Experts assess Russia-Ukraine information war
Atlantic Council experts discuss how cyber, influence operations, and private-sector support have shaped the information environment during the Russia-Ukraine war.
Sourceatlanticcouncil.org — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
This is an expert roundtable, not an incident report, examining how the Russia-Ukraine war has played out across cyber and information domains over its first year. Contributors from the Atlantic Council's DFRLab, IST, and Carnegie Endowment discuss Russia's information influence operations (noted as unprofessional and low-engagement on Meta and Telegram), the resilience of Ukrainian communications infrastructure, and the unprecedented mobilization of private-sector technology companies (Microsoft, SentinelOne, Cloudflare, Google) in defending Ukrainian networks and countering disinformation.
Key themes include the risks private companies face when supporting a state in active conflict—becoming targets of retaliatory operations from state-aligned actors or hacktivist groups such as Killnet, and facing scrutiny for continued business ties with Russia. Panelists reference the AcidRain wiper attack on Viasat's satellite network as a notable example of cyber operations preceding kinetic action, and discuss Ukraine's volunteer IT_Army as an example of civil society mobilization in cyber operations. The piece also explores whether cyber/information operations have met pre-war expectations, generally concluding that no WannaCry/NotPetya-scale disruptive event occurred, but that combined cyber-kinetic-information operations have been a persistent feature of the conflict.
Overall, this is an analytical/policy piece reflecting on lessons learned for the US and allies regarding public-private cooperation, norms around private sector involvement in conflict, and the difficulty of generalizing this war's information dynamics to future conflicts.
Mentioned in this report
Source reporting: https://www.atlanticcouncil.org/content-series/the-5x5/the-5x5-conflict-in-ukraines-information-environment
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the actors and malware it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs