Cyberattacks Targeting the Defense Industrial Base Are Increasing

On 10 February 2026, Google Threat Intelligence (GTI) released a report highlighting the surge in cyberattacks targeting the defense industrial base of Western democracies. These malicious operations are primarily attributed to state-affiliated cyber groups or hacktivist collectives.

In terms of volume, China ranks as the leading state threat against the defense industrial base, ahead of Iran, Russia, and North Korea. Since 2020, groups linked to Beijing have reportedly exploited at least 25 critical vulnerabilities to gain access to sensitive information systems connected to the military sector.

GTI also points to a rise in campaigns leveraging human weaknesses or targeting supply chains, as well as an increasing use of artificial intelligence. Finally, the report raises concerns over the growing number of ransomware attacks and data breaches affecting the manufacturing sector, which supplies numerous dual-use civil and military components.