economic security are immediate and ongoing concerns.

InfraGard celebrates 25 years of operation since its founding in 1996, growing from a small group to over 75,000 members. The organization brings together private and public sector representatives to protect the nation's critical infrastructure from attacks.