Only the US and Israel were hit by more cyberattacks than Ukraine this year. Ukraine ranked third in the world and first in Europe among the countries whose organizations and users were most often targeted by cyberattacks in the first half of 2026, accounting for 4.8% of all victims worldwide, up from fifth in the world and third in Europe a year earlier, Microsoft said in its Digital Defense Report 2026.

Microsoft processes more than 165 trillion security signals a day, which lets it show how often attackers go after customers in each country. Russian state hackers aimed 14% of their recorded activity at Ukraine, more than at any country except the US.

The era of machine-speed cyberattacks is here

Government agencies and services were the most targeted sector worldwide at 27%, up from 17% in 2025. Phishing drove 23% of intrusions Microsoft investigated, up from 7% a year earlier, and the median time from finding a vulnerability to weaponizing it has fallen well below 24 hours.

The use of artificial intelligence is pushing cyberspace into an era of “machine-speed” attacks that operate continuously and without fatigue, according to Dev.

“Many AI agents act on behalf of users and with their access rights, so a compromised agent combines user-level access with machine-scale actions,” Natalia Burlakova, Security Sales and Engineering Lead at Microsoft, says.

Deception beats code in attacks on Ukraine

Ukraine's own agency data show a similar pattern. Malware accounted for 33% of cyber incidents in the first half of 2026, and social engineering 31%, the State Service of Special Communications and Information Protection reported on 30 September. System infections made up 15%, and system compromises 4.5%.

Attackers rely less on technical complexity than on trust, according to the report by Ukraine's computer emergency response team, CERT-UA. Hacker groups create fake pages that mimic CERT-UA, Ukraine's Parliament's document management system, and the Brave1 defense technology platform.

Microsoft urges five government steps

Microsoft asks governments to prepare for faster-moving threats by assigning roles and coordinating agencies in advance of a crisis, and to treat AI security as part of national resilience. It also asks them to plan for incidents that spread, noting that 52.2% of intrusions involving valid accounts led to additional credential theft.

Germany is expanding drone detection at its airports with a new system operated by German air traffic control provider Deutsche Flugsicherung (DFS), the German Federal Ministry for Transport (BMV) announced on 5 October.

Germany has accused Russia of attempting a hybrid attack at Germany’s Leipzig/Halle Airport near a Ukrainian An-124 aircraft using a drone carrying explosives. Earlier, Finnish President Alexander Stubb said Europe must be prepared for “continued hybrid and sabotage attacks” by Russia, adding that Russia seeks to sow panic through such actions.

On Monday, two more sites were added—Stuttgart and Hamburg. As of Monday, seven of Germany’s eight largest airports were equipped with the new drone detection system in their approach and departure areas.

Germany seeks responses to new hybrid threats

The Federal Ministry cited the reason for the new measure: drones near airports can affect air traffic very quickly.

Federal Transport Minister Steffen Bilger and Baden-Württemberg Transport Minister Nicole Razavi were briefed on the new system at Stuttgart Airport, where it is being put into operation, the ministry said. The system creates “an important technical basis for detecting potential threats at an early stage and quickly informing the competent authorities,” Bilger said.

“With today’s commissioning of the drone detection system at Stuttgart Airport, the federal government is fulfilling a key promise: it is not only talking about the dangers posed by unmanned aircraft, but is also following through with very concrete action. Protecting critical infrastructure and ensuring the safety of passengers at Stuttgart Airport require continuous adaptation to a changing security situation,” Razavi said, according to the ministry.

The new DFS system allows drones near airports to be detected at an early stage and information about possible threats to air traffic to be passed more quickly to the relevant authorities. This helps them assess risks and respond to them more quickly, the statement said.

DFS is responsible for detecting drones in approach and departure areas, while the Federal Police and other security services are responsible for preventing threats and defending against drones. The BMV, Federal Ministry of the Interior, DFS, Federal Police and airports coordinate their work to exchange information quickly and maintain a shared picture of the situation.

No further details about how the system operates have been disclosed.

The first stage of the expansion at Germany’s eight major commercial airports will be fully implemented this week, with the systems in Stuttgart and Hamburg being put into operation, the statement said.

Explore further

A drone came down beside a Bundeswehr air base, weeks after Berlin blamed Moscow for the Leipzig airport attack

The system will also be installed at the airport where a bomb-laden drone was found

The system will also be put into operation at Leipzig/Halle Airport this week, meaning that the first stage will be fully implemented at all eight of Germany’s largest commercial airports, according to the press release.

A quadcopter drone carrying a Semtex explosive flew directly toward a parked Ukrainian An-124 Ruslan cargo aircraft and struck its wing at Leipzig/Halle Airport in Germany on the evening of 4 August, Die Zeit reported on 10 August. The drone hit the aircraft at around 19:30 local time, bounced off the wing, and fell to the ground without detonating, according to the media outlet.

Germany has accused Russia of attempting the drone attack and announced further sanctions against Russian citizens and institutions, Tagesschau reported on 1 September.

At the crime scene, investigators found the drone configuration, explosives and detonation technology that had already appeared in other Russian hybrid operations and in Russia’s war against Ukraine, Federal Interior Minister Alexander Dobrindt said during a joint press conference with Federal Foreign Minister Johann Wadephul, the media outlet reported.

The German government assumes that Germany has been and will be a target of further such Russian attacks. Germany is not at war with Russia but is a “target of war,” Foreign Minister Wadephul said, according to the outlet.

National Guard commander Major General Oleksandr Pivnenko signed a follow-on contract with Quantum Frontline Industries managing director Matthias Lehna and Frontline Robotics chief technology officer and co-founder Pavlo Kosolapkin to build two Ukrainian drones in Germany, Quantum Systems said on 5 October. The deal covers the Linza strike drone and the Zoom reconnaissance drone, exceeds the volume of the 2026 agreement, and schedules delivery for 2027.

The order scales up a line that is already running. Quantum Frontline Industries' first production year remains on track for completion in 2026, it has already delivered its first drones to Ukraine's Defense Forces, and it is now preparing to increase production capacity fivefold for next year, Quantum Systems said.

German plants, Ukrainian designs

Quantum Frontline Industries is a German-Ukrainian joint venture of Frontline Robotics and Quantum Systems. Both the Linza and the Zoom come from Frontline Robotics, and the systems are manufactured in Germany for Ukraine.

Explore further

German defense firm has made Ukraine its second-largest international base

Linza 3.0 carries up to 4 kg of payload out to 15 km and stays aloft up to 60 minutes, and it is already in service with more than 60 Ukrainian units, Frontline Robotics has said. Zoom 3.0 detects targets, fixes their coordinates, and corrects fire under active Russian jamming, the company told Militarnyi. It loiters for up to an hour and works at a tactical radius of up to 20 km. AI-driven navigation and autonomous operation over the target keep its data flowing even when standard radio links break down.

From ramp-up to serial production

Quantum Frontline Industries said the contract moves it from initial production ramp-up toward sustained, high-volume manufacturing. Kosolapkin told Militarnyi the firm keeps refining Linza and Zoom on feedback from Ukrainian troops, whose needs drive how the systems evolve, and that producing in Germany gives it extra capacity to scale Ukraine-proven designs and deliver them in larger volumes.

The Netherlands will help Ukraine with maintenance, spare parts, and ammunition for F-16 fighter jets, Dutch Prime Minister Rob Jetten promised in a statement on 5 October. He made this and other statements following a phone call with Ukrainian President Volodymyr Zelenskyy.

Russia attacks Ukrainian cities with drones every day, increasingly with jet-powered ones. F-16 fighter jets are one of the effective options for shooting down these UAVs, but Ukraine has far too few of them. The F-16s are used very frequently and therefore require maintenance. About half of the aircraft spend extended periods abroad undergoing repairs and maintenance, Ukrainian President Volodymyr Zelenskyy told the Financial Times this month. The process of returning the aircraft has taken too long, and Ukraine has lost time when the jets were most needed to protect Ukrainian airspace, he said.

“A further strengthening of Ukraine’s air defense is literally vital,” the prime minister said.

Russia’s aggression continues to escalate, and F-16 fighter jets can help stop it

Russia is deliberately attacking civilian facilities and energy infrastructure and wants to make Ukrainian cities uninhabitable, Jetten said, adding that “we must not allow this to happen.”

One effective solution is the use of F-16 fighter jets, while Ukraine faces shortages of both these aircraft and the missiles for them.

Ukrainian F-16 pilots lack air-to-air missiles and take off with only the aircraft’s cannon during some daytime missions, the War Zone reported on 2 September. The M61A1 Vulcan 20mm rotary cannon can pose a danger to civilians on the ground, the outlet noted.

Poland promised to provide Ukraine with F-16 missiles back in September, and several partners, including Poland, have already begun the process of transferring ammunition this month. Other partners include Spain and Belgium, which Foreign Minister Andrii Sybiha mentioned during a meeting with journalists, Hromadske reported on 1 October.

Ukraine critically needs this ammunition, especially as Russia prepares new strikes, Sybiha said.

“Against the backdrop of the fact that we have not yet built up the capability to repel jet-powered drones, against the backdrop of preparations for new strikes, it was critically important to help our military shoot down these drones. The most effective right now—apart from air defense systems, which are very expensive to use constantly against drones—are F-16 fighter jets,” the minister said.

Zelenskyy held talks with the president of France and the prime ministers of Poland and the Netherlands about means of protecting against Russian strikes, he said in his address on 5 October. In particular, he thanked the Dutch prime minister for his prompt response.

Whether Belgian maintenance delays are the reason for the low number of operational F-16s in Ukraine remains disputed

Fewer than 50% of the F-16s delivered to Ukraine may be operational, Defense Express reports, citing a Wall Street Journal (WSJ) editorial published on 29 September.

The Belgian company that services F-16s for Ukraine takes as long as 40 weeks to complete the work, retired US Navy Rear Admiral Mark Montgomery told the WSJ.

That day, Zelenskyy had already announced that Belgium would send three of its fighter jets to Ukraine this year. Ukraine will receive them under an accelerated procedure, he said.

Meanwhile, Ukraine’s Ministry of Foreign Affairs refutes claims that Ukrainian fighter jets have a catastrophically low operational availability rate and excessively long maintenance times.

“Contrary to these claims, our industrial sustainment partners are not only continuing to deliver overhauled aircraft, but are doing so at an increasing pace. Turnaround times are decreasing, not increasing,” Ukrainian Foreign Ministry spokesperson Heorhii Tykhyi said on 2 October.

Reports about the condition of Ukraine’s F-16s should not undermine confidence in international funding supporting F-16 maintenance or cast doubt on the need for additional F-16s from the stockpiles of partner countries, Tykhyi warned.