OpenAI will give the Ukrainian government access to its Daybreak cybersecurity program, which will help protect critical civilian infrastructure from Russian cyberattacks, the company said.

Cybersecurity specialists from Ukraine’s Ministry of Digital Transformation will gain access to advanced AI tools for identifying vulnerabilities in software. Daybreak was developed specifically for legitimate cyber defense teams and is already used by several European countries.

## New capabilities for Ukrainian cyber defenders

Thanks to OpenAI’s specialized models, Ukrainian engineers will be able to counter cyberthreats more effectively. In particular, the program will allow them to:

* Scan outdated software for vulnerabilities.
* Automate the investigation of suspicious activity.
* Verify detected threats.
* Quickly generate and test fixes for software products.

“Thanks to Daybreak, public and private organizations can strengthen their cyber defenses before new threats scale. Ukraine is already on the front line, and its defenders need support right now. We want to give them more powerful tools to help identify and fix vulnerabilities and protect the critical networks that people depend on,” said OpenAI’s head of national security policy, Sasha Baker.

This is not the first time OpenAI has granted access to its cyber models to protect government networks. Similar cooperation has previously been established with France, Germany, and Poland. For example, the EU Agency for Cybersecurity (ENISA), using OpenAI algorithms, identified and fixed numerous vulnerabilities in software used by EU government authorities. Poland’s national CERT agency, CERT Polska, also successfully found critical gaps in third-party network router software, which led to the release of security updates.

## The current situation with cyberattacks against Ukraine

Throughout 2025, Ukraine’s National Cyber Incident Response Team, CERT-UA, recorded 5,927 cyber incidents, 37.4% more than a year earlier. The increase in incidents is explained both by the enemy’s growing activity and by improved detection capabilities among specialists, as well as greater user awareness.

Local authorities traditionally face the highest number of attacks — 2,115 incidents (35.7% of the total). Government organizations recorded 1,170 incidents, the security and defense sector 1,039, and the energy sector 279. At the same time, attackers are showing growing interest in the healthcare industry and the IT sector.

The most common method of cyberattack remains the distribution of malicious software — 2,058 cases. The number of phishing attacks doubled, reaching 1,727 cases. In addition, nearly 1,000 malware infections and more than 400 account compromises were recorded.

Since the start of the full-scale invasion, the SBU Cyber Department has neutralized more than 16,000 Russian cyberattacks and critical cyber incidents. A significant share of these attacks targeted Ukrainian media.

It is worth noting that Russian hackers have attempted to use AI models, including Anthropic’s Claude, to carry out cyberattacks, develop autonomous combat drones, and purchase goods for Russia’s defense industry. Anthropic said it blocked the relevant accounts and used the data obtained to strengthen the protection of its models.