Марія Бровінська 29 October 2026, 16:01

Russia has intensified cyberattacks on Ukrainian businesses using AI. What the Ministry of Digital Affairs advises companies

The Russian Federation is intensifying cyberattacks on Ukrainian state institutions and businesses, and artificial intelligence is helping attackers prepare and carry out such operations more quickly. This was stated by the Minister of Digital Transformation Oksana Ferchuk during Technovation as part of the Kyiv Economic Forum.

According to the minister, the use of AI is changing the pace and scale of cyber threats: attacks and preparations for them are happening faster. Therefore, government agencies and companies need to strengthen their own cybersecurity capabilities.

What steps does the Ministry of Digital Affairs recommend?

The minister called on government agencies to form their own cyber teams in the coming weeks. She recommends that businesses appoint a responsible cybersecurity specialist or create a team that will systematically deal with infrastructure protection.

For large companies, it is important to use professional monitoring tools on employees' work computers. They help detect suspicious activity, unusual requests, and possible data leaks.

It’s not just about responding to attacks that have already occurred, but also about being able to spot signs of a threat early on. For companies that work with large data sets or critical systems, such controls become part of basic cybersecurity.

Where are the possible uses of AI already being noticed?

Signs of the possible use of artificial intelligence in cyberattacks were previously reported by the CERT-UA computer emergency response team. In January-September 2026, experts recorded such signs while analyzing phishing messages, fake web pages, and program code.

However, this does not mean that the use of AI has been confirmed in every such incident. Therefore, it is more correct to talk about signs of the possible application of the technology, rather than about the proven use of AI in all cyberattacks.

Why businesses shouldn’t postpone protection

Cyberattacks can pose risks not only to government information systems, but also to commercial infrastructure and customer data. If a company does not have a cybersecurity officer, proper monitoring, and incident response process, it can be difficult to identify a problem.

The Ministry of Digital Affairs' statement came amid the government’s increased focus on protecting digital infrastructure. The government also emphasized the need to form cyber teams in executive bodies and provide them with appropriate tools.

For businesses, the main practical conclusion is not to limit yourself to antivirus or incident response. You need responsible specialists, constant monitoring of work devices, and a clear procedure for action in case of suspicious activity.