Cyberattacks reshape modern conflict & highlight resilience needs
The digital frontline
Incidents over the past two years highlight a clear shift in the landscape of modern conflict, with the digital realm now playing a significant role. In October 2023, parts of Denmark's railway network were shut down following a coordinated cyberattack, causing train delays nationwide. The following month, hackers disrupted Poland's government document portal at a time of geopolitical tension with Belarus. Early in 2024, a ransomware campaign affected over 100 hospitals in the United States and Europe, resulting in postponed surgeries and diversion of emergency patients.
These events underscore a trend where cyberattacks target both public infrastructure and critical services. Political and military responses to such attacks have so far been limited, partly due to challenges in attribution and the perceived impunity attached to digital operations. The press release notes, "The perceived impunity of the digital realm and challenges of timely attribution make digital warfare an active endeavour of many geopolitical adversaries."
Government responses
Governments worldwide are responding to the changing threat landscape. The United States, European Union, and NATO have increased spending on cyber defence and digital threat-response measures. The UK's National Cyber Force has broadened its recruitment initiatives, while the European Union has introduced new cyber resilience strategies. Even countries with neutral status, such as Switzerland, have begun investing more heavily in cyber intelligence.
Types of attacks
Analysis of recent incidents reveals five prominent categories of cyberattacks poised to have significant impacts in ongoing and future conflicts.
Critical infrastructure attacks
Critical infrastructure encompasses power grids, water systems, and transport networks. These environments often use operational technology (OT) networks that are separated from the internet but still have vulnerabilities. Attackers typically exploit mechanisms such as phishing, infected external drives, or unsecured remote access points to gain entry. In 2024, a group linked to Iran, called CyberAv3ngers, breached several US water utilities by targeting internet-connected control systems, raising risks of water contamination. The FBI confirmed a combination of credential theft and unpatched devices were used in these attacks.
DDoS attacks
Distributed Denial-of-Service (DDoS) attacks deploy networks of compromised devices to overwhelm targeted websites or services, making them inaccessible. Recently, DDoS campaigns caused outages across the Baltic region, affecting government services and private sector industries. An incident in early 2025 targeted multiple industries in Lithuania, illustrating the scale and political motivation behind such attacks.
DNS poisoning
DNS poisoning manipulates the Domain Name System to divert users from legitimate websites to malicious copies, potentially enabling espionage, service disruption, or data theft. A Google security report in March 2024 confirmed DNS cache poisoning remains a risk, even with advanced defences in place. DNS poisoning has broader implications, potentially disrupting access to critical information or services for entire populations during periods of heightened tension.
Ransomware campaigns
Ransomware attacks enable criminals to encrypt sensitive files and demand payments for decryption or to prevent the leak of stolen data. In May 2024, Ascension Health in the United States experienced such an attack, affecting 5.6 million patients, disrupting medical procedures, and forcing staff to use manual record-keeping processes. The event highlighted the risks to patient safety and service continuity in healthcare systems during digital attacks.
Telecom infrastructure compromise
Telecommunications providers are increasingly targeted due to the sensitive nature of the data they handle. In 2024, a group identified as Salt Typhoon, linked to China, exploited vulnerabilities in core networking equipment at major US and Canadian telecom providers. These breaches allowed the attackers to access metadata and unencrypted communications, particularly targeting political and law enforcement communications. The cyber war has arrived, long before there are boots on the ground there are keys on keyboards. The tactics that are shaping it are already here, unfolding across civilian systems, critical infrastructure, and the devices we rely on every day. These aren't hypothetical "future threats", they're warning shots, stress tests, and rehearsals.
Strengthening resilience
According to the press release, resilience at an individual level can help reduce exposure to these types of attacks. "Resilience for individuals starts with the basics: phishing awareness, strong password practices, regular software updates, and healthy scepticism online. These are simple but powerful habits that reduce exposure to the kinds of attacks already shaping the digital battleground."
Organisations are advised against bespoke security models, with tried and tested frameworks such as NIST CSF, OWASP SAMM, and ISO standards cited as effective guides for structuring improvement. The statement continues, "Like any quality control system it is all about analysis of the situation and iterative improvements. Things evolve slowly until they happen all at once."
"For cybersecurity professionals, policymakers, and everyday users alike, the takeaway is not panic, but preparation. Building digital resilience isn't just a job for governments or big tech. It affects all of us. It's also about awareness, good hygiene, and knowing how attacks work before they happen."
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Scoop
8 hours ago
- Scoop
Call For U. S. President Donald Trump To Rescind His Aggressive Rhetoric On Russia
President Donald Trump of the United States of America is playing the game of the oppressor billionaire with the peace, security and existence of the human race. It has come to our notice that the US president in his usual aggressive rhetoric has threatened to attack Russia's nuclear sites with an ultimatum issued if Moscow fails to yield to a ceasefire with the Nazis enclave in Ukraine. This is insulting, insincere and disrespectful statements emanating from the President of the United States of America. To the New African Charter International (NACI), there is no substitute to peace and security, and the two cannot be achieved through threatening the world's most powerful military nation, that is Russia. It was reported worldwide that President Trump has issued a 10-12 days provocative ultimatum to attack Russia's nuclear arsenals if Moscow fails to yield to the desires of the Nazis enclave in the Ukraine, for a ceasefire on the Ukrainian conflict. Earlier, Trump and its western European allies had imposed sanctions that are designed to kill Russians, cause long-term physical and mental injury, and damage the Russian economy. The New African Charter International critically observes and unequivocally condemns Trump's vile, unwarranted and harmful rhetoric regarding Russia's Special Military Operation in Ukraine, which has become headlines in the news and social media. In general, we forcefully oppose the North Atlantic Treaty Organisation's (NATO) efforts at escalation of tension between the alliance and Russia over the Nazis enclave in Ukraine. NACI fully supports alternative efforts to NATO's neo-Nazis agenda of domination and remote control; and stand in solidarity with Russia and the Russian people. We wish to recognize the remarkable courage of the Russian people for rallying their support behind their leaders, especially the youths, who took to the streets recently, to vent out their grievances towards NATO members who want to be seen as hostile forces against Russia, and who aided also the Ukrainian Nazis enclave's evil attack on Russia's territory, dubbed: 'Operation Spider Web'. We want to make it very clear to Mr Trump and NATO that their provocative and disrespectful mentality towards Russia is a source of profound concern for the entire global community. We unequivocally denounce these unnecessary escalation, red tagging, hatreds, inflammatory and violent statements, which constitute grave danger to the peace, security, and stability of the global community, with far reaching consequences. No Russian territory would be the Hiroshima or Nagasaki of the 21st century; Russia is not Libya, Iraq, Syria, Afghanistan, Nigeria, the Sahel region, Sri Lanka, Sudan, the Democratic Republic of Congo or Mozambique where leaked documents have revealed the role of the US and NATO allies in the mass killings and cleansing campaign. Russia, like any other members-state of the United Nations reserves the right to defending its independent sovereignty and territorial integrity against any outside threats, no matter who would be the forces that may be behind such an evil agenda. Again, we want to warn the US and NATO to abandon their dangerous nuclear war project on Russia as such plan would lead the whole world into a devastating catastrophe. Russia, if attack as Donald Trump is threatening to do, will spare no effort to resist any persistent endeavours to undermine its peace, stability, independent sovereignty and territorial integrity. Trump's latest threats and offensive and unacceptable statements have gone a long way to violate Article 2(4) of the UN Charter. Its represents also, acts of rhetoric aggression as defined under General Assembly resolution 3314 of 1974. We are also deeply concerned about the reported transfer of US nuclear arsenals to the soil in Britain. We urge countries with ties to the US to uphold international law by opposing this dangerous expansion of the Ukrainian conflict. Mr Trump's aggressive rhetoric on Russia is more regrettable because it came at a when the civilized international community is confronted also with a plethora of challenges, including climate change and biodiversity loss, disaster risks, the ongoing genocide and cleansing in the Palestinian Gaza and other occupied lands and territories in the Middle-east. Mr Trump's dangerous threats and ill-intention agenda to attack Russia's nuclear arsenals must be condemned in the strongest possible terms by the United Nations and all its members. The global community should rise to the challenges posed by My Trump's nuclear war threats. The global community should rise to the challenges and act decisively and effectively to ease the dangerous and worrisome situation. In its cherished history as a peaceful sovereign nation, Russia has never provoked conflict, and any response to Trump's latest aggressive rhetoric would only mean a just response to unjust attacks, and to ensure peace and stability, and to send a clear message to the modern Nazis, who are hell-bent on undermining the peace, security and stability of Russia. And as a free, sovereign and independent nation, Russia reserves the right to determine the most appropriate measures to safeguard its security and the well-being of its people. As we navigate this disturbing mirror, it is warranting to address the concerns of Russia and that the legitimate grievances of the Russian people should not be misconstrued as a weapon for violent political agenda. Trump's aggressive rhetoric on Russia therefore poses grave threat to the existence of humanity. We Call on NATO leaders and politicians to distance themselves from Trump's nuclear war project; to stop supporting or sending provocative language that can intensify existing tension in the Ukrainian conflict. We call on African governments and leaders to any threat of the use of nuclear weapons anywhere, support peace and promote understanding in dealing with issues that posed danger to the existence of the global community. We are closely monitoring the situation and efforts at diverting nuclear confrontation amongst the world's nuclear powers. The legacy of the 1945 decision by the United States to reign atomic bombs on the Japanese cities of Hiroshima and Nagasaki must not be forgotten, and efforts towards the peaceful end of the Ukrainian crisis must be given priority. The New African Charter International does not promote violence, but support peace, justice and stands against all those who seek to destabilize other nations and erode the rights and freedoms of citizens.
NZ Herald
13 hours ago
- NZ Herald
Countries are making promises to Trump, while leaving the difficult to achieve detail for later
'This is new, and generally that's because in trade agreements you want things that are clear and enforceable,' said David Goldwyn, a former US diplomat and Energy Department official. 'These energy commitments are neither clear nor necessarily enforceable. They're more aspirational, political encouragements.' The European Union, for example, committed to purchase US$750 billion in US energy products — including crude oil, natural gas and other petroleum derivatives — over three years. On an annual basis, that would amount to more than three times the amount the bloc bought last year from the US. The EU has been buying more American gas since Russia, previously a big supplier, attacked Ukraine in 2022, and there is appetite to buy more. But purchasing US$250b a year would require the bloc to use the US as essentially its only supplier. 'They would have to not buy from anybody else, and that would just be an enormous amount of dependency on one country, whether it's us or anybody else,' said Jason Feer, an analyst at the energy and ship brokerage Poten and Partners. 'And the whole premise of modern energy systems, energy supply, is you always want some diversity.' Conversely, US$250b is around 80% of the total amount that the US exported to the entire world in 2025, according to a ClearView Energy Partners analysis of federal data. Plants are coming online that will double the country's natural gas export capacity by 2030, and stocks in export companies like Cheniere and Venture Global climbed after the deal was announced. In the near term, sending significantly more to the EU may mean sending less to customers elsewhere in the world. Even if these quantities made economic sense, the EU cannot compel private companies in its member countries to buy so much. And the US Government doesn't have the power to tell its oil and gas companies where to sell. The challenge of holding a government to a purchase commitment made in a trade deal became apparent in Trump's first term. He persuaded China, an economy tightly steered by the Government, to agree to buy certain amounts of energy and agricultural goods. Most of those targets were not met, and there were no consequences. Typical trade pacts have protocols that allow either side to enforce pledges like commitments to buy energy; they usually even lay out remedies for violations. None of those exist in Trump's agreements. When asked how the US would react if the EU didn't meet its energy purchase target after three years, a White House official said that the response would be higher tariffs. It is not yet clear what the trade agreement with the US will mean for the EU's ability to meet its climate targets. A 2021 law requires member nations to reduce net greenhouse gas emissions 55% below 1990 levels by 2030. In the short term, more gas could help with that by supplanting coal. Purchasing too much gas could end up squeezing out clean power sources such as wind and solar. Before the trade deal, the continent's overall gas demand was expected to decline in the coming years. 'It is possible that it would displace some deployment of renewables,' said Joseph Majkut, director of the energy security and climate change programme at the Centre for Strategic and International Studies. 'But the reality is that the EU has very firm climate commitments enshrined in law.' The parties could, potentially, hit US$750b with tricky accounting. The EU members could purchase tankers full of oil or gas but not use it all and instead resell it to other buyers around the world. They could also make long-term purchase commitments that look like very large numbers when they're announced, but in practice are realised over, say, 20 years. 'To do that involves using something we respectfully call political maths,' said Kevin Book, managing director of ClearView Energy Partners. 'Some of the best tools of diplomacy involve ambiguity.' So far, the EU's energy purchase commitment is as specific as Trump's trade deals have got. The framework for Japan, for example, is much more vague. That leaves even more room for interpretation. A White House fact sheet on the Japan deal trumpets a 'major expansion' of US energy exports, and says the US$550b in US investment that Japan pledged would be partly focused on 'energy infrastructure and production'. That is probably a reference to the proposed US$44b infrastructure project that would bring gas from the North Slope of Alaska to an export terminal. From there, it could be shipped to Asia. Right now, however, there are cheaper sources available on America's gulf coast that are connected to gas fields with many years of supply left. It's also not clear how much value there is in signing multidecade purchase agreements when Japan has also committed to reducing its consumption of fossil fuels. The same logic applies for South Korea. It began to buy natural gas from the US in 2017, when the country was trying to phase out nuclear energy. Signing long-term agreements didn't work out as well as hoped: An explosion at a gas terminal in Texas in 2022 interrupted supply, leaving less gas available to buy and raising prices sharply. That's why Michelle Kim, an energy specialist at the Institute for Energy Economics and Financial Analysis, argues that buying gas as needed, rather than committing to a multiyear deal with US exporters, would give South Korea more flexibility as it managed declining demand for gas. 'It's not a good and wise decision to make another long-term contract,' Kim said. If the US presses ahead to drastically increase its exports, there could also be ramifications for America's own energy market. As long as enough infrastructure exists to move it around, fuel generally flows to the highest bidder. With more gas going overseas and powering data centres for artificial intelligence, domestic prices are likely to rise, said Aneesh Prabhu, a managing director at S&P Global Ratings. That impact could worsen in the coming years, since Trump and congressional Republicans cut subsidies for wind and solar deployment passed during the Biden Administration. 'Because of the loss of tax credits, or at least a significant erosion of it, you could have a slowdown in renewables, which means there would be more draw on gas,' Prabhu said. This article originally appeared in The New York Times. Written by: Lydia DePillis and Rebecca F. Elliott Photograph by: Tierney L. Cross ©2025 THE NEW YORK TIMES
Techday NZ
2 days ago
- Techday NZ
Quadruple extortion ransomware rises in Asia Pacific region
The Akamai State of the Internet (SOTI) report has identified a shift in ransomware tactics in the Asia Pacific region, with quadruple extortion methods emerging alongside sustained use of double extortion techniques. The report, titled "Ransomware Report 2025: Building Resilience Amid a Volatile Threat Landscape," details how cybercriminals are incorporating an increasingly complex mix of threats and pressure on their victims. While double extortion ransomware, which involves encrypting a victim's data and threatening public release unless ransoms are paid, remains prevalent, the new quadruple extortion methods now include Distributed Denial of Service (DDoS) attacks and pressure exerted on customers, partners or the media to intensify the coercion. Steve Winterfeld, Advisory CISO at Akamai, outlined the expanding risk landscape facing organisations. "Ransomware threats today are not just about encryption anymore. Attackers are using stolen data, public exposure, and service outages to increase the pressure on victims. These methods are turning cyberattacks into full-blown business crises, and are forcing companies to rethink how they prepare and respond." Ransomware accounted for a significant share of total data breaches in Asia Pacific in 2024, with the report warning that organisations must enhance cyberdefence strategies and test resilience capabilities in order to prevent major disruptions. Regional impacts According to the report, groups such as LockBit, BlackCat/ALPHV, and CL0P continue to pose major threats in the region, although newcomers Abyss Locker and Akira are growing in prevalence. These syndicates have prioritised critical sectors, with healthcare and legal services identified as primary targets. High-profile incidents in recent months include the Abyss Locker breach, which resulted in the theft of 1.5TB of sensitive data from Australia's Nursing Home Foundation, and a USD $1.9 million extortion payout by a Singapore-based law firm following an Akira ransomware incident. Emergence of hybrid actors The report notes the growing activity from hybrid ransomware activist groups, some of which leverage ransomware-as-a-service (RaaS) to expand operational reach. Groups such as RansomHub, Play, and Anubis have been implicated in attacks on small and medium-sized enterprises, healthcare organisations, and educational institutions across Asia Pacific. Targets include an Australian in vitro fertilisation clinic and several medical practices affected by these syndicates. Compliance complexity A key theme highlighted is the increasingly complicated compliance landscape facing affected businesses. In Asia Pacific, uneven regulatory maturity and fragmented data protection laws have enabled cybercriminals to exploit gaps and delays in incident response. The report outlines how non-compliance risks differ significantly, citing Singapore's Personal Data Protection Act (PDPA) – with fines up to 10% of annual revenue – compared to potential criminal penalties in India, and the lack of formal financial penalties in Japan. These variations create a patchwork of obligations that multinational firms must navigate whilst managing the onset of a ransomware crisis. Zero Trust and defence strategies The report urges organisations to focus on the adoption of Zero Trust architectures and microsegmentation in order to address the challenges of modern ransomware threats. Case studies include a regional consulting firm in Asia Pacific deploying software-defined microsegmentation, which facilitated restrictive access controls and limited the spread of an attack within its network. Reuben Koh, Director of Security Technology and Strategy, Asia-Pacific & Japan at Akamai, commented on the regional context and the growing expectations on security teams. "Asia-Pacific's digital economy is one of the fastest growing in the world, largely due to its rapid pace of innovation. However, security teams are being challenged to keep up with a frequently expanding attack surface, and Ransomware attacks tend to target those blind spots. Organisations need to re-assess their security posture and double-down in their efforts to be more cyber resilient. Adopting Zero Trust architectures that are centred around verified access and microsegmentation are a good way to minimise the impact of a ransomware attack. Together with regular recovery drills and incident response simulations, these will become core essentials in improving cyber resilience against attacks like ransomware." Global trends On a global scale, the report identifies that the rise of generative artificial intelligence (GenAI) and large language models (LLMs) is accelerating both the frequency and sophistication of ransomware attacks by lowering the technical barriers for attackers. The use of ransomware-as-a-service is also broadening the base of active threat actors, with many campaigns motivated by political or ideological factors as well as financial gain. The research highlights that almost half of the cryptomining attacks analysed targeted nonprofit and educational organisations, indicating resource constraints make these sectors a frequent target. Additionally, the Trickbot malware family, used extensively by ransomware operators, has enabled the extortion of USD $724 million in cryptocurrency from victims globally since 2016.
