Cyber Operations during the 2022 Russian invasion of Ukraine: Lessons Learned (so far)

What key lessons can we draw from the 2022 Russian invasion of Ukraine about the role of cyber operations in military conflict? How do Russian cyber operations differ in wartime compared to peacetime activity? And what cyber activity can we expect in the months ahead? On the 30th of May, the European Cyber Conflict Research Initiative (ECCRI) held a roundtable in Tallinn, Estonia to discuss questions about the impact of cyber operations during the war in Ukraine. The event included cyber threat intelligence and incident response practitioners, corporate representatives, academics, and officials from key governments and international institutions. It was invite-only and held under the Chatham House Rule to enable those attending to be as frank as possible. Nonetheless, we thought it useful – in consultation with all attendees – to make several lines of discussion public in this report.