{
  "id": "a2800bbd-abb1-4245-a431-7234b93423bf",
  "url": "https://securityweek.com/from-60-to-4000-natos-locked-shields-reflects-cyber-defense-growth",
  "source": "admin_quick",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Estonia",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "NATO",
    "Locked Shields",
    "Cyber Defense",
    "Cybersecurity Exercise",
    "Cyberattack Simulation",
    "Critical Infrastructure Protection",
    "Cloud Security",
    "AI in Cybersecurity",
    "Cyber Cooperation"
  ],
  "nodes": [],
  "countries": [
    "Estonia"
  ],
  "where_text": "Cyberspace",
  "headline": "From 60 to 4,000: NATO's Locked Shields Reflects Cyber Defense Growth",
  "description": "The 15th edition of NATO's Locked Shields cyber defense exercise took place in Tallinn, Estonia, involving roughly 4,000 cyber defense experts from 41 nations. The exercise focused on testing and improving cybersecurity teams' abilities to defend national systems and critical infrastructure via realistic simulations. Locked Shields has grown significantly since its inception in 2010, increasing from 60 participants from 4 countries to thousands of experts. The 2025 edition included protecting over 8,000 IT systems against more than 8,000 cyberattacks and involved 17 multinational teams aiming to enhance collaboration. The exercise challenges technical skills, disinformation handling, political pressures, and legal-strategic aspects, simulating high-pressure cyberattack scenarios. The on-going evolution of Locked Shields highlights cyber defense growth and nations’ increasing preparedness. Future editions plan to expand cloud segments and AI-driven elements. The exercise demonstrates NATO’s commitment to strengthening cyber defense readiness amid sophisticated cyber threat environments.",
  "summary_short": "NATO's 15th Locked Shields cyber defense exercise in Tallinn included 4,000 experts from 41 countries defending 8,000 IT systems against 8,000+ cyberattacks, reflecting major growth in collective cyber defense capabilities.",
  "summary_extended": "NATO's Locked Shields, held in Tallinn, Estonia, evolved from a small 2010 exercise with 60 participants from 4 nations to one involving roughly 4,000 cyber defense experts from 41 countries in 2025. The 15th edition tested national cyber defense teams through a realistic simulation protecting over 8,000 IT systems from more than 8,000 cyberattacks, including military infrastructure and telecom networks. Seventeen multinational teams participated to foster enhanced collaboration, navigating technical challenges, disinformation, political and legal pressures. The exercise emphasized high-pressure skills while reflecting the increasing need for cyber defense readiness against sophisticated threats like ransomware and attacks on critical infrastructure. Locked Shields 2025 featured new cloud-based infrastructures and advanced AI-driven narratives, indicating NATO's forward focus on innovation and resilience. Upcoming plans include expanding cloud segments and introducing critical special systems, advancing automated defense capabilities.",
  "actor_primary": "Locked Shields exercise participants",
  "target_primary": null,
  "location_text": "Tallinn",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Unknown",
  "is_aggressor_signal": false,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "This event describes NATO's defensive cyber exercise involving thousands of experts practicing defending critical infrastructure against simulated cyberattacks, clearly a defense preparation activity without hostile aggression by any actor in this context.",
  "event_time_utc": "2025-05-16T10:59:50.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:42.487Z",
  "updated_at": "2026-11-08T22:36:55.618Z",
  "reliability_band": "strong",
  "location_precision_band": "unknown",
  "time_precision_band": "unknown",
  "severity_band": "minor",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "a2800bbd-abb1-4245-a431-7234b93423bf",
  "url": "https://securityweek.com/from-60-to-4000-natos-locked-shields-reflects-cyber-defense-growth",
  "source": "admin_quick",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Attacks on critical infrastructure (energy, transport, hospitals)",
  "country": "Estonia",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "NATO",
    "Locked Shields",
    "Cyber Defense",
    "Cybersecurity Exercise",
    "Cyberattack Simulation",
    "Critical Infrastructure Protection",
    "Cloud Security",
    "AI in Cybersecurity",
    "Cyber Cooperation"
  ],
  "nodes": [],
  "countries": [
    "Estonia"
  ],
  "where_text": "Cyberspace",
  "headline": "From 60 to 4,000: NATO's Locked Shields Reflects Cyber Defense Growth",
  "description": "The 15th edition of NATO's Locked Shields cyber defense exercise took place in Tallinn, Estonia, involving roughly 4,000 cyber defense experts from 41 nations. The exercise focused on testing and improving cybersecurity teams' abilities to defend national systems and critical infrastructure via realistic simulations. Locked Shields has grown significantly since its inception in 2010, increasing from 60 participants from 4 countries to thousands of experts. The 2025 edition included protecting over 8,000 IT systems against more than 8,000 cyberattacks and involved 17 multinational teams aiming to enhance collaboration. The exercise challenges technical skills, disinformation handling, political pressures, and legal-strategic aspects, simulating high-pressure cyberattack scenarios. The on-going evolution of Locked Shields highlights cyber defense growth and nations’ increasing preparedness. Future editions plan to expand cloud segments and AI-driven elements. The exercise demonstrates NATO’s commitment to strengthening cyber defense readiness amid sophisticated cyber threat environments.",
  "summary_short": "NATO's 15th Locked Shields cyber defense exercise in Tallinn included 4,000 experts from 41 countries defending 8,000 IT systems against 8,000+ cyberattacks, reflecting major growth in collective cyber defense capabilities.",
  "summary_extended": "NATO's Locked Shields, held in Tallinn, Estonia, evolved from a small 2010 exercise with 60 participants from 4 nations to one involving roughly 4,000 cyber defense experts from 41 countries in 2025. The 15th edition tested national cyber defense teams through a realistic simulation protecting over 8,000 IT systems from more than 8,000 cyberattacks, including military infrastructure and telecom networks. Seventeen multinational teams participated to foster enhanced collaboration, navigating technical challenges, disinformation, political and legal pressures. The exercise emphasized high-pressure skills while reflecting the increasing need for cyber defense readiness against sophisticated threats like ransomware and attacks on critical infrastructure. Locked Shields 2025 featured new cloud-based infrastructures and advanced AI-driven narratives, indicating NATO's forward focus on innovation and resilience. Upcoming plans include expanding cloud segments and introducing critical special systems, advancing automated defense capabilities.",
  "actor_primary": "Locked Shields exercise participants",
  "target_primary": null,
  "location_text": "Tallinn",
  "location_region": null,
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Unknown",
  "is_aggressor_signal": false,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "This event describes NATO's defensive cyber exercise involving thousands of experts practicing defending critical infrastructure against simulated cyberattacks, clearly a defense preparation activity without hostile aggression by any actor in this context.",
  "event_time_utc": "2025-05-16T10:59:50.000Z",
  "end_time_utc": null,
  "event_time_confidence": "unknown",
  "created_at": "2026-02-01T00:14:42.487Z",
  "updated_at": "2026-11-08T22:36:55.618Z",
  "reliability_band": "strong",
  "location_precision_band": "unknown",
  "time_precision_band": "unknown",
  "severity_band": "minor",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}