Emboldened and Evolving: A Snapshot of Cyber Threats Facing NATO

This report provides an overview of the cyber threat landscape facing NATO and its partners, highlighting sophisticated nation-state espionage and disruptive operations (notably by Russian and Chinese-linked actors), exploitation of zero-day vulnerabilities in network-edge security products, living-off-the-land techniques, ephemeral proxy (ORB) networks, supply-chain compromises, ransomware disruptive operations, and coordinated information operations and hacktivist activity undermining Alliance cohesion and critical infrastructure resilience.