Norway's National Security Authority (NSM) said on Tuesday that the number of successful cyberattacks targeting Norwegian organisations has trebled in the last six months, warning that the rapid growth of artificial intelligence technology poses a serious risk to businesses and critical infrastructure.
In a new report, the NSM, which is involved in countering espionage and hybrid threats, said the country's defence industry and space sector were particularly exposed to cyber risk. It noted that critical infrastructure and service providers to organisations important to national security were also vulnerable.
“NSM has not previously made this type of assessment public,” said director Arne Christian Haugstøyl. “We are doing so now because it is absolutely necessary to strengthen both the resilience and the ability to handle cyber operations in Norwegian organisations.”
The agency did not point to a specific actor but said certain businesses and organisations were increasingly subjected to reconnaissance, ransomware and distributed denial-of-service (DDoS) attacks. The warning follows increasing reports across Europe of suspected Russian hybrid attacks, including cyber operations. In August, Norwegian media reported that a Russian hacker group had declared war on Norway while also claiming responsibility for a DDoS attack that reportedly affected multiple government digital services.
The NSM also highlighted the threat posed by artificial intelligence. “AI analyses large amounts of data and identifies vulnerabilities faster than humans have been able to,” Haugstøyl said. “These vulnerabilities open up new opportunities for cyberattacks at a faster pace and on a larger scale. This means that the risk is increasing, and the pace at which security measures are implemented must be accelerated.”
Analysis
Why This Matters
- The tripling of successful cyberattacks signals a heightened threat to Norway's national security and critical infrastructure.
- Artificial intelligence is enabling faster, larger-scale attacks, putting pressure on organisations to accelerate their defences.
- Norway's public warning may prompt other countries to reassess their own cyber readiness and intelligence sharing.
Background
The report is the first time the NSM has made such an assessment public. It comes amid a pattern of suspected Russian hybrid attacks across Europe, including cyber operations. In August 2026, Norwegian media reported that a Russian hacker group had declared war on Norway and claimed a DDoS attack that disrupted several government digital services. The NSM's report does not attribute the recent attacks to any specific state or group.
What to Watch
- Whether the NSM or other Norwegian agencies identify specific threat actors in future updates.
- The effect of AI-driven attacks on the defence and space sectors, which the NSM flagged as particularly exposed.
- How Norwegian businesses and government bodies respond to the call for faster security measures.
Checked
12 claims in this story checked against 1 source: 10 supported.
Show each claim
- SupportedThe NSM said successful cyberattacks targeting Norwegian organisations trebled in the last six months.Euronews: “Norway's National Security Authority (NSM) said on Tuesday that the number of "successful" cyberattacks targeting Norwegian organisations had trebled in the last six months”
- Partly supportedThe rapid growth of AI poses a serious risk to both Norwegian businesses and critical infrastructure.Euronews: “The country's National Security Authority said the rapid growth of artificial intelligence technology also posed a "serious risk" to Norwegian businesses and organisations.”
- SupportedThe defence industry and space sector are particularly exposed to cyber risk.Euronews: “the NSM - which is involved in efforts to counter espionage and hybrid threats - said the country's defence industry and space sector were particularly exposed to cyber risk.”
- SupportedCritical infrastructure and service providers to organisations important to national security are also vulnerable.Euronews: ““This also applies to critical infrastructure and service providers to organisations that are important to national security,” it said.”
- SupportedArne Christian Haugstøyl said, “NSM has not previously made this type of assessment public.”Euronews: ““NSM has not previously made this type of assessment public,” director Arne Christian Haugstøyl added.”
- SupportedHaugstøyl said, “We are doing so now because it is absolutely necessary to strengthen both the resilience and the ability to handle cyber operations in Norwegian organisations.”Euronews: ““We are doing so now because it is absolutely necessary to strengthen both the resilience and the ability to handle cyber operations in Norwegian organisations.””
- SupportedThe NSM did not identify a specific actor and said businesses and organisations were increasingly subjected to reconnaissance, ransomware and DDoS attacks.Euronews: “the NSM did not point to a specific actor but said that certain businesses and organisations were being increasingly subjected to reconnaissance and ransomware and DDoS attacks.”
- Partly supportedThe warning follows increasing reports across Europe of suspected Russian hybrid attacks, including cyber operations.Euronews: “The report follows increasing warnings across Europe of suspected Russian hybrid attacks, including cyber operations.”
- SupportedIn August, Norwegian media reported that a Russian hacker group declared war on Norway and claimed responsibility for a DDoS attack that reportedly affected multiple government digital services.Euronews: “In August, Norwegian media reported that a Russian hacker group had declared war on Norway while also claiming responsibility for a distributed denial-of-service (DDoS) attack that had reportedly impacted multiple government digital services.”
- SupportedHaugstøyl said, “AI analyses large amounts of data and identifies vulnerabilities faster than humans have been able to.”Euronews: ““AI analyzes large amounts of data and identifies vulnerabilities faster than humans have been able to,” Haugstøyl said.”
- SupportedThe summary says AI opens new attack vectors; Haugstøyl said vulnerabilities create new opportunities for cyberattacks at a faster pace and on a larger scale.Euronews: ““These vulnerabilities open up new opportunities for cyberattacks at a faster pace and on a larger scale.””
- SupportedHaugstøyl said the risk is increasing and security measures must be implemented faster.Euronews: ““This means that the risk is increasing, and the pace at which security measures are implemented must be accelerated.””
