AI-Driven Cyberattacks Target Ukraine's Key Sectors

• •CERT-UA recorded 3,137 cyber incidents in H1 2026, an 8% increase from the previous period.
• •Malware and social engineering are the primary attack vectors, accounting for 33% and 23% of incidents, respectively.
• •Attackers increasingly use AI and legitimate online services to enhance their operations and evade detection.

In the first half of 2026, Ukraine's CERT-UA reported 3,137 cyber incidents, with a notable increase in the use of artificial intelligence by attackers. The majority of incidents involved malware (33%) and social engineering (23%), targeting local authorities (37%) and government organizations (22%). Attackers are leveraging legitimate online services to disguise malicious activities, complicating detection efforts. The report highlights a shift from complex attacks to those relying on deception and user trust. Despite the rise in incidents, only one critical incident was recorded, and highly complex attacks decreased by 20%. The report emphasizes the need for vigilance as attackers exploit vulnerabilities in trusted platforms and create fake resources to deceive users.