Cyberattacks target civil defense warning apps in Ukraine and Russia

On the night of November 1, 2026, mobile applications designed to provide air raid warnings in Ukraine and Russia were compromised by cyberattacks, causing widespread alarm among citizens. The Ukrainian "Air Alert" app, which serves millions of users, displayed false notifications regarding imminent nuclear and chemical strikes, as well as reports of street fighting. One message falsely claimed the deployment of a Russian "Oreshnik" hypersonic missile. The Ukrainian Air Force and the Ministry of Digital Transformation moved quickly to deny these claims, confirming the platform had been breached by hostile actors and temporarily disabling the system to prevent further misinformation. Physical warning sirens remained operational throughout the event.

Only hours after the Ukrainian incident, the Russian Ministry of Emergency Situations reported a massive cyberattack on its own official mobile application, which typically warns citizens of drone attacks and other risks. The Russian ministry stated that the attackers disseminated false information to the public and that efforts to rectify the system’s vulnerabilities were underway. While the Ukrainian Center for Strategic Communications attributed their breach to Russia, the origin of the attacks remains unverified, and it is unclear if the two incidents are directly coordinated. No immediate reports of radioactive or chemical threats were validated in either country.