We Are At War

This article examines how geopolitical tensions have transformed the cyber threat landscape into a multi-front conflict involving state actors, hacktivists, and criminal groups.

• •State-sponsored groups like Volt Typhoon and Salt Typhoon have compromised U.S. critical infrastructure and global telecom networks, with attack methods concentrating on identity, edge devices, and stealthy backdoors on appliances and virtualization platforms.
• •Rapid exploitation of 0-day and n-day vulnerabilities in perimeter appliances and supplier/service-provider pathways are prominent incident trends.
• •Hacktivism has evolved from digital protest into state-aligned operations; groups like NoName057(16) conducted DDoS campaigns and OT/ICS intrusions across Europe and Canada in 2025.
• •Physical consequences are increasing: a Norwegian dam had its floodgates remotely opened, and Canadian critical infrastructure including water, energy, and agricultural OT systems were tampered with.