April 23, 2026

1. Russia Deploys AI-Generated Deepfakes in Coordinated Psychological Campaign Against Ukraine

Ukrainian officials and researchers at Sensity have identified over 1,000 synthetic videos forming part of what they describe as a structured "narrative kill chain" — a modular disinformation system targeting Ukrainian soldiers, civilians, and Western audiences. The deepfakes depict frontline Ukrainian soldiers delivering fabricated "stories of hopelessness," blending authentic footage with AI-generated elements to erode morale and undermine trust in Ukraine's central command. The campaign represents a significant escalation in Russia's use of AI as a mass disinformation weapon, moving beyond isolated fakes toward industrialized, pipeline-driven influence operations.

2. EU Adopts 20th Sanctions Package Against Russia, Targets Propaganda Networks Euromore and Pravfond

The European Council formally adopted its 20th sanctions package against Russia on April 23, targeting energy revenues, the military-industrial complex, trade, financial services, and cryptocurrency. Notably, the package includes asset freezes against Euromore and Pravfond (the Foundation for the Support and Protection of the Rights of Compatriots Living Abroad) — two Russian organizations designated for conducting propaganda and disinformation operations across Europe and in support of the war in Ukraine. The inclusion of these entities signals a growing EU willingness to use economic tools against information warfare infrastructure, not just military and energy targets.

3. North Korea's Lazarus Group Linked to ~$290M KelpDAO Crypto Heist and New macOS Malware Campaign

North Korea's Lazarus Group is suspected of orchestrating the theft of approximately $290 million in Ethereum from decentralized finance platform KelpDAO, making it the largest known crypto heist of 2026 so far. Separately, security firm CertiK disclosed that Lazarus has launched a new macOS-focused malware campaign dubbed "Mach-O Man," which uses fake meeting invitations to target cryptocurrency executives and firms. Combined with reports that DPRK-linked actors have stolen over $600 million in crypto in 2026 and are infiltrating Western firms through fake IT worker personas, these activities underscore Pyongyang's expanding cyber-enabled revenue generation apparatus.

4. UK NCSC Chief Warns of "Perfect Storm" From Nation-State Cyber Threats

NCSC CEO Richard Horne warned that Russia, Iran, and China are now behind the majority of "nationally significant" cyberattacks targeting the United Kingdom, with the agency handling approximately four such incidents per week. In a speech reported by Reuters, Horne described a "perfect storm" created by escalating nation-state operations, AI-powered offensive capabilities, the looming quantum computing threat, and a growing global market for commercial spyware. The warning comes alongside a UK government call for technology firms to help build AI-powered defensive capabilities, reflecting concern that the gap between threat sophistication and national resilience is widening.

5. Iran's Diplomatic Apparatus Wages Viral Meme and AI-Driven Information Campaign

The Institute for Strategic Dialogue documented an escalating Iranian state-directed information campaign in which Iranian diplomats and official accounts are using AI-generated videos, memes, and provocative ironic content to drive massive engagement on social media platforms during the ongoing conflict with the United States. The campaign includes AI-generated Lego-style military parodies and near-real-time troll responses to U.S. political figures. Analysts at ASPI assess that Iran is outperforming the U.S. in the information domain, reaching audiences who do not consume traditional news — a notable development in state-level cognitive warfare leveraging consumer AI tools.

6. Far-Right Actors Exploit Irish Fuel Protests to Mainstream Extremist Narratives

A report from the Global Project Against Hate and Extremism documents how far-right figures are hijacking fuel protests in Ireland — triggered by war-driven cost spikes — to redirect public anger toward anti-immigration and conspiracy-driven narratives. The pattern mirrors a broader European trend in which economic crises serve as vectors for extremist recruitment and narrative laundering. Separately, an Irish Independent Examiner's report warned that Ireland faces evolving terrorism threats from both Islamist and far-right actors, while outdated surveillance legislation undermines the state's ability to respond.

7. South Korea Intelligence Agency Warns of AI-Capable Autonomous Cyberattacks

South Korea's National Intelligence Service warned that AI systems capable of independently carrying out cyberattacks are emerging as a near-term threat, marking one of the first formal state-level advisories on autonomous offensive AI. The warning aligns with a broader pattern of state intelligence services — including the UK's NCSC — publicly flagging AI as a force multiplier for cyber operations. Microsoft separately disclosed that North Korea-aligned group "Jasper Sleet" is using AI-assisted methods to place fake IT workers inside cloud environments at Western organizations, illustrating the convergence of AI capabilities with state-sponsored espionage tradecraft.