As a frontline state and the main logistics hub for military aid to Ukraine, Poland is under constant pressure from hybrid operations conducted by Russia and Belarus. This includes a marked increase in attacks on military networks and ICT systems. According to Piotr Turek, Colonel at the Cyber Defence Forces Component Command, the number of such attacks is now five times higher than before the outbreak of the war across Poland’s eastern border. Artificial intelligence is increasingly used in cyberattacks—but at the same time, it is also becoming a key support tool for Poland’s cyber-defence systems.
“Since Russia launched its full-scale invasion of Ukraine, Poland has not only been a logistics hub connecting aid flows to Ukraine, but also a target of cyberattacks. It is no secret that a large proportion of these attacks originate from Russia. If we compare the situation before the invasion with today, we are facing roughly five times more attacks on military networks and ICT systems,”
Colonel Piotr Turek tells Newseria.
In 2018, the Act on the National Cybersecurity System (KSC) established three Computer Security Incident Response Teams: CSIRT NASK (run by NASK), CSIRT GOV (managed by the Internal Security Agency), and CSIRT MON (operated by the Ministry of National Defence). Each team coordinates incident response within its respective domain.
According to the 2024 report of the Government Plenipotentiary for Cybersecurity, CSIRT NASK registered 103,449 incidents (a 29% increase year-on-year), CSIRT GOV recorded 3,991 incidents (a 15% decrease), and CSIRT MON logged 4,220 incidents (a 28% decline). Reports of potential breaches were even more numerous—627,339 notifications in total, representing a 60% increase. The number of serious incidents—those capable of disrupting institutional continuity—rose by 57%, while incidents affecting the public sector increased by 58%.
In February 2022, the Ministry of Defence established the Cyber Defence Forces Component Command (DKWOC). This specialised branch of the Armed Forces is responsible for cybersecurity through defensive, intelligence and offensive operations in cyberspace. The command was created in response to the NATO summit decisions of 2016, which formally recognised cyberspace as a domain of military operations and a core element of collective defence. DKWOC is also responsible for ensuring the effective functioning of CSIRT MON.
“Poland’s role within NATO structures and international threat-intelligence sharing is already very strong. Polish cyber forces are highly regarded not only within NATO but also among partners worldwide. We are doing everything to maintain this positive trend and to act as leaders in this field—cooperating with allies to ensure security not only for our Armed Forces, but also at the global level. Cyberspace has no physical borders,”
Colonel Turek emphasises.
Poland currently ranks 8th globally in the National Cyber Security Index (NCSI) with a score of 92.50. The leaders are Czech Republic (98.33), followed by Canada (96.67) and Estonia (96.67). Poland also placed 6th in the Cyber Defense Index 2022/23 published by MIT Technology Review.
The government’s cybersecurity report highlights that the rapid development of technologies such as artificial intelligence, the Internet of Things (IoT), blockchain, and quantum computing represents one of the most significant cybersecurity challenges. At the same time, these technologies can also enable faster detection and response to threats. AI, in particular, is identified as a pillar of digital security in the years ahead.
“Artificial intelligence already supports cyber defence within the Polish Armed Forces and across the critical ICT infrastructure for which the Cyber Defence Forces Component Command is responsible. We use AI to automate incident response processes and to analyse adversary activity in cyberspace. We are striving to leverage this technological advantage to strengthen Poland’s cyber defence,”
the DKWOC representative explains.
“Our adversaries also use these tools to automate attacks and attempt to break through our safeguards. The rapid development of AI in recent years means it is a factor we must monitor with extreme vigilance.”
In an environment where cyber operations are intensifying alongside conventional warfare, Poland’s experience underscores how AI-driven defence, international cooperation and institutional readiness have become central to modern national and collective security.
