For the first time in the three-year war, both sides had their civilian emergency alert apps — the primary channel for warning millions of residents about incoming missiles and drones — compromised by hostile cyber operations within hours of each other. The breach represents a new front: the weaponization of trust in the systems designed to keep people alive. In Kyiv, residents received a rapid succession of fabricated alerts late Sunday night: a radiation threat, a chemical attack warning, a report of street fighting in the capital, and a reference to incoming Oreshnik hypersonic missiles — a weapon Ukraine cannot intercept. One message was written in Russian, an immediate tell that the system had been compromised. The alerts spanned roughly an hour before Ukrainian authorities issued an all-clear and took the system offline. Ukraine's Air Force responded on Telegram within the hour, stating the app had "probably been subjected to hostile interference" and confirming there was no radiation threat. The air raid alert channel identified "unauthorised parties" and warned users not to click links in suspicious notifications. Hours later, Russian authorities reported their own warning app had been hacked and taken offline. A Ukrainian hacker group claimed responsibility, saying it had sent fake nuclear warhead alerts to users inside Russia. The strategic logic is clear: you don't need to destroy a warning system if you can make people stop trusting it. Every false alert erodes the credibility of every future real alert. In a country where residents receive multiple daily warnings about actual incoming drones and missiles, the difference between a false alert and a real one can be lethal. The hack targets the behavioral compliance that keeps the system effective — if people start ignoring alerts, the next real strike lands on unsheltered populations. This sits alongside continued kinetic operations. Both sides carried out overnight strikes targeting energy infrastructure, with reports of attacks in Zaporizhzhia and Odesa hitting oil refineries and energy sites. The cyber-kinetic pairing is not coincidental — degrading alert credibility hours before or during physical strikes maximizes the damage of both. Meanwhile, in a separate European thread, Belgian Prime Minister Bart De Wever arrived at the Royal Palace to tender his resignation to King Philippe after failing to secure coalition backing for budget cuts in late-night talks. Belgian media report he may be instructed to attempt another deal by a set deadline, suggesting the political crisis may loop rather than resolve. The alert-system breaches mark an escalation in the information dimension of the war. Both sides now treat the other's civilian safety infrastructure as a legitimate target — not to destroy it physically, but to poison its credibility. The implications extend well beyond this conflict: every nation relying on app-based emergency alerts now has a template for how that trust can be attacked.
