In the ongoing struggle against Russian aggression, Ukrainian cyber defenders find themselves navigating a complex battlefield that integrates both cyber operations and traditional military strikes. As the conflict enters its fifth year, key officials emphasize an urgent need for a more “security-minded” approach to cyber defense. This perspective was articulated by Ivan Kalabashkin, the deputy head of the Cyber Department at the Ukrainian Security Service, during a panel discussion hosted at the Billington Summit in Washington, D.C., on September 8, 2026.

Kalabashkin asserted that many may expect responses focused on increasing resources, such as acquiring more personnel and technology. However, he challenged this notion, arguing that the most critical adjustment needed is the cultivation of a security-oriented mindset. He emphasized the importance of understanding the underlying motives behind compromises in security, asking, “Why has it been compromised? What intentions did the adversary have?” This deeper analysis is vital for establishing connections between cyberattacks and potential kinetic strikes that might follow, an insight that underscores the intricate interplay between cyber and physical dimensions of warfare.

Retired Air Force General Greg Touhill, currently the director of the CERT Division at the Carnegie Mellon University Software Engineering Institute, reinforced Kalabashkin’s perspective by elucidating the concept of converged attacks. These attacks represent a fusion of various capabilities deployed at a specific time and place determined by the attackers. Touhill illustrated this with a hypothetical scenario involving an Earth observation satellite pinpointing a target, which an intelligence analyst subsequently identifies, leading to an attack executed by a drone from a forward-positioned unit. This underscores the sophistication and coordination required in modern cyber warfare.

Moreover, Kalabashkin highlighted the necessity for enhanced collaboration with allies and the private sector. He pointed out that the lessons learned from the ongoing cyber conflict in Ukraine emphasize the need for proactive measures. “To understand the full scope of threats,” he stated, “we must share intelligence with partners and obtain insights from like-minded nations and the private sector.” This collaborative intelligence-sharing framework is crucial for mitigating risks and responding effectively to evolving cyber threats. Indeed, this collaborative effort is viewed as integral to achieving positive outcomes in the realm of cyber defense.

Jason Bilnoski, the FBI’s Deputy Assistant Director and leader of the bureau’s cyber operations branch, added to the discussion by underscoring the importance of foundational cybersecurity practices. Bilnoski indicated that the strategies that can thwart cyberattacks in the coming eighteen months are fundamentally the same as those that could have prevented past incidents. Emphasizing critical basics such as identity management, secure perimeter monitoring, robust cyber hygiene, and protection against spear-phishing through multi-factor authentication, Bilnoski noted that while implementing these practices may be challenging for organizations, they are essential. The focus on these essential components is key to building a resilient cyber defense framework.

Overall, the emphasis on a “security-minded” approach, the importance of intelligence sharing, and the need to adhere to fundamental cybersecurity practices highlights the multifaceted strategies required to confront the complexities of modern cyber warfare. As Ukraine continues to grapple with external threats, the integration of improved strategic thinking and operational collaboration will be essential in shaping a more secure digital landscape. The insights shared at the Billington Summit not only reflect the current state of cybersecurity in Ukraine but also serve as a reminder that successful defense against cyber threats demands continuous adaptation and cooperation among nations and sectors.