Ukraine's parliament has taken a significant step toward consolidating the nation's cyber capabilities by approving, in a first reading, legislation to create a dedicated Cyber Force within the Armed Forces. The proposed Cyber Force would unify both offensive and defensive cyber operations under a single command, reporting directly to Commander-in-Chief Oleksandr Syrskyi. This new branch would be responsible for conducting military cyber operations, digital defense, intelligence gathering, threat hunting, and building secure military infrastructure. The initiative is designed to align Ukraine's cyber defense posture with NATO standards, a move seen as critical as the country continues to seek closer ties with the alliance. The bill also introduces the concept of a cyber reserve, allowing civilian technology experts to be temporarily mobilized to support military cyber operations without requiring them to become full-time service members. This approach is expected to strengthen collaboration between Ukraine's robust tech sector and its military, a relationship that has already seen some cybersecurity professionals volunteering their expertise. The government plans to allocate 14 million hryvnias (approximately $336,000) in 2025 to establish the new branch. While the initiative has been welcomed by many in the cybersecurity community, some lawmakers, such as Oleksandr Fediyenko, chair of the parliament's cybersecurity subcommittee, have expressed concerns that merging offensive and defensive roles could create operational confusion. The idea for a dedicated Cyber Force was first discussed in 2021, but only now has it gained significant legislative traction. If the bill passes a second parliamentary vote and receives presidential approval, Ukraine will, for the first time, have a formal military structure for cyber operations. This development comes against the backdrop of ongoing cyber conflict with Russia, where Ukraine has relied on both volunteer hacktivists and official military intelligence units for cyber operations. The formalization of a Cyber Force is expected to enhance Ukraine's ability to defend its military systems and conduct coordinated cyber campaigns. The move is also seen as a way to institutionalize lessons learned from the war and to ensure that Ukraine's cyber capabilities are both resilient and adaptable. The establishment of a cyber reserve is particularly notable, as it provides a mechanism for rapid mobilization of technical expertise in times of crisis. The bill's progress reflects Ukraine's recognition of cyberspace as a critical domain of modern warfare. The proposed Cyber Force would also be tasked with building and maintaining secure digital infrastructure for the Armed Forces, further strengthening national security. The legislation awaits a second reading in parliament and subsequent presidential approval before it can be enacted. If successful, Ukraine's Cyber Force could serve as a model for other nations seeking to integrate civilian cyber talent into military operations. The initiative underscores the increasing importance of cyber capabilities in national defense strategies worldwide.

See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Ukrainian authorities took formal steps toward creating a dedicated Cyber Force intended to conduct offensive cyber operations. Multiple reports in mid-October 2025 describe the effort as moving closer to establishment, with the force framed as a new military cyber capability.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.