NATO's Cyberspace Centre Chief Warns of Ongoing Russian Cyberwarfare Amid Major Cyber Exercise

Cyber & Information WarfareCyber AttacksHacking, malware, ransomware

AggressorDefense

Summary

NATO's Brigadier General Ümit Ersoy warns of daily undeclared cyber war with Russia, highlighting recent attacks on UK targets and ongoing NATO cyber defense exercises in Tallinn.

Brigadier General Ümit Ersoy, head of NATO's Cyberspace Operations Centre since October 2023, described an ongoing daily cyber war with Russia, emphasizing the Kremlin's development of a highly effective cyber offense that has forced NATO to significantly evolve its defenses. Recent months have seen increased Russian aggression including cyber attacks that forced the UK’s largest carmaker Jaguar Land Rover to halt production for five weeks and caused severe disruptions at Heathrow airport from ransomware attacks. NATO's annual Exercise Cyber Coalition, running in Tallinn with 1,300 participants worldwide, simulates cyberattacks on critical infrastructure and space networks to enhance readiness. Admiral Giuseppe Cavo Dragone publicly discussed NATO’s contemplation of pre-emptive cyber strikes on Russia as part of strategic adaptation to the growing threat. Microsoft's October Digital Defense Report confirmed a 25% rise in cyberattacks against NATO states over the past year, with the US and UK among the top targets. Ersoy warned that the constantly evolving threat picture and the integration of cyber with kinetic military operations in line with the Kremlin's Gerasimov doctrine pose a persistent and complex challenge, leaving NATO vigilant and consistently adapting its cyber defense posture.

Classification

Confidence: High

The article clearly describes ongoing hostile Russian cyber activities targeting NATO allies including high-impact ransomware attacks on UK critical infrastructure and companies, meeting the definition of aggressor actions. Concurrently, it details NATO’s active defensive preparations including large-scale cyber exercises and contemplation of pre-emptive cyber strikes, supporting a dual classification with high confidence.

Source URL

https://archive.ph/EhHEq

Open source

Provenance

Publisher: hwt_web_submit
Submitted: Feb 14, 2026, 12:22 UTC
Last updated: Nov 10, 2026, 02:40 UTC
Event time: Jun 18, 2024, 00:00 UTC

Published as a Defense Preparations signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.

Raw record

{
  "id": "ca54f86f-54e5-4521-9824-9dfe80c88642",
  "url": "https://archive.ph/EhHEq",
  "source": "hwt_web_submit",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Hacking, malware, ransomware",
  "country": "United Kingdom",
  "source_reliability": "B",
  "info_credibility": "3",
  "tags": [
    "NATO",
    "Russia",
    "Cyberwarfare",
    "Cyber Coalition 2024",
    "Ransomware",
    "Jaguar Land Rover hack",
    "Heathrow cyberattack",
    "Gerasimov doctrine",
    "Admiral Dragone",
    "Estonia",
    "Tallinn",
    "Cyber defense exercises"
  ],
  "nodes": [
    "Node 1: Borders"
  ],
  "countries": [],
  "where_text": "Cyberspace",
  "headline": "NATO's Cyberspace Centre Chief Warns of Ongoing Russian Cyberwarfare Amid Major Cyber Exercise",
  "description": "Brigadier General Ümit Ersoy, chief of NATO's Cyberspace Operations Centre, stated that the alliance faces a daily undeclared cyber war with Russia. He highlighted Russia's advanced offensive cyber capabilities threatening NATO members, with recent high-impact ransomware attacks on British infrastructure and corporations underscoring this ongoing conflict. NATO is conducting its largest annual cyber war game, Exercise Cyber Coalition, involving 1,300 personnel globally to prepare against such threats. Admiral Giuseppe Cavo Dragone indicated NATO is considering proactive cyber operations against Russia to counter escalating attacks.",
  "summary_short": "NATO's Brigadier General Ümit Ersoy warns of daily undeclared cyber war with Russia, highlighting recent attacks on UK targets and ongoing NATO cyber defense exercises in Tallinn.",
  "summary_extended": "Brigadier General Ümit Ersoy, head of NATO's Cyberspace Operations Centre since October 2023, described an ongoing daily cyber war with Russia, emphasizing the Kremlin's development of a highly effective cyber offense that has forced NATO to significantly evolve its defenses. Recent months have seen increased Russian aggression including cyber attacks that forced the UK’s largest carmaker Jaguar Land Rover to halt production for five weeks and caused severe disruptions at Heathrow airport from ransomware attacks. NATO's annual Exercise Cyber Coalition, running in Tallinn with 1,300 participants worldwide, simulates cyberattacks on critical infrastructure and space networks to enhance readiness. Admiral Giuseppe Cavo Dragone publicly discussed NATO’s contemplation of pre-emptive cyber strikes on Russia as part of strategic adaptation to the growing threat. Microsoft's October Digital Defense Report confirmed a 25% rise in cyberattacks against NATO states over the past year, with the US and UK among the top targets. Ersoy warned that the constantly evolving threat picture and the integration of cyber with kinetic military operations in line with the Kremlin's Gerasimov doctrine pose a persistent and complex challenge, leaving NATO vigilant and consistently adapting its cyber defense posture.",
  "actor_primary": "NATO's Cyberspace Operations Centre",
  "target_primary": null,
  "location_text": "Tallinn",
  "location_region": "Harju County",
  "location_coordinates_lat": null,
  "location_coordinates_lon": null,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "DEFENSE_PREP_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes ongoing hostile Russian cyber activities targeting NATO allies including high-impact ransomware attacks on UK critical infrastructure and companies, meeting the definition of aggressor actions. Concurrently, it details NATO’s active defensive preparations including large-scale cyber exercises and contemplation of pre-emptive cyber strikes, supporting a dual classification with high confidence.",
  "event_time_utc": "2024-06-18T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-02-14T12:22:54.728Z",
  "updated_at": "2026-11-10T02:40:00.810Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

Public assessmentReliability: StrongSeverity: SignificantAttribution: HighSingle sourceTime: Same dayLocation: Approximate

Source reliability

Info credibility

Event time

Jun 18, 2024, 00:00 UTC

Event time confidence

pm24h

Location

Tallinn

Region

Harju County

Primary actor

NATO's Cyberspace Operations Centre

Country

United Kingdom

Tags

NATO, Russia, Cyberwarfare, Cyber Coalition 2024, Ransomware, Jaguar Land Rover hack, Heathrow cyberattack, Gerasimov doctrine, Admiral Dragone, Estonia, Tallinn, Cyber defense exercises

Nodes

Node 1: Borders

Loading signal...

{ "id": "ca54f86f-54e5-4521-9824-9dfe80c88642", "url": "https://archive.ph/EhHEq", "source": "hwt_web_submit", "status": "approved", "category": "Cyber & Information Warfare", "subcategory": "Cyber Attacks", "incident_type": "Hacking, malware, ransomware", "country": "United Kingdom", "source_reliability": "B", "info_credibility": "3", "tags": [ "NATO", "Russia", "Cyberwarfare", "Cyber Coalition 2024", "Ransomware", "Jaguar Land Rover hack", "Heathrow cyberattack", "Gerasimov doctrine", "Admiral Dragone", "Estonia", "Tallinn", "Cyber defense exercises" ], "nodes": [ "Node 1: Borders" ], "countries": [], "where_text": "Cyberspace", "headline": "NATO's Cyberspace Centre Chief Warns of Ongoing Russian Cyberwarfare Amid Major Cyber Exercise", "description": "Brigadier General Ümit Ersoy, chief of NATO's Cyberspace Operations Centre, stated that the alliance faces a daily undeclared cyber war with Russia. He highlighted Russia's advanced offensive cyber capabilities threatening NATO members, with recent high-impact ransomware attacks on British infrastructure and corporations underscoring this ongoing conflict. NATO is conducting its largest annual cyber war game, Exercise Cyber Coalition, involving 1,300 personnel globally to prepare against such threats. Admiral Giuseppe Cavo Dragone indicated NATO is considering proactive cyber operations against Russia to counter escalating attacks.", "summary_short": "NATO's Brigadier General Ümit Ersoy warns of daily undeclared cyber war with Russia, highlighting recent attacks on UK targets and ongoing NATO cyber defense exercises in Tallinn.", "summary_extended": "Brigadier General Ümit Ersoy, head of NATO's Cyberspace Operations Centre since October 2023, described an ongoing daily cyber war with Russia, emphasizing the Kremlin's development of a highly effective cyber offense that has forced NATO to significantly evolve its defenses. Recent months have seen increased Russian aggression including cyber attacks that forced the UK’s largest carmaker Jaguar Land Rover to halt production for five weeks and caused severe disruptions at Heathrow airport from ransomware attacks. NATO's annual Exercise Cyber Coalition, running in Tallinn with 1,300 participants worldwide, simulates cyberattacks on critical infrastructure and space networks to enhance readiness. Admiral Giuseppe Cavo Dragone publicly discussed NATO’s contemplation of pre-emptive cyber strikes on Russia as part of strategic adaptation to the growing threat. Microsoft's October Digital Defense Report confirmed a 25% rise in cyberattacks against NATO states over the past year, with the US and UK among the top targets. Ersoy warned that the constantly evolving threat picture and the integration of cyber with kinetic military operations in line with the Kremlin's Gerasimov doctrine pose a persistent and complex challenge, leaving NATO vigilant and consistently adapting its cyber defense posture.", "actor_primary": "NATO's Cyberspace Operations Centre", "target_primary": null, "location_text": "Tallinn", "location_region": "Harju County", "location_coordinates_lat": null, "location_coordinates_lon": null, "location_precision": "Approximate", "is_aggressor_signal": true, "signal_type": "DEFENSE_PREP_SIGNAL", "is_hybrid_war_signal": true, "classification_complete": true, "hybrid_signal_complete": true, "classification_confidence": "High", "classification_rationale": "The article clearly describes ongoing hostile Russian cyber activities targeting NATO allies including high-impact ransomware attacks on UK critical infrastructure and companies, meeting the definition of aggressor actions. Concurrently, it details NATO’s active defensive preparations including large-scale cyber exercises and contemplation of pre-emptive cyber strikes, supporting a dual classification with high confidence.", "event_time_utc": "2024-06-18T00:00:00.000Z", "end_time_utc": null, "event_time_confidence": "pm24h", "created_at": "2026-02-14T12:22:54.728Z", "updated_at": "2026-11-10T02:40:00.810Z", "reliability_band": "strong", "location_precision_band": "approximate", "time_precision_band": "within_24h", "severity_band": "significant", "attribution_confidence_band": "high", "attribution_basis": "single_source" }