MODERN CYBER THREATS TO CRITICAL INFRASTRUCTURE IN UKRAINE AND THE WORLD

Abstract

Critical infrastructure is the basis for the stable functioning of the state and society, but its dependence on digital technologies makes it vulnerable to cyber threats. In 2024, more than 3 million information security events were recorded, of which 28,000 were classified as critical, requiring in-depth analysis and development of new approaches to risk management. This article examines the current cyber threats to critical infrastructure, including cyber espionage, embezzlement, information and psychological operations, and attacks on industrial systems. Based on the analysis, the main types of attacks are identified: ransomware, DDoS attacks, social engineering and zero-day exploits. Particular attention is paid to the energy, transport, finance and digital infrastructure sectors, which are the most vulnerable to attacks. The article also contains an analysis of international experience and standards, such as the ENISA Threat Landscape and the NIS2 directive, which demonstrate effective cybersecurity practices. Analysis of international experience shows that effective cyber defence requires a multi-level approach. This includes real-time network monitoring, automated vulnerability management tools, improved risk assessment systems, implementation of multi-factor authentication, and increased cyber awareness of staff. The use of innovative approaches will significantly reduce the impact of cyber threats and ensure the uninterrupted operation of critical infrastructure. The results of this study indicate the importance of integrating modern approaches and technologies into critical infrastructure