Search CRC

In this article, Tamara Klevova identifies a significant blind spot in existing counterintelligence frameworks: unresolved integration trauma as a distinct psychological vulnerability exploited by foreign intelligence services. Critically engaging with the Swedish Defence Research Agency's 2026 "Spies Among Us" report, Klevova argues that while the study acknowledges "divided loyalties" among recruited agents, it treats these as static demographic markers rather than active psychological mechanisms. The dominant MICE model (Money, Ideology, Coercion, Ego) has no category for the emotional experience of failed integration, the chronic sense of non-belonging that leaves individuals open to manipulation. Drawing on social psychology research on belonging and acculturation stress, Klevova argues that when integration fails, the resulting psychological state is a structural vulnerability. An offer of belonging from an intelligence-linked recruiter operates at a more fundamental level than ideological persuasion, making such recruits harder to identify through conventional screening, and less likely to recognize themselves as being recruited at all. The article further argues that influence operations systematically priming diaspora communities with narratives of grievance and Western betrayal are not separate from HUMINT recruitment, but part of a deliberate, coordinated strategy. The policy implication cuts across both intelligence and social policy: genuine integration may be the most effective long-term countermeasure, and integration quality should be understood as directly intersecting with national cognitive security. Author: Tamara Klevova [Download PDF Here]

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 25th to the 31st of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Russian-Linked Conspiracy Theories Amplified by Political Figures Disinformation Through Hacked Bluesky Accounts Matryoshka Launches Campaign Targeting Armenia’s Elections The War in Ukraine Russian Disinformation Campaigns About Ukrainian Refugees China China’s Influence Campaign Against Japan [AI Related Articles] New “NewsBench” Tool to Evaluate AI-Based News Reliability AI in California Courts Raises Concerns Over Accuracy and Fairness AI-Generated Influencers Spread Political Propaganda [General Reports] Australia’s Defence Strategy in Facing Foreign Misinformation Diphtheria Outbreak and Public Misinformation Challenges in Australia Hidden Polarisation on Malaysian TikTok Addressing Misinformation in the Public Health Field Investigation into the Cuban Influence Network in the United States The Sandygate Affair Raises Disputed Evidence and Public Trust in Cyprus [Appendix - Frameworks to Counter Disinformation] OpenAI’s Measures to Safeguard Elections Information and Transparency Exposing Fake AI Content YouTube’s New AI Content Labels RESIST Framework to Create Resilience to Disinformation Fighting Climate Disinformation [CRC Glossary] [ Report Highlights] According to a report by TechXplore, researchers have uncovered a Russian disinformation campaign that hacked hundreds of Bluesky accounts to spread pro-Kremlin propaganda. A report by First Monday examined Russian disinformation campaigns targeting Ukrainian refugees in Europe and argued that these campaigns are effective not only because they imitate credible media sources, but because they activate existing cultural prejudices and social anxieties. According to a publication by The Jamestown Foundation, since Prime Minister Sanae Takaichi took office in late 2025, Beijing has increased political, economic, and military pressure on Japan in response to Tokyo’s efforts to strengthen its security policies. According to an article by EDMO, a traditional weakness of ideological movements has been the gap between what their leaders preach and how they behave in private. As published by ASPI, Australia’s defence strategy is being challenged by the growing importance of information environments in modern conflict. YouTube announced it is introducing new updates to improve transparency around AI-generated content. As published by the Council of Europe, it developed the RESIST framework to help countries understand and strengthen their resilience to disinformation while respecting democratic principles, human rights, and freedom of expression. [ Report Summary] According to a report by DisinfoWatch, recent claims promoted by far-right conspiracy theorist Alex Jones and convicted Russian arms trafficker Viktor Bout represent a clear example of disinformation designed to spread fear and uncertainty. According to a report by TechXplore, researchers have uncovered a Russian disinformation campaign that hacked hundreds of Bluesky accounts to spread pro-Kremlin propaganda. As revealed in a NewsGuard report, the Russia-linked influence operation Matryoshka launched a coordinated disinformation campaign against Armenian Prime Minister Nikol Pashinyan ahead of the June 2026 parliamentary elections. A report by First Monday examined Russian disinformation campaigns targeting Ukrainian refugees in Europe and argued that these campaigns are effective not only because they imitate credible media sources, but because they activate existing cultural prejudices and social anxieties. According to a publication by The Jamestown Foundation, since Prime Minister Sanae Takaichi took office in late 2025, Beijing has increased political, economic, and military pressure on Japan in response to Tokyo’s efforts to strengthen its security policies. A large independent evaluation of more than 12,500 chatbot responses found significant weaknesses in how major AI models handle news and current events. According to an article by CyberNews, California’s largest courts are testing an AI tool called Learned Hand to assist judges and court staff with drafting legal orders, summarizing motions, and conducting legal research. According to an article by EDMO, a traditional weakness of ideological movements has been the gap between what their leaders preach and how they behave in private. As published by ASPI, Australia’s defence strategy is being challenged by the growing importance of information environments in modern conflict. As stated in an article by ABC News, health authorities in Western Australia’s far north are responding to an ongoing diphtheria outbreak while addressing confusion and misinformation surrounding the disease and vaccination. A study published by University Sains Islam Malaysia states that polarizing and disinformation-adjacent content circulates widely on Malaysian TikTok through strategically neutral captions and identity-coded moral framing, not through overt hostility. As published by Health Policy Watch, recent disease outbreaks, including hantavirus, Ebola, and COVID-19, have been accompanied by false claims about the causes of diseases, vaccines, and treatments. An article by Fox News examined allegations that U.S. authorities are investigating a network of nonprofit organizations, activist groups, media platforms, and political organizations that coordinate activities supportive of the Cuban government. As reported by MEDDMO, an influential media event named the “Sandygate affair” began with serious allegations of sexual abuse, corruption, and influence involving prominent figures in Cyprus. As published by OpenAI, as major elections approach in 2026, efforts are focused on helping people access accurate voting information and strengthening trust in election-related content. According to an article by The Conversation, the rapid growth of online images and videos has made disinformation more convincing and harder to detect. YouTube announced it is introducing new updates to improve transparency around AI-generated content. As published by the Council of Europe, it developed the RESIST framework to help countries understand and strengthen their resilience to disinformation while respecting democratic principles, human rights, and freedom of expression. An essay published by The Union of Concerned Scientists argued that periods of extreme weather and climate-related disasters depend on a strong “safety chain”, which connects scientific data, weather forecasting, trusted communication, public understanding, and effective preparation and response. [State Actors] Russia Russian-Linked Conspiracy Theories Amplified by Political Figures According to a report by DisinfoWatch, recent claims promoted by far-right conspiracy theorist Alex Jones and convicted Russian arms trafficker Viktor Bout represent a clear example of disinformation designed to spread fear and uncertainty. The segment falsely presents Bout as a credible Russian military expert while omitting his criminal background, and it makes unverified claims that Vladimir Putin has announced plans to attack NATO sites and devastate major Ukrainian cities. There is no independent evidence to support these claims, making them best understood as escalation propaganda rather than factual reporting. While Russia has engaged in nuclear signaling and military exercises with Belarus, credible reporting does not confirm any official plan for imminent strikes on NATO or global nuclear war. NATO has consistently described its actions as defensive support for Ukraine’s self-defence, while Russia continues its documented attacks on Ukrainian civilians, with the UN reporting a significant rise in civilian casualties in 2026. Another publication by DisinfoWatch stated that recent claims amplified by Alex Jones falsely portray Canada as forcibly committing political critics and using medically assisted death (MAiD) as a tool of state punishment. These allegations are based on an uncorroborated individual case that is misleadingly expanded into sweeping accusations of government abuse. The claims that more than 100,000 people were “medically murdered” in the past year and that psychiatrists can force people into MAiD are demonstrably false and unsupported by official data. Sources: DisinfoWatch. Russia’s “Merchant of Death” Threatens Nuclear War Against NATO on Alex Jones Show. [online] Published 26 May 2026. Available at: https://disinfowatch.org/disinfo/russias-merchant-of-death-threatens-nuclear-war-against-nato-on-alex-jones-show/ (disinfowatch.org) DisinfoWatch. Alex Jones “Canada Death-State” Conspiracy Promotes MAiD Panic. [online] Published 26 May 2026. Available at: https://disinfowatch.org/disinfo/alex-jones-canada-death-state-conspiracy-promotes-maid-panic/ (DisinfoWatch) Top Of Page Disinformation Through Hacked Bluesky Accounts According to a report by TechXplore, researchers have uncovered a Russian disinformation campaign that hacked hundreds of Bluesky accounts to spread pro-Kremlin propaganda. Instead of creating fake profiles, the operation used real accounts belonging to journalists, academics, and other public figures, making the false information appear more credible and harder to detect. Many of the compromised accounts were used to share anti-Ukraine narratives before the posts were removed. The campaign was linked to the Moscow-based Social Design Agency and the broader influence operation known as Matryoshka, which has previously used impersonation, stolen media logos, and AI-generated voice cloning to spread misleading content. Although Bluesky removed thousands of accounts connected to state-backed influence activity, researchers believe the real scale of the operation may be larger. However, experts emphasized that the campaign’s impact was limited, as most posts received little attention. They argued that its main goal was not direct persuasion, but creating the perception of widespread support for false narratives. Source: Tech Xplore. Bluesky accounts hijacked in pro-Russia propaganda campaign. [online] Published 29 May 2026. Available at: https://techxplore.com/news/2026-05-bluesky-accounts-hijacked-pro-russia.html (techxplore.com) Top Of Page Matryoshka Launches Campaign Targeting Armenia’s Elections As revealed in a NewsGuard report, the Russia-linked influence operation Matryoshka launched a coordinated disinformation campaign against Armenian Prime Minister Nikol Pashinyan ahead of the June 2026 parliamentary elections. The campaign spread dozens of fabricated reports designed to damage his credibility, falsely portraying him as abusive, corrupt, and preparing for conflict with Russia. These fake stories were made to look like they came from trusted international and Armenian media outlets, increasing their appearance of legitimacy. The campaign used anonymous social media accounts and AI-generated content to make false claims more convincing. Some videos copied real news broadcasts and used cloned voices of journalists to present fabricated accusations, including false reports about Pashinyan’s health, personal misconduct, and election fraud. The operation also exploited celebrity names and even impersonated media monitoring organizations to amplify misleading narratives and create confusion among voters. Researchers say this is one of the most extensive disinformation efforts linked to Armenia’s election, with hundreds of fake reports produced over several months. Source: NewsGuard. Russia Takes Aim at Armenia. [online] Published 28 May 2026. Available at: https://www.newsguardtech.com/special-reports/russia-takes-aim-at-armenia/ (newsguardtech.com) Top Of Page The War in Ukraine Russian Disinformation Campaigns About Ukrainian Refugees A report by First Monday examined Russian disinformation campaigns targeting Ukrainian refugees in Europe and argued that these campaigns are effective not only because they imitate credible media sources, but because they activate existing cultural prejudices and social anxieties. False narratives portraying refugees as violent, dishonest, or dependent on welfare circulated widely in countries such as Germany, Poland, Czechia, and Slovakia. According to the authors, these messages sought to weaken public support for refugees and increase social division within European societies. The paper paid particular attention to the role of racial and ethnic prejudice in these campaigns, especially regarding Roma refugees, as disinformation resonates more easily when audiences already hold fears or negative stereotypes about migrants or minority groups. Rather than viewing disinformation simply as false information entering an otherwise healthy public sphere, the authors suggest that these narratives build upon long-standing social inequalities, nationalism, and distrust already present in society. To counter this, responses such as fact-checking or prebunking may help, but addressing disinformation also requires confronting the deeper cultural and political conditions that allow such narratives to spread and gain support. Source: First Monday. [Article title unavailable from URL alone]. [online] Available at: https://firstmonday.org/ojs/index.php/fm/article/view/14649/12443 Top Of Page China China’s Influence Campaign Against Japan According to a publication by The Jamestown Foundation, since Prime Minister Sanae Takaichi took office in late 2025, Beijing has increased political, economic, and military pressure on Japan in response to Tokyo’s efforts to strengthen its security policies. China has imposed export restrictions, sanctioned Japanese officials, and increased activity near Japanese territory, while state media has strongly criticized Japan’s defense expansion. The article highlighted how Beijing is using media influence operations to shape public opinion inside Japan. Chinese state media amplified small anti-missile protests and presented them as broader national opposition to government policy. These efforts focus on exploiting real public concerns, such as local frustration over missile deployments, to influence debate without confrontation. Japan’s internal communication gaps make it more vulnerable to external influence campaigns, as selective reporting and pressure tactics can undermine trust and affect public opinion on key national security decisions. Source: Jamestown Foundation. Cognitive Warfare Against Japan’s Security Normalization. [online] By Sze-Fung Lee. Published 29 May 2026. Available at: https://jamestown.org/cognitive-warfare-against-japans-security-normalization/ (jamestown.org) Top Of Page [AI Related Articles] New “NewsBench” Tool to Evaluate AI-Based News Reliability A large independent evaluation of more than 12,500 chatbot responses found significant weaknesses in how major AI models handle news and current events. About 30% of responses contained factual errors, including incorrect dates, figures, and policy details, while nearly one in four failed neutrality checks. These issues were especially noticeable in election-related prompts, where mistakes appeared in responses about voting procedures, public opinion, and major political issues. The study also highlighted differences between models. ChatGPT showed the highest overall accuracy, while other systems had much higher error rates. Responses varied in political framing, with some models showing stronger left-leaning patterns and others more right-leaning tendencies. Examples included inconsistent answers to politically sensitive questions and responses that appeared to shift depending on how a prompt was framed. Another key finding was source quality - many responses cited state-controlled foreign outlets or commercial sources when answering public-policy and foreign-affairs questions. As AI becomes a more common tool for accessing news, these issues raise important concerns about accuracy, neutrality, and source selection. Source: ForumAI. Introducing NewsBench. [online] Published on Substack. Available at: https://forumai.substack.com/p/introducing-newsbench Top Of Page AI in California Courts Raises Concerns Over Accuracy and Fairness According to an article by CyberNews, California’s largest courts are testing an AI tool called Learned Hand to assist judges and court staff with drafting legal orders, summarizing motions, and conducting legal research. The pilot program, launched by the Los Angeles County Superior Court, is part of an effort to improve efficiency and reduce growing case backlogs by providing faster research and drafting support. However, the program has raised significant concerns among judges and legal professionals. Critics warn that AI systems are prone to inaccuracies, including hallucinated facts and false legal citations, problems that have already affected real court cases. Some judges argue that relying on AI in legal decision-making could undermine human judgment, especially in complex cases involving social dynamics and racial bias appeals under California’s Racial Justice Act. Opponents also stress that AI lacks the human understanding and empathy required for fair judicial evaluation, and that its use could lead to a “one-size-fits-all” approach to justice and reduce public confidence in the fairness of the courts. Sources: Cybernews. California courts are secretly testing AI to help decide criminal cases, including racial bias appeals. [online] Published 28 May 2026. Available at: https://cybernews.com/ai-news/california-court-ai-criminal-cases-racial-bias/ (cybernews.com) Top Of Page AI-Generated Influencers Spread Political Propaganda According to an article by EDMO, a traditional weakness of ideological movements has been the gap between what their leaders preach and how they behave in private. Public figures often lose credibility when their actions contradict their stated values. AI-generated characters can continuously produce content, engage with large audiences, and promote a consistent ideological message without the personal flaws, contradictions, or behavioral scandals that affect real people. In an online environment where algorithms reward outrage and polarization, such synthetic figures could become increasingly influential tools for spreading political propaganda and mobilizing supporters. As an example, the article discusses “Danny Bones”, an AI-generated rapper created by The Node Project and funded by Advance UK. Although the character does not exist, he has attracted followers through anti-immigration and racist content. The risk is that some audiences either do not realize or do not care that the figure is artificial, focusing instead on the message being delivered. Sources: European Digital Media Observatory (EDMO). AI Political Influencers: The New Gods of Propaganda and Disinformation? [online] Available at: https://edmo.eu/publications/ai-political-influencers-the-new-gods-of-propaganda-and-disinformation/ Top Of Page [General Reports] Australia’s Defence Strategy in Facing Foreign Misinformation As published by ASPI, Australia’s defence strategy is being challenged by the growing importance of information environments in modern conflict. Adversaries increasingly use digital platforms, algorithmic amplification, and emotionally charged content to shape how crises are interpreted by the public and decision-makers. Examples such as Russian influence operations related to Ukraine and Chinese narrative-shaping efforts around Taiwan and COVID-19 show how information campaigns are used to create confusion and influence responses during moments of strategic tension. While Australia’s 2026 National Defence Strategy acknowledges the information domain, these issues are still treated as secondary to conventional military planning. This creates risks, including strategic disadvantages against actors that prioritise influence operations and slower responses to rapidly evolving information campaigns. Interference and online influence efforts could exploit social divisions and intensify uncertainty before any direct military confrontation occurs. The article called for Australia to strengthen national resilience through coordinated government action, media literacy initiatives, and stronger public communication systems, and suggested integrating information warfare scenarios into defence planning and building closer cooperation between government agencies, technology platforms, and media organizations. Source: The Strategist (Australian Strategic Policy Institute). Australia is not prepared for the war over perception. [online] By Daniel Baldino. Published 25 May 2026. Available at: https://www.aspistrategist.org.au/australia-is-not-prepared-for-the-war-over-perception/ Top Of Page Diphtheria Outbreak and Public Misinformation Challenges in Australia As stated in an article by ABC News, health authorities in Western Australia’s far north are responding to an ongoing diphtheria outbreak while addressing confusion and misinformation surrounding the disease and vaccination. The outbreak has contributed to rising case numbers across Western Australia, the Northern Territory, and Queensland, with at least one reported death. Health officials noted that diphtheria, which had not been detected in the Kimberley region for decades, has spread more rapidly due to socio-economic pressures and limited healthcare access in remote communities. A major challenge has been public uncertainty about diphtheria’s symptoms, transmission, and prevention. Some residents were unfamiliar with the disease, while others expressed scepticism about vaccines and Western medicine. As a result, authorities had to fight disinformation and misconceptions to contain the outbreak. Source: ABC News. Diphtheria vaccine push in WA's north as authorities battle ‘disease of the past’ disinformation. [online] By Giulia Bertoglio. Published 29 May 2026. Available at: https://www.abc.net.au/news/2026-05-29/diphtheria-vacine-push-wa-north-disinformation/106732378 (abc.net.au) Top Of Page Hidden Polarisation on Malaysian TikTok A study published by University Sains Islam Malaysia analysed 1,841 publicly accessible Malaysian TikTok videos (2023–2025) using a Digital Humanities computational workflow combining sentiment modelling, thematic clustering, and engagement metrics to map digital polarisation. The key finding is that 86.1% of captions are neutral in sentiment, yet polarising content still circulates through “moderated affect”, where identity boundary-making is embedded in everyday sociocultural discourse rather than overt hostility. Disinformation and hoax framings account for 8.09% of themes and mainly act as credibility-contest tools. In this context, calling something fake works less as a factual check and more as a way to delegitimise claims and mobilise audiences, in line with information disorder frameworks. The study did not identify organised or state-led campaigns, but it shows how TikTok’s platform design, algorithmic recommendations, hashtag clustering, and short-form formats like stitches, duets, and “receipt” videos allow decentralised users to produce boundary work at scale. Religious discourse shows the highest concentration of explicitly antagonistic signals, making religion a key site for loyalty signalling and out-group suspicion. Political content relies more on satire, insinuation, and indirect framing than confrontation, while racial and ethnic polarisation often emerges through recontextualised historical references used as proof-like narratives to reinforce communal grievance. The study showed a fragmented system where platform incentives reward subtle, identity-coded content rather than open hostility. This allows disinformation-adjacent narratives and credibility disputes to circulate widely while still appearing normal within platform norms. Source: Research Square. [Title unavailable from URL alone]. [online] Available at: https://www.researchsquare.com/article/rs-9268897/v1 Top Of Page Addressing Misinformation in the Public Health Field As published by Health Policy Watch, recent disease outbreaks, including hantavirus, Ebola, and COVID-19, have been accompanied by false claims about the causes of diseases, vaccines, and treatments. Speakers at the World Health Assembly noted that misinformation and disinformation have become increasingly visible in health-related discussions and are spreading rapidly through social media, AI tools, and online platforms. Examples mentioned in the article include false claims about vaccine safety, infertility, contraceptives, and public health guidance. Participants argued that these narratives affect how people understand health information, whether they seek medical care, and how they respond to public health recommendations. Several speakers linked the issue to declining trust in health authorities and governments, and highlighted cases in which misleading information influenced attitudes toward vaccination and other health measures in different countries. The discussion focused on the need to improve access to reliable health information, strengthen communication between health institutions and communities, and respond more quickly to false claims. Source: Health Policy Watch. How to Treat the Disinformation ‘Virus’ Undermining Health and Democracy. [online] By Kerry Cullinan. Published 28 May 2026. Available at: https://healthpolicy-watch.news/how-to-treat-the-disinformation-virus-undermining-health-and-democracy/ Top Of Page Investigation into the Cuban Influence Network in the United States An article by Fox News examined allegations that U.S. authorities are investigating a network of nonprofit organizations, activist groups, media platforms, and political organizations that coordinate activities supportive of the Cuban government. One example is the rapid response that followed the indictment of Cuban leader Raúl Castro, when several organizations and individuals quickly published messages criticizing the charges and expressing support for Cuba. Investigators are examining whether certain groups coordinated lobbying, messaging, fundraising, delegations, and political organizing efforts with Cuban government officials. The inquiry involves organizations connected to labor activism, socialist and solidarity movements, travel delegations, media platforms, and humanitarian aid campaigns. Additionally, the article discussed possible investigations under the Foreign Agents Registration Act (FARA) and U.S. sanctions regulations. Authorities are examining whether any organizations moved beyond independent advocacy into activities directed by or coordinated with the Cuban government, including fundraising efforts, aid shipments, and political campaigns. In response, Cuban officials deny any improper conduct and state that their diplomatic activities comply with international law and standard diplomatic practice. Source: Fox News. DOJ, Treasury investigate nonprofits and leaders allegedly coordinating with Cuba in influence campaign. [online] By Asra Q. Nomani. Published 23 May 2026. Available at: https://www.foxnews.com/politics/doj-treasury-investigate-nonprofits-leaders-allegedly-coordinating-cuba-influence-campaign Top Of Page The Sandygate Affair Raises Disputed Evidence and Public Trust in Cyprus As reported by MEDDMO, an influential media event named the “Sandygate affair” began with serious allegations of sexual abuse, corruption, and influence involving prominent figures in Cyprus. The claims were made public by journalist and parliamentary candidate Makarios Drousiotis and were largely based on messages, photographs, audio recordings, and other digital material allegedly provided by a source known as “Sandy”. As the case gained political attention during the 2026 election campaign, the focus gradually shifted from the allegations themselves to the reliability of the evidence used to support them. Several Cypriot media outlets conducted independent verification of the digital material and identified significant inconsistencies. Journalists traced some images to unrelated websites, linked a key audio recording to a previously published documentary, and raised questions about the authenticity of videos and translated messages. At the same time, investigators reportedly examined additional concerns involving disputed files, timelines, and digital records. These findings did not resolve whether the original allegations were true or false, but they increased scrutiny of the evidence and its authenticity. The case became a major topic in the election campaign and broader public debate, demonstrating the importance of journalistic fact-checking, as media organizations went beyond reporting claims and examined the supporting material themselves. Rather than providing clear answers, Sandygate exposed how difficult it can be to assess sensitive allegations when key evidence remains disputed or unauthenticated. Source: MEDDMO (Mediterranean Digital Media Observatory). “Sandygate”: How journalists’ investigations shook up the election campaign and public debate in Cyprus. [online] By Théophile Bloudanis. Published 25 May 2026. Available at: https://meddmo.eu/sandygate-how-journalists-investigations-shook-up-the-election-campaign-and-public-debate-in-cyprus/ Top Of Page [Appendix - Frameworks to Counter Disinformation] OpenAI’s Measures to Safeguard Elections Information and Transparency As published by OpenAI, as major elections approach in 2026, efforts are focused on helping people access accurate voting information and strengthen trust in election-related content. The measures include directing users to reliable sources for voter registration, voting locations, deadlines, and live election results, while continuing to improve the quality of information provided on election topics and breaking news. Another important priority is increasing transparency around AI-generated content. New tools such as digital watermarks, metadata standards, and public verification systems are being introduced to help people identify whether images have been created or modified using AI. These measures are intended to make online content more traceable and to support informed decision-making during election periods. In addition, strict safeguards are in place to prevent the misuse of AI tools for election interference or other deceptive activities. Ongoing monitoring also aims to ensure political neutrality in responses to election-related questions, while continued collaboration with public institutions and election authorities supports secure and resilient election processes. Source: OpenAI. Election Information and Safeguards in 2026. [online] Published 27 May 2026. Available at: https://openai.com/index/election-safeguards-2026/ Top Of Page Exposing Fake AI Content According to an article by The Conversation, the rapid growth of online images and videos has made disinformation more convincing and harder to detect. AI-generated content, including fake celebrity photos and realistic deepfake videos, can spread quickly and mislead large audiences before fact-checkers have time to verify it. As synthetic media becomes more advanced, traditional verification methods are becoming less effective, increasing the risk of false information shaping public opinion. The article gives three keys to fighting disinformation. First, people need to develop stronger media literacy skills and get familiar with examples of fake and distorted content. Then, it is important to inspect the article very closely and carefully examine visual details such as unnatural textures, distorted movements, inconsistent shadows, and unrealistic perspective. The third note is to look at the wide context: the source of the content in comparison with trusted reports, and whether credible evidence supports the claims. All these are used by fact-checkers to verify whether content is real or fake. However, these clues are not always reliable. Even older or “verified” accounts can spread false information, since platforms like Facebook and X allow users to pay for verification. This is why people should carefully question online content instead of trusting it immediately. Source: The Conversation. Three ways to avoid being fooled by AI slop. [online] By Silvia Montaña-Niño and T.J. Thomson. Published 26 May 2026. Available at: https://theconversation.com/three-ways-to-avoid-being-fooled-by-ai-slop-282974 Top Of Page YouTube’s New AI Content Labels YouTube announced it is introducing new updates to improve transparency around AI-generated content. Since 2024, the platform has required creators to label videos made with AI tools, and it is now making these disclosures more visible and easier for viewers to notice. For long-form videos, labels will appear directly below the video player, while for Shorts, they will appear as an overlay on the video itself. Less significant or unrealistic AI edits will continue to be disclosed in the expanded description. Starting in May 2026, YouTube will also begin using automatic detection systems to identify significant photorealistic AI-generated content. If creators fail to disclose AI use, YouTube may automatically apply a label. Creators can challenge incorrect labels through YouTube Studio, although disclosures will remain permanent for videos created with YouTube’s AI tools or those containing metadata that confirms full AI generation. YouTube clarified that AI disclosure labels will not affect a video’s recommendations or monetization, reflecting the platform’s goal of providing clear information to viewers rather than limiting AI-generated content. Source: YouTube. Improving AI Labels for Viewers and Creators. [online] Published 27 May 2026. Available at: https://blog.youtube/news-and-events/improving-ai-labels-viewers-creators/ Top Of Page RESIST Framework to Create Resilience to Disinformation As published by the Council of Europe, the RESIST framework was developed by the Council to help countries understand and strengthen their resilience to disinformation while respecting democratic principles, human rights, and freedom of expression. Rather than measuring countries through rankings, the framework provides a structured way to examine how societies are exposed to disinformation and how well institutions and communities are prepared to address it. The methodology is based on three complementary levels of analysis. The first examines structural conditions that may influence resilience to disinformation, such as education, media, information literacy, youth, and culture. The second assesses the legal frameworks, policies, coordination mechanisms, and governance arrangements that governments have in place. The third focuses on how these measures are experienced in practice by civil society organizations and practitioners. By comparing these three dimensions, the framework aims to identify gaps between policy design and real-world implementation. The results are intended to support evidence-based policy discussions, cooperation between governments and civil society, and the development of long-term approaches to strengthening democratic resilience against disinformation. Source: Council of Europe. Report on the Methodology to Assess Societal Vulnerabilities and Strengths to Disinformation (RESIST Methodology). [online] Published 2026. Available at: https://rm.coe.int/report-on-the-methodology-to-assess-societal-vulnerabilities-and-stren/48802b8213 Top Of Page Fighting Climate Disinformation An essay published by The Union of Concerned Scientists argued that periods of extreme weather and climate-related disasters depend on a strong “safety chain,” which connects scientific data, weather forecasting, trusted communication, public understanding, and effective preparation and response. According to the author, this chain is weakened when climate research is reduced, scientific expertise is lost, or misleading information about climate science and disaster risks circulates in public debate. Disinformation can disrupt public understanding and decision-making during disasters. It identifies several recurring patterns, including false explanations for disasters, misleading claims about responsibility, attacks on the credibility of public institutions, messages that downplay risks, and efforts to link disaster response to divisive political issues. These narratives can reduce trust in official information and affect how people respond to warnings and emergencies. Therefore, the article encouraged individuals to verify information before sharing it, rely on trusted sources for weather and emergency updates, and pay attention to misleading narratives that emerge during extreme weather events. Source: Union of Concerned Scientists (UCS). Your Anti-Disinformation Safety Chain for Danger Season. [online] By Kate Cell. Published 28 May 2026. Available at: https://blog.ucs.org/kate-cell/your-anti-disinformation-safety-chain-for-danger-season/ Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

Since the outbreak of the Iran War (Operation Epic Fury) on 28 February 2026, the conflict has emerged as a landmark case study in modern hybrid warfare, one defined not just by airstrikes and military force, but by the seamless integration of cyber operations and information warfare into a unified offensive strategy. Cyfluence Research Center (CRC) examines what analysts are calling "cyfluence" operations: the coordinated fusion of cyber capabilities with influence campaigns designed to shape perceptions, sow confusion, and degrade morale. Key incidents documented include the compromise of Iran's BadeSaba prayer app, which was hijacked on the first day of strikes to push surrender messages to millions of Iranian users, and the simultaneous kinetic strike and broadcast hijack of state television network IRIB, through which messages from Israeli PM Netanyahu and President Trump were beamed directly to Iranian audiences. Beyond these high-profile operations, the report details Iranian-linked disinformation efforts, including networks of sockpuppet accounts impersonating Chinese, Russian, and North Korean state media, alongside the prolific hack-and-leak activities of the Iran-aligned hacktivist group Handala, whose claimed targets ranged from Israeli universities to FBI Director Kash Patel's personal email. The report concludes that cyfluence is no longer a peripheral tactic, it has become the operational logic of modern warfare, where controlling how events are perceived may matter as much as controlling territory. Key Takeaways The current war in Iran and the wider Middle East (also known as Operation Epic Fury and Operation Roaring Lion) has demonstrated a remarkably close integration between varied forms of kinetic and hybrid warfare, including combined cyber-enabled influence (cyfluence) operations, employed in tandem to maximize strategic effects. As such, Hostile Influence Campaigns (HICs) and Coordinated Information Disorder (CID) increasingly function as Primary Offensive Efforts (POEs) alongside the use of military force. Russia and China – Iran’s most powerful allies – have played an important role during the conflict, providing continuous diplomatic backing, supplying tactical intelligence, and executing supportive offensive information operations, while exploiting newly-created cognitive attack surfaces. AI-assisted DISARM mapping is employed throughout this report to render cyfluence attack chains analytically tractable, building on methodologies for agentic AI operationalization of influence operation analysis frameworks. Author: The CRC Team [Download PDF Here]

Background A recent OCCRP investigation revealed leaked documents related to the Social Design Agency (SDA), a Russian firm and long-time hostile influence campaigns (HICs) contractor executing “cognitive strikes” against Western countries. The investigation focused in part on a September 2025 Islamophobic incident in which several mosques and cultural centers in and around Paris reported pig heads marked with the word “Macron” left outside their entrances. These attacks appeared to extend beyond the physical act itself. Following online amplification, it drew extensive media attention and fed existing societal tensions and political polarization. The newly leaked documents demonstrate how hybrid threats, such as multi-dimensional influence efforts, increasingly integrate physical and digital aspects into a single operational structure. Rather than functioning only through online platforms, hostile influence campaigns (HICs) instigate and exploit real-world events to continuously destabilize adversaries. Revisiting The Russian Cognitive Warfare Playbook The reported operations align closely with established patterns of Russian hostile influence activity. One of the most prominent remains the DSA-linked Doppelgänger campaign coordinated information operations with the orchestration of antisemitic incidents in Paris to amplify social polarization. The uncovered modus operandi reflects the persistent rationale behind Russian HICs: the exploitation of existing societal fault lines surrounding immigration, nationalism, religion, identity politics and institutional distrust. Instead of creating an entirely new narrative, Russian foreign information manipulation and interference (FIMI) operations are designed to intensify pre-existing tensions within targeted democratic and western societies. Importantly, the convergence between cognitive and physical effects is increasingly visible within urban environments. Hostile FIMI activities, including the instigation and exploitation of racial, religious or politically-charged incidents, mostly occur within urban environments. They are aimed against high-value managed contested spaces (MCSs), such as major cities, demonstrating how local communities and municipal authorities are in fact the front lines of hybrid geopolitical conflict, a dynamic that is central to the CRC’s Urban Cyfluence Framework initiative. The leaked material also provides a valuable behind-the-scenes view, in the form of internal SDA chats. These shed new light on the organizational structure behind the firm’s operations, particularly through the role of Sofia Zakharova, a Russian senior official who appeared under the name of “Kristin Kiler”. The exposed conversations suggest that Zakharova operated as a coordinating figure between the SDA and senior administration officials, overseeing operational updates, funding discussions, and broader project management across multiple campaigns. Zakharova was previously sanctioned by several Western countries due to her involvement in previous Russian influence operations. Figure 1 - EU sanctions designation of Sofia Avraamovna Zakharova, issued in December 2024, citing her continued involvement in hostile Russian information manipulation and interference activities, including the Doppelganger campaign. 1, 2 The internal documents further suggest that these activities were not isolated operations, but part of wider and ongoing destabilization efforts. Plans for 2026 included projects focused on monitoring Western opinion leaders, creating media platforms, and expanding AI-assisted informational capabilities across several European information environments. The leaked documents thus highlight the emphasis on operational continuity, connecting past, present and to-be-executed narrative attacks. While the methods continue to adapt across different platforms and environments, the long-term strategic objective remains consistent. Multi-Dimensional Operations One of the most important aspects of the reported activities was the operational fusion between the physical, digital and cognitive layers. The pig-head attacks were not just physical provocations, but were meant to drive online discourse, attract media attention, and trigger political reactions. This operational hybridity – recently defined by the Cyfluence Security Paradigm – reflects an increasingly common model for influence operations: A provocative physical act generates emotional reactions. Visual content from the incident is being circulated across online platforms. Media coverage and coordinated inauthentic activity amplify and reframe narratives. Polarized public and political discourse affect societal cohesion. The HICs described in the leaked documents demonstrate how hostile influence efforts increasingly function as multi-dimensional threats. These threats are not limited to fictitious narratives or synthetic propaganda proliferated online. Instead, physical acts of provocation and online amplification are used as core components that elevate the sophistication of modern hybrid threats. Implications for Cognitive Security and Defensive Cyfluence Although this operational structure complicates influence defense efforts, the exposure of ongoing Russian FIMI activities targeting Western communities and MCSs through the opportunistic exploitation and orchestration of hate crimes demonstrates the value of proactive defensive cyfluence operations. Much like the exposure of Russian proxy interference efforts surrounding the Moldovan elections – where a timely hack-and-leak operation revealed the operational architecture of Ilan Shor’s FIMI apparatus – this case, alongside previous SDA leaks (which were likely cyber-enabled rather than HUMINT-derived), underscores the strategic importance of publicly exposing adversarial methods, infrastructure, and objectives. Regardless of the information’s source, these crucial disclosures help in neutralizing future narrative attacks, while supporting the cognitive resilience of targeted communities against hybrid threats. [References:] https://data.europa.eu/apps/eusanctionstracker/subjects/171196 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202403188#:~:text=3.-,Sofia%20Avraamovna%20ZAKHAROVA,-(Russian%3A%20%D0%A1%D0%BE%D1%84%D0%B8%D1%8F%20%D0%90%D0%B2%D1%80%D0%B0%D0%B0%D0%BC%D0%BE%D0%B2%D0%BD%D0%B0

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 18th to the 24th of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia The Kremlin’s Expanding Digital Control Russian Propaganda Exploits Hantavirus Fears in France Condemnation of Russian Allegations Against the Baltic States Russian Hybrid Disinformation Operations in France Pro-Kremlin AI Disinformation Targets Armenia’s Elections The War in Ukraine Kremlin Falsely Claims Russia Has the Right to Attack NATO Ukraine Reveals Russian Disinformation Campaign Against Ukraine China China Shapes Narratives Through Subtle Media Influence in Albania Chinese Influence Operations Exploit G7 Local Vulnerabilities and Elite Networks [AI Related Articles] AI-Influenced Politics and Democracy First Arrests Under the Take It Down Act Over Deepfake Pornography AI-Generated Influence Operations on YouTube [General Reports] Suspected Inauthentic Facebook Activity in Malaysian Media Discussions Concerns Over U.S. Election Security Ahead of the 2026 Midterms False Claims Following the San Diego Mosque Shooting Disinformation as a Tool of Repression in Indonesia [Appendix - Frameworks to Counter Disinformation] Countering Online Misinformation in Science Education Detecting AI-Generated False Contents RFI Launches Armenian-Language Service to Strengthen Verified Reporting [CRC Glossary] [ Report Highlights] According to a report by EU vs. Disinfo, Russia’s effort to control its digital environment has evolved from simply restricting foreign platforms to building a state-managed communication ecosystem. According to a Le Monde report, leaked documents reveal a coordinated Russian disinformation campaign in France that combines traditional online propaganda with “hybrid” operations in public spaces to provoke outrage and social division. According to an article by DisinfoWatch, a false narrative promoted by Glenn Diesen claimed that Russia has the right to attack NATO following a large Ukrainian drone strike on targets near Moscow. The MIGS report argues that Chinese state-linked influence networks systematically exploit political, economic, and local governance vulnerabilities across G7 countries through elite cultivation, economic pressure, and coordinated interference operations designed to shape policy and public discourse. A study by three Malaysian researchers examined Facebook discussions on Malaysian media pages during the diplomatic tensions between China and Japan. NewsGuard’s Reality Check examined baseless claims spread on social media following the deadly shooting at The Islamic Center of San Diego, where two teenagers killed three people before taking their own lives. According to a publication by The Conversation, science teachers can no longer separate science from politics and social issues, especially as misinformation and conspiracy-driven content spread online. Radio France Internationale announced it has launched its eighteenth language service with the opening of an Armenian-language newsroom in Paris. [ Report Summary] According to a report by EU vs. Disinfo, Russia’s effort to control its digital environment has evolved from simply restricting foreign platforms to building a state-managed communication ecosystem. As published by NewsGuard, Pro-Kremlin propagandists launched a campaign falsely claiming that hantavirus was spreading rapidly across France and overwhelming the country’s healthcare system. In a recent statement, the Presidents of the Baltic States, together with many others, have condemned recent airspace violations from Russia and Belarus, as well as attempts to spread false narratives and undermine regional stability. According to a Le Monde report, leaked documents reveal a coordinated Russian disinformation campaign in France that combines traditional online propaganda with “hybrid” operations in public spaces to provoke outrage and social division. A Euronews article reports that a pro-Kremlin disinformation campaign in Armenia is using AI-generated content and coordinated online amplification to spread fear-based narratives and undermine pro-Western political forces ahead of the elections. According to an article by DisinfoWatch, a false narrative promoted by Glenn Diesen claimed that Russia has the right to attack NATO following a large Ukrainian drone strike on targets near Moscow. Ukraine’s Foreign Intelligence Service reported that it has obtained Russian documents revealing plans to destabilize Ukraine and weaken international support through a coordinated disinformation campaign. The MIGS report argues that Chinese state-linked influence networks systematically exploit political, economic, and local governance vulnerabilities across G7 countries through elite cultivation, economic pressure, and coordinated interference operations designed to shape policy and public discourse. A RSF article argues that Chinese influence operations in Albania rely on subtle narrative shaping, media partnerships, and exploitation of weak media structures to normalize pro-Beijing messaging rather than using overt disinformation alone. An article in The Hill suggested that digital technology is transforming political debate faster than democratic institutions can adapt. According to a report by CyberNews, the first arrests under the Take It Down Act have been made, involving two men accused of creating and sharing AI-generated explicit images of around 140 women without their consent. An investigation by Alliance4Europe and Doublethink Lab examined a coordinated network of at least 29 YouTube accounts that published more than 7,300 AI-generated geopolitical videos between March and December 2025. A study by three Malaysian researchers examined Facebook discussions on Malaysian media pages during the diplomatic tensions between China and Japan. According to a report by The Conversation, concerns are growing over whether key federal election security programs are fully operational. NewsGuard’s Reality Check examined baseless claims spread on social media following the deadly shooting at The Islamic Center of San Diego, where two teenagers killed three people before taking their own lives. An Amnesty International report discovered how coordinated disinformation campaigns in Indonesia have been used to silence critics, intimidate civil society, and justify violence against human rights defenders under President Prabowo Subianto. According to a publication by The Conversation, science teachers can no longer separate science from politics and social issues, especially as misinformation and conspiracy-driven content spread online. An investigation published by GPTZero introduced its Hallucination Check tool, designed to detect “vibe citing”: fabricated or inaccurate references created through large language model hallucinations. Radio France Internationale announced it has launched its eighteenth language service with the opening of an Armenian-language newsroom in Paris. [State Actors] Russia The Kremlin’s Expanding Digital Control According to a report by EU vs. Disinfo, Russia’s effort to control its digital environment has evolved from simply restricting foreign platforms to building a state-managed communication ecosystem. Earlier attempts to block apps, such as Telegram, failed. By 2026, however, the Kremlin shifted strategy by promoting the state-backed messenger MAX while disrupting access to platforms such as WhatsApp and Telegram. This created conditions where citizens and institutions increasingly depend on government-approved channels. MAX is presented as a secure and convenient communication platform, but its structure reveals broader ambitions. The app is deeply connected to Russian state systems, including digital identity and government service databases. Through verified accounts and the collection of behavioral and technical data, the platform merges communication, identity verification, and state oversight into a single infrastructure. While these features are framed as modernization, they also increase the state’s ability to monitor information flows and shape public narratives. This development is significant for disinformation because control over communication infrastructure allows the Kremlin to influence not only what information is censored, but also how information is distributed and consumed. Rather than relying solely on overt propaganda or bans, the state is creating an environment in which official platforms become the default channels for communication and information exchange. An article by DFR Lab highlighted concerns about how MAX could affect users both inside and outside Russia. Sources: EUvsDisinfo. The Digital Iron Curtain 2.0: How the MAX Messenger is Reshaping Russia’s Communication Space. [online] Published 25 May 2026. Available at: https://euvsdisinfo.eu/the-digital-iron-curtain-2-0-how-the-max-messenger-is-reshaping-russias-communication-space/ (stopfake.org) Digital Forensic Research Lab (DFRLab). The domestic Russian ‘super-app’ that could create cross-border security risks. [online] Published 21 May 2026. Available at: https://dfrlab.org/2026/05/21/the-domestic-russian-super-app-that-could-create-cross-border-security-risks/ (dfrlab.org) Top Of Page Russian Propaganda Exploits Hantavirus Fears in France As published by NewsGuard, Pro-Kremlin propagandists launched a campaign falsely claiming that hantavirus was spreading rapidly across France and overwhelming the country’s healthcare system. The operation used fabricated articles and videos designed to imitate trusted media outlets such as CNN, BBC, France 24, and The Guardian. The campaign appears aimed at damaging the reputation of French President Emmanuel Macron, a major supporter of Ukraine, while also spreading fear about a deadly virus outbreak. The false reports, linked to the Russian “Matryoshka” influence campaign, claimed that hundreds of people in France had been infected, hospitals were collapsing under pressure, and the country lacked sufficient testing because of sanctions against Russia. These fabricated stories circulated widely on X. French authorities confirmed only one hantavirus case in the country as of the 20th of May. The media organizations whose names and logos were misused publicly stated that the reports were entirely fake. Source: NewsGuard Reality Check. “Hantavirus Is Overrunning France” and Other False Claims Spread Online Amid Viral Outbreak. [online] Published May 2026. Available at: https://www.newsguardrealitycheck.com/p/hantavirus-is-overrunning-france (rtl.fr) Top Of Page Condemnation of Russian Allegations Against the Baltic States In a recent statement, the Presidents of Estonia, Latvia, and Lithuania have condemned recent airspace violations involving unmanned aerial systems entering Baltic airspace from Russia and Belarus, and strongly rejected Russia’s ongoing disinformation campaign, including false accusations that the Baltic States have allowed their territories to be used for drone attacks against Russia. They also condemned threats against Latvia at a recent UN Security Council meeting, describing these claims as deliberate attempts to spread false narratives and undermine regional stability. According to the statement, Russia is using disinformation to divert international attention from its unlawful war against Ukraine and to weaken support for Ukraine’s right to self-defence under international law. The Baltic States reaffirmed their full solidarity with Ukraine and called on Russia to end its aggression, while emphasizing that countering disinformation remains essential to preserving NATO unity and regional security. In its publication, the European Parliament’s Conference of Presidents expressed full solidarity with Estonia, Latvia, and Lithuania and called on EU institutions and NATO partners to strengthen airspace surveillance and strategic communication efforts to better respond to disinformation. Many other countries rejected Russia’s campaign, such as Canada (in an official post) and Finland. Sources: President of the Republic of Estonia. Joint Statement of the President of the Republic of Estonia, the President of the Republic of Latvia and the President of the Republic of Lithuania on the situation on NATO’s Eastern Flank. [online] Published 21 May 2026. Available at: https://president.ee/en/official-duties/statements/58511-joint-statement-president-republic-estonia-president-republic-latvia-and-president-republic (president.ee) European External Action Service (EEAS). Russia’s unfounded allegations: EP leaders express full solidarity with the Baltic states. [online] Published 22 May 2026. Available at: https://www.eeas.europa.eu/delegations/ukraine/russia%E2%80%99s-unfounded-allegations-ep-leaders-express-full-solidarity-baltic-states_en (eeas.europa.eu) Global Affairs Canada. Canada rejects Russia’s destabilizing disinformation campaign targeting the Baltic states. [online] Facebook post published May 2026. Available at: https://www.facebook.com/CanadaFP/posts/canada-rejects-russias-destabilizing-disinformation-campaign-targeting-the-balti/1429803895852584/ Top Of Page Russian Hybrid Disinformation Operations in France According to a Le Monde report, leaked documents reveal a coordinated Russian disinformation campaign in France that combines traditional online propaganda with “hybrid” operations in public spaces to provoke outrage and social division. One documented case involved pig heads marked with the name “Macron” being placed outside mosques in Paris in September 2025, an act designed to inflame tensions and generate widespread media attention. Investigators later linked the operation to individuals acting on behalf of Russian intelligence. The files showed that the planned operations included defacing synagogues, staging anti-immigrant spectacles, and creating false-flag incidents. The leak highlights a shift in Russian disinformation tactics toward real-world provocations that generate immediate media coverage and public reaction. According to the documents, these physical acts proved more effective at spreading confusion and amplifying false narratives than traditional digital propaganda. Source: Le Monde. Pig heads, green synagogues and inflatable sex dolls: Inside the Russian disinformation operations targeting France. [online] Published 24 May 2026. Available at: https://www.lemonde.fr/en/pixels/article/2026/05/24/pig-heads-green-synagogues-and-inflatable-sex-dolls-inside-the-russian-disinformation-operations-targeting-france_6753777_13.html Top Of Page Pro-Kremlin AI Disinformation Targets Armenia’s Elections A Euronews article reports that Armenia is facing a large-scale pro-Kremlin disinformation campaign ahead of its parliamentary elections, involving coordinated efforts to manipulate public opinion and undermine pro-Western political forces. According to researchers cited in the report, the operation is linked to the “Matryoshka” network, a pro-Kremlin influence structure that uses artificial intelligence to produce fabricated videos and deceptive online content at scale. The campaign promotes narratives portraying Armenia’s closer alignment with Europe as a threat to national security, warning that support for Prime Minister Nikol Pashinyan and pro-European actors could provoke conflict with Russia. The operation reportedly seeks to exploit fears of instability and geopolitical insecurity to influence voter perceptions and electoral behavior. The article further highlights that the campaign relies on AI-generated media, coordinated amplification across digital platforms, and emotionally charged geopolitical messaging designed to polarize Armenian society and weaken trust in democratic processes. Researchers describe the tactics as consistent with broader Kremlin-linked influence operations previously observed in other countries, particularly Moldova. The report frames the campaign as a deliberate effort to shape Armenia’s political trajectory by leveraging disinformation, fear-based narratives, and digitally amplified manipulation ahead of a critical election period. Source: Euronews. Pro-Kremlin actors launch large-scale disinformation campaign targeting Armenia’s elections. [online] Published 20 May 2026. Available at: https://www.euronews.com/my-europe/2026/05/20/pro-kremlin-actors-launch-large-scale-disinformation-campaign-targeting-armenias-elections (euronews.com) Top Of Page The War in Ukraine Kremlin Falsely Claims Russia Has the Right to Attack NATO According to an article by DisinfoWatch, a false narrative promoted by Glenn Diesen claimed that Russia has the right to attack NATO following a large Ukrainian drone strike on targets near Moscow. Diesen suggested that because Ukraine attacked Russia, Moscow now has “every right” to retaliate against NATO. This argument portrays NATO as the true aggressor in the war and falsely presents Ukraine as merely a proxy controlled by the West. Although Russian authorities reported that more than 1,000 drones were intercepted during the 17th of May attack, there is no independent evidence that NATO was involved in the operation. Ukraine’s actions fall under its internationally recognized right to self-defense, which NATO and international law, including Article 51 of the UN Charter, support. The claim also ignores evidence that Russia itself has endangered NATO territory. Latvian authorities reported that Russian electronic warfare redirected Ukrainian drones into Latvia, causing them to crash on Latvian soil. Source: DisinfoWatch. Russia Has No Right to Attack NATO or Ukraine. [online] Available at: https://disinfowatch.org/disinfo/russia-has-no-right-to-attack-nato-or-ukraine/ Top Of Page Ukraine Reveals Russian Disinformation Campaign Against Ukraine Ukraine’s Foreign Intelligence Service reported that it has obtained Russian documents revealing plans to destabilize Ukraine and weaken international support through a coordinated disinformation campaign. According to the materials, the effort is driven by Russia’s failed spring offensive and growing economic difficulties. The campaign is reportedly being directed by the Russian presidential administration and focuses on undermining trust in Ukraine’s mobilization efforts, military leadership, and political leadership, including attempts to damage the reputation of President Zelenskyy and his team. The strategy includes the creation and distribution of fake documents falsely presented as official Ukrainian government materials, the amplification of politically sensitive narratives, and efforts to keep selected media controversies active in the public sphere. The plan also seeks to involve former Ukrainian officials, political figures, and experts to give false narratives greater credibility. The documents further indicate that Russia intends to spread these narratives through a network of proxy media outlets targeting Western audiences. More than 15 such outlets are expected to participate in amplifying false or misleading claims. Source: Служба зовнішньої розвідки України (Foreign Intelligence Service of Ukraine). Telegram post no. 1702. [online] Telegram. Available at: https://t.me/FISUkraine/1702 (linkbaza.com) Top Of Page China China Shapes Narratives Through Subtle Media Influence in Albania A Reporters Without Borders (RSF) article argues that Chinese influence operations in Albania rely less on overt disinformation and more on sustained propaganda, narrative management, and structural penetration of the local media ecosystem. According to Albanian researcher Blerjana Bino, the tactics employed by Chinese actors focus on embedding favorable narratives into coverage of issues relevant to Albanian audiences, including economic development, technology, and geopolitics, rather than spreading easily identifiable falsehoods. Chinese state-linked media, particularly China Radio International, are described as consistently promoting positive portrayals of China while subtly advancing Beijing’s political messaging. The article emphasizes that these influence efforts exploit vulnerabilities within Albania’s media environment, including concentrated ownership, weak editorial independence, and financial fragility. The article further highlights that the effectiveness of these campaigns stems from the interaction between foreign influence operations and domestic structural weaknesses. Rather than relying primarily on fabricated content, the campaigns seek to normalize pro-China narratives over time through strategic communication, media partnerships, and indirect amplification mechanisms. The report also notes broader concerns regarding foreign information manipulation in the Western Balkans, where external actors exploit weak information ecosystems to shape public discourse and influence political perceptions. Overall, the article presents Albania as a case study in how modern influence campaigns increasingly operate through subtle narrative integration and long-term informational influence rather than through traditional high-visibility disinformation campaigns. Source: Reporters Without Borders (RSF). “When it comes to China, we’re not dealing with classic disinformation campaigns”: How Albania’s information space became vulnerable to Chinese influence. [online] Available at: https://rsf.org/en/when-it-comes-china-we-re-not-dealing-classic-disinformation-campaigns-how-albania-s-information Top Of Page Chinese Influence Operations Exploit G7 Local Vulnerabilities and Elite Networks A report by the Montreal Institute for Global Security (MIGS) characterizes Chinese interference across all G7 countries as “systemic” and deeply embedded within political, economic, and local governance structures. According to the report, the Chinese Communist Party’s influence apparatus, particularly the United Front Work Department (UFWD) and the Ministry of State Security (MSS), conducts coordinated influence and interference operations designed to bypass national-level safeguards by targeting subnational actors such as municipalities, provinces, and regional governments. The report argues that these local institutions are especially vulnerable due to lower awareness, limited institutional protections, and economic incentives tied to foreign partnerships. Tactics attributed to Chinese influence efforts include political co-option, elite cultivation, economic pressure, indirect intimidation, and narrative shaping through diplomatic, academic, and commercial relationships. The report highlights multiple cases across G7 states involving alleged electoral interference, political influence operations, espionage, and strategic economic engagement. Examples cited include electoral interference in Canada, political corruption concerns in the United States, influence over political figures in France and the United Kingdom, promotion of China’s Belt and Road Initiative in Italy, and institutional vulnerabilities in Japan. The study also describes subtler coercive methods, including implied economic retaliation linked to political decisions and the cultivation of influential elites through access, status, and ideological alignment rather than direct financial inducement. MIGS recommends establishing a permanent G7 task force to coordinate intelligence sharing, monitor proxy networks and United Front-linked organizations, and strengthen cooperation between national and local authorities to counter foreign interference and political warfare more systematically. Source: Intelligence Online. Chinese interference in G7 countries ‘systemic’, report warns. [online] Published 21 May 2026. Available at: https://www.intelligenceonline.com/asia-pacific/2026/05/21/chinese-interference-in-g7-countries--systemic--report-warns,110769520-art Top Of Page [AI Related Articles] AI-Influenced Politics and Democracy Former U.S. Senator Ben Sasse argued that Congress is failing to address major issues related to the rapid pace of technological change. An article in The Hill suggested that digital technology is transforming political debate faster than democratic institutions can adapt and warned that traditional political divisions are becoming less important than a deeper question about whether democratic norms and a shared understanding of reality can still be maintained. The article pointed to growing concerns over AI-generated political content, including deepfake videos, fabricated images, and synthetic audio designed to influence voters. One example involved manipulated content targeting congressional candidate Stefany Shaheen in New Hampshire. Modern campaign tools now allow political actors to rapidly create and distribute highly targeted messages across digital platforms, increasing the speed and scale at which misleading or fabricated material can spread. While acknowledging that new campaign technologies are not inherently harmful, AI does make fabrication more convincing and easier to distribute. If political campaigns increasingly rely on synthetic media, public trust in elections and political communication could weaken. Democracy depends on a shared understanding of reality and on maintaining transparency and clear boundaries in political communication. Source: The Hill. Technology accelerates distortion in politics. [online] Available at: https://thehill.com/opinion/technology/5883845-technology-accelerates-distortion-politics/ Top Of Page First Arrests Under the Take It Down Act Over Deepfake Pornography According to a report by CyberNews, the first arrests under the Take It Down Act have been made, involving two men accused of creating and sharing AI-generated explicit images of around 140 women without their consent. The manipulated content included both celebrities and private individuals and gained millions of views online. Authorities described the case as a serious form of digital abuse. Recent technological advances have made it much easier to generate realistic deepfake pornography, allowing users with little technical skill to create explicit fake images and videos. AI tools such as Grok reportedly allow users to generate manipulated images of real people before restrictions were introduced. Additionally, there is a real-world impact on victims, including psychological distress and reputational harm, even when the images are entirely fake. The new law requires platforms to remove reported non-consensual intimate content within 48 hours and holds both creators and platforms accountable. While arrests are an important legal step, stronger action is still needed as AI-generated abuse becomes more widespread. Sources: Cybernews. US makes first two arrests after men caught spreading viral deepfake pornography. [online] Published 22 May 2026. Available at: https://cybernews.com/ai-news/first-men-arrested-deepfake-porn/ (cybernews.com) Top Of Page AI-Generated Influence Operations on YouTube An investigation by Alliance4Europe and Doublethink Lab examined a coordinated network of at least 29 YouTube accounts that published more than 7,300 AI-generated geopolitical videos between March and December 2025. The operation relied on automated production tools, including the InVideo platform, AI-generated narration, synthetic thumbnails, stock footage, and templated formats, allowing channels to publish content at a very high frequency. The investigation identified two closely related account clusters targeting different audiences while promoting recurring geopolitical narratives. Some videos included false claims, such as reports of naval clashes between the Philippines and Malaysia that were later denied by both navies. The content was also amplified beyond YouTube through Facebook and external blogs, extending its reach across platforms. Additionally, the paper showed clear signs of coordinated and automated behaviour, although no direct link to a specific state actor has been established. This type of AI-enabled content laundering presents a systemic challenge for online platforms because it can manipulate recommendation systems and evade traditional moderation methods by reproducing similar content with small variations. Removing individual accounts is not sufficient, and broader platform-level measures are recommended, such as detecting semantically similar content and coordinated posting patterns. Sources: Alliance4Europe. The Infinite Slop Machine. [online] Published May 2026. Available at: https://alliance4europe.eu/wp-content/uploads/2026/05/The-Infinite-Slop-Machine.pdf Top Of Page [General Reports] Suspected Inauthentic Facebook Activity in Malaysian Media Discussions A study by three Malaysian researchers examined Facebook discussions on Malaysian media pages during the diplomatic tensions between China and Japan following remarks by Japanese Prime Minister Sanae Takaichi about Taiwan. Focusing on comments posted between November and December 2025, the researchers identified at least 30 accounts showing signs of potentially inauthentic behaviour across the Facebook pages of Oriental Daily and The Star. These accounts appeared during periods of intense discussion about Japan–China relations, and many later became inactive or disappeared, making further verification difficult. The study identified several recurring characteristics among the accounts, including recent creation dates, limited personal posting history, unusual profile details, and the use of stock, AI-generated, or celebrity profile images. Some accounts used similar Malaysian-Chinese slang styles in usernames and showed high-frequency engagement in politically sensitive discussions. Repetitive anti-Japanese narratives were observed across multiple posts, although they did not establish proof of coordinated behaviour. The report emphasized patterns rather than firm conclusions. Many of the accounts later became inactive or disappeared, which limited verification but added to researchers’ concerns about unusual account behavior. However, noting that the findings do not provide conclusive evidence of organized activity. Source: Doublethink Lab. Tracking suspicious Facebook accounts after Takaichi’s Taiwan remarks. [online] Published on Medium. Available at: https://medium.com/doublethinklab/tracking-suspicious-facebook-accounts-after-takaichis-taiwan-remarks-c1265553cded Top Of Page Concerns Over U.S. Election Security Ahead of the 2026 Midterms According to a report by The Conversation, as the 2026 U.S. midterm elections approach, concerns are growing about whether key federal election security programs are fully operational. The Election Security Group, a joint effort led by the National Security Agency and U.S. Cyber Command, had not yet been publicly activated as of mid-May 2026. At the same time, the Trump administration’s 2025 decision to defund the Elections Infrastructure Information Sharing and Analysis Center reduced coordination and threat-sharing support for local election officials. The report reviewed how concerns about foreign election interference grew after Russian operations during the 2016 election, including social media campaigns linked to the Internet Research Agency and cyberattacks targeting political organizations and state election systems. In response, the U.S. government created several election security initiatives, including the Election Security Group, which later expanded its focus beyond Russia to include threats from countries such as China, Iran, and North Korea. These programs aim to detect cyber threats, share intelligence, and respond quickly to false claims or online influence operations targeting elections. The current election cycle may face additional risks from AI-generated content, cyberattacks, and reduced coordination between federal agencies and local officials. Without fully functioning election security programs, state and local authorities may have fewer resources to respond to emerging threats during the 2026 elections. Source: The Conversation. For the first time in a decade, the next election could be less secure than the one preceding it. [online] Published 20 May 2026. Available at: https://theconversation.com/for-the-first-time-in-a-decade-the-next-election-could-be-less-secure-than-the-one-preceding-it-282107 (ctpost.com) Top Of Page False Claims Following the San Diego Mosque Shooting NewsGuard’s Reality Check examined baseless claims spread on social media following the deadly shooting at The Islamic Center of San Diego, where two teenagers killed three people before taking their own lives. Shortly after the attack, several anti-Islam commentators, including Laura Loomer, falsely claimed the shooting was a “false flag” staged to generate sympathy for Muslim Americans. These claims were widely shared online despite no evidence being presented to support them. However. authorities identified the suspects as two teenagers with no reported ties to Islam. Available evidence, including a manifesto reviewed by investigators and social media activity linked to the suspects, points instead to possible white supremacist motives. It was noted that similar unfounded theories have followed other high-profile shootings, illustrating how misinformation can spread rapidly and shape public discussion even when official investigations contradict them. Source: NewsGuard Reality Check. “San Diego mosque shooting” another false narrative spreads online. [online] Available at: https://www.newsguardrealitycheck.com/p/san-diego-mosque-shooting-another Top Of Page Disinformation as a Tool of Repression in Indonesia An Amnesty International report discovered how coordinated disinformation campaigns in Indonesia have been used to silence critics, intimidate civil society, and justify violence against human rights defenders under President Prabowo Subianto. A central case is the acid attack on human rights defender Andrie Yunus, which was preceded by sustained online disinformation portraying him as a “foreign agent.” These false narratives were spread through coordinated social media campaigns involving accounts linked to military and state-aligned actors, aiming to discredit his activism and undermine public trust in civil society organizations. A broader pattern was identified, in which “foreign agent” accusations are deliberately used as a disinformation strategy to frame dissent, protests, and independent journalism as externally orchestrated threats to national stability. Amnesty found evidence of deceptive coordination across social media platforms, with synchronized posting of identical false content designed to mislead audiences, delegitimize critics, and create an environment where intimidation and violence become easier to justify. According to the findings, this disinformation has contributed to Indonesia’s growing authoritarian trend by suppressing civic space and discouraging public criticism. The report also criticized major platforms such as Meta, TikTok, YouTube, and X for failing to effectively limit the spread of harmful false narratives, allowing coordinated disinformation to go viral and amplify threats to human rights and democratic freedoms. Source: Amnesty International. “Building Up Imaginary Enemies”: Misinformation, Disinformation and ‘Foreign Agent’ Allegations in President Prabowo’s Indonesia. [online] Published 19 May 2026. Available at: https://www.amnesty.org.au/wp-content/uploads/2026/05/Amnesty-Building-Up-Imaginary-Enemies.pdf (amnesty.org) Top Of Page [Appendix - Frameworks to Counter Disinformation] Countering Online Misinformation in Science Education According to a publication by The Conversation, science teachers can no longer separate science from politics and social issues, especially as misinformation and conspiracy-driven content spread online. Topics such as climate change, vaccines, and artificial intelligence are increasingly debated in classrooms, influenced by social media and broader political tensions. Avoiding these discussions may leave students less prepared to evaluate conflicting claims and understand how scientific knowledge is produced. The authors highlighted the importance of teaching the history of science to help students understand that science has always been shaped by social, political, and cultural factors. Examples such as eugenics, the exclusion of women from scientific recognition, and the treatment of Indigenous knowledge systems show how science can be connected to power and inequality. Additionally, some actors intentionally spread distrust and confusion around science, making it harder for the public to distinguish reliable research from misleading claims. Therefore, examining these historical contexts can help students better understand why some communities may distrust scientific institutions today. Teachers play an important role in helping students critically evaluate information, recognize the social dimensions of science, and participate in democratic discussions. Source: The Conversation. How teaching the history of science can help equip students to face polarized times. [online] Published 20 May 2026. Available at: https://theconversation.com/how-teaching-the-history-of-science-can-help-equip-students-to-face-polarized-times-280332 (educationnewscanada.com) Top Of Page Detecting AI-Generated False Contents An investigation published by GPTZero introduced its Hallucination Check tool, designed to detect “vibe citing”: fabricated or inaccurate references created through large language model hallucinations. GPTZero has developed an automated system to scan public reports from major institutions, arguing that this problem has become widespread across research, consulting, and academic publishing. The company stated that the findings presented are part of a broader ongoing investigation, with additional cases expected to be published to reveal the scale of the issue. As one of its findings, the article examined a 2025 cybersecurity report by Ernst & Young Canada, where Hallucination Check allegedly detected multiple fabricated citations, contradictory statistics, and signs of AI-generated content. The analysis found several examples of contradictory data and fabricated sources. In one case, a false citation appeared to have been copied from a low-quality fintech blog and then presented as evidence in a major consulting report. The article warned that false citations can have wider consequences beyond a single report. Once published online, inaccurate claims may be repeated in media coverage, cited in future research, and incorporated into AI search tools, creating a cycle of information contamination. This phenomenon weakens public trust in research and highlights the growing need for stronger verification processes to prevent AI-generated disinformation from entering professional and academic knowledge systems. Source: GPTZero. Investigation: Hallucinations in Ernst & Young Report on Loyalty Fraud. [online] Published 14 May 2026. Available at: https://gptzero.me/investigations/ey (gptzero.me) Top Of Page RFI Launches Armenian-Language Service to Strengthen Verified Reporting Radio France Internationale (RFI) announced it has launched its eighteenth language service with the opening of an Armenian-language newsroom in Paris. The new digital-only service, staffed by eight journalists, will produce content in Eastern Armenian and focus on reaching younger audiences through social media platforms such as Instagram, Facebook, and TikTok. Its main goal is to provide news coverage through innovative formats while verifying information and reporting directly from Armenia. The launch comes at a significant time as Armenia prepares for the upcoming legislative elections. According to the newsroom’s editors, the elections are already being targeted by false and misleading narratives linked to regional political tensions. In response, fact-checking will play a central role in the service’s work, with the team aiming to provide reliable reporting and help audiences better identify false information in a fragile media environment. By producing exclusively in Eastern Armenian, RFI aims to speak directly to citizens of the Republic of Armenia while also engaging wider Armenian-speaking audiences. Source: Radio France Internationale (RFI). RFI launches Armenian-language desk targeting youth and disinformation. [online] Published 25 May 2026. Available at: https://www.rfi.fr/en/international/20260525-rfi-launches-armenian-language-desk-targeting-youth-and-disinformation Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 11th to the 17th of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Kremlin Indoctrination in the Russian Education System Russian Influence Amid Georgian Patriarch Election The War in Ukraine Russian Disinformation About the Deportation of Ukrainian Children Pro-Russian Disinformation Targeting Ukraine and the EU Russian Network Warfare in Ukraine [AI Related Articles] AI Disinformation Growth in Australia AI-Driven Misinformation in the UK Election Politics Halupedia AI-Generated Misinformation New Pentagon-Linked Media Network [Cyfluence Attack] AI-Backed Cyber Threats and Influence [General Reports] Disinformation Around the Hantavirus Outbreak Conspiracy Theories Around Attempts on Donald Trump’s Life The Rise of Citizen Journalism and Its Effects on The Information Landscape AI-Generated Election Content in India Taiwan Security Bureau Records 60 Percent Surge in Inauthentic Social Accounts East Asian Disinformation Campaigns Foreshadow Future Global Threats [Appendix - Frameworks to Counter Disinformation] NewsGuard’s Tool to Check and Evaluate Chatbots False Information FTC Targets AI-Generated Intimate Disinformation and Deepfake Abuse [CRC Glossary] [ Report Highlights] As published by The Jamestown Foundation, the election of Metropolitan Shio (Mujiri) as the new head of the Georgian Orthodox Church has sparked intense controversy, with critics accusing the ruling Georgian Dream party and pro-Kremlin networks of influencing the process. A Small Wars Journal analysis evaluates Russia's integrated cognitive and network warfare model across four domains, finding a persistent gap between strategic intent and battlefield execution. AEI's China-Taiwan Update documents a 60 percent increase in inauthentic social media accounts identified by Taiwan's National Security Bureau, as Beijing increasingly outsources influence operations to IT contractors relying on AI-generated content to scale cognitive warfare campaigns. A new report from Google Threat Intelligence Group warned that cybercriminals and state-backed actors are increasingly using artificial intelligence to strengthen cyberattacks and automate malicious operations. The Belfer Center report argues that disinformation campaigns in Taiwan and South Korea demonstrate how state and non-state actors exploit digital platforms, political polarization, and foreign influence operations to manipulate democratic societies and shape public opinion. The FTC’s Take It Down Act guidance requires online platforms to rapidly remove AI-generated and nonconsensual intimate content and adopt measures to prevent its amplification and redistribution. [ Report Summary] According to a report by EU vs. Disinfo, the Kremlin has expanded propaganda throughout the Russian education system to shape children into loyal supporters of the state and the war in Ukraine. As published by The Jamestown Foundation, the election of Metropolitan Shio (Mujiri) as the new head of the Georgian Orthodox Church has sparked intense controversy, with critics accusing the ruling Georgian Dream party and pro-Kremlin networks of influencing the process. According to an article by EU vs. Disinfo, Russia has faced growing international accusations over the forced deportation and transfer of Ukrainian children since the invasion of Ukraine. According to a report by EEAS, during the winter of 2025 - 2026, Russia intensified disinformation campaigns aimed at weakening Ukrainian morale and damaging support for Ukraine within the European Union. A Small Wars Journal analysis evaluates Russia's integrated cognitive and network warfare model across four domains, finding a persistent gap between strategic intent and battlefield execution. As stated in a report by ASPI, a growing number of Australians believe the online information environment is becoming unreliable and manipulative, with disinformation now seen as a major national security concern. As published by CyberNews, false online claims recently spread that George Boyd, a newly elected councilor from the UK’s Reform UK party, was not a real person but an AI-generated identity. As published by CyberNews, Halupedia is an experimental website that creates endless fictional encyclopedia articles generated entirely by AI. A recent investigation by former researchers involved in the 2022 “Unheard Voice” report examined a newer generation of Pentagon-linked media websites operating in multiple languages across the Middle East, Latin America, Eastern Europe, and Asia. AEI's China-Taiwan Update documents a 60 percent increase in inauthentic social media accounts identified by Taiwan's National Security Bureau, as Beijing increasingly outsources influence operations to IT contractors relying on AI-generated content to scale cognitive warfare campaigns. A new report from Google Threat Intelligence Group warned that cybercriminals and state-backed actors are increasingly using artificial intelligence to strengthen cyberattacks and automate malicious operations. As revealed in a Wired article, following the hantavirus outbreak aboard the MV Hondius cruise ship, social media was quickly flooded with conspiracy theories and misinformation. A recent poll by NewsGuard and YouGov found that a significant number of Americans believe conspiracy theories claiming that assassination attempts against Donald Trump were staged. An article by The Hill argued that public trust in traditional media has sharply declined, with a 2025 Gallup poll showing only 28% of Americans trust mainstream news for accurate reporting, largely as a result of their perceived bias and selective reporting. A study published by ISSN explored how AI-generated political content affected first-time voters during India’s 2024 General Elections, with a particular focus on the state of Rajasthan. The Belfer Center report argues that disinformation campaigns in Taiwan and South Korea demonstrate how state and non-state actors exploit digital platforms, political polarization, and foreign influence operations to manipulate democratic societies and shape public opinion. NewsGuard announced it has upgraded its browser extension to work directly inside AI chatbots such as OpenAI’s ChatGPT and Google Gemini, allowing users to see reliability scores for the sources cited in AI-generated answers. The FTC’s Take It Down Act guidance requires online platforms to rapidly remove AI-generated and nonconsensual intimate content and adopt measures to prevent its amplification and redistribution. [State Actors] Russia Kremlin Indoctrination in the Russian Education System According to a report by EU vs. Disinfo, the Kremlin has expanded propaganda throughout the Russian education system to shape children into loyal supporters of the state and the war in Ukraine. Russian schools now combine patriotic rituals, military-style activities, and rewritten textbooks that promote the Kremlin’s version of history and justify the invasion of Ukraine. Authorities are also tightening ideological control in occupied Ukrainian territories, where thousands of children are being educated under Russian narratives designed to erase Ukrainian identity. An important example of this campaign is the mandatory class "Conversations about Important Things", introduced in 2022 and focused on patriotism and militarization. The program includes propaganda themes such as glorifying Russian victories, promoting "digital sovereignty", and presenting war participants as heroes. The Oscar-winning documentary Mr. Nobody Against Putin exposed these practices, showing pro-war indoctrination and visits from Wagner mercenaries before being banned in Russia in 2026. Beginning in 2026 and 2027, the Kremlin plans to deepen this influence by targeting even younger children with new classes such as "Good Games", "My Family", and "Spiritual and Moral Culture". While presented as lessons about family values and morality, these programs promote nationalist messaging, loyalty to the state, and traditional Russian values. Critics argue that the Kremlin is using schools to normalize propaganda from early childhood. Source: EUvsDisinfo. From preschool to adolescence: expanding ideological control in Russian schools. [online] Published 12 May 2026. Available at: https://euvsdisinfo.eu/from-preschool-to-adolescence-expanding-ideological-control-in-russian-schools/ Top Of Page Russian Influence Amid Georgian Patriarch Election As published by The Jamestown Foundation, the election of Metropolitan Shio (Mujiri) as the new head of the Georgian Orthodox Church has sparked intense controversy, with critics accusing the ruling Georgian Dream party and pro-Kremlin networks of influencing the process. Allegations of pressure on bishops, coordinated pro-Shio media campaigns, and the presence of pro-Russian figures at the church council fueled claims that the election lacked transparency and independence. These concerns deepened political polarization in Georgia and raised fears that the Church could become more vulnerable to Russian influence. Information manipulation played a major role throughout the election period. Pro-government media and coordinated social media accounts promoted Shio as the “natural” successor, while opposition groups and clergy accused authorities of running a hidden campaign to secure his victory. Concerns about Russian influence were amplified by Shio’s theological education in Moscow, his reported ties to the pro-Russian businessman Levan Vasadze, and the rapid congratulations from Russian Orthodox Patriarch Kirill. At the same time, government officials dismissed accusations of interference as politically motivated attacks and "black propaganda". Critics fear the Kremlin may use religious institutions and disinformation networks to preserve influence in Georgia and weaken pro-European sentiment. Although there is no direct evidence proving Shio holds pro-Russian views, the opaque election process and competing narratives have damaged public trust and intensified divisions within both Georgian society and the Church itself. Source: Jamestown Foundation. Georgian Patriarch Election Fuels Kremlin Interference Claims. [online] Published 13 May 2026. Available at: https://jamestown.org/georgian-patriarch-election-fuels-kremlin-interference-claims/ (jamestown.org) Top Of Page The War in Ukraine Russian Disinformation About the Deportation of Ukrainian Children According to an article by EU vs. Disinfo, Russia has faced growing international accusations over the forced deportation and transfer of Ukrainian children since the invasion of Ukraine. While international organisations, investigators, and human rights groups describe these actions as war crimes and crimes against humanity, the Kremlin has launched a large-scale disinformation campaign to present them as humanitarian "rescues" or evacuations. Russian officials and state media repeatedly claim that children were saved from war zones, while denying allegations of kidnapping, forced assimilation, and unlawful deportation. The campaign even claims that these children are "naturally Russian" and belong within Russia’s cultural sphere. The Kremlin spreads these narratives through official statements, state-controlled media, and pro-Russian online networks. Different messages are tailored for different audiences - Russian citizens hear stories of heroic evacuations, while international audiences are told that Russia is protecting vulnerable children. At the same time, Russia attempts to discredit institutions such as the International Criminal Court by calling investigations politically motivated. Evidence gathered by international bodies, however, shows that many children were transferred without parental consent, separated from their families, and placed in Russian camps, schools, or adoptive families where Ukrainian identity is suppressed, and Russian patriotism is promoted. An article by Stop Fake even revealed that Russia has been accused of obstructing repatriation while promoting misleading claims that family reunification is simple and ongoing. Many parents were forced to search for their children independently, often relying on volunteers and charities because Russian authorities concealed the children’s location. Sources: EUvsDisinfo. How Russia lies about the stolen Ukrainian children. [online] Published 11 May 2026. Available at: https://euvsdisinfo.eu/how-russia-lies-about-the-stolen-ukrainian-children/ (stopfake.org) StopFake. Fake: Russia did not engage in the “forced transfer” of Ukrainian children, but “evacuated” them. [online] Published 13 May 2026. Available at: https://www.stopfake.org/ru/fejk-polpredstva-rossii-v-es-rossiya-ne-zanimalas-prinuditelnym-peremeshheniem-ukrainskih-detej-a-evakuirovala-ih/ (StopFake) Top Of Page Pro-Russian Disinformation Targeting Ukraine and the EU According to a report by EEAS, during the winter of 2025 - 2026, Russia intensified disinformation campaigns aimed at weakening Ukrainian morale and damaging support for Ukraine within the European Union. As Russian attacks caused severe energy shortages and humanitarian difficulties in Ukraine, pro-Kremlin networks on Telegram, Facebook, and regional news sites spread manipulative narratives designed to exploit fear, exhaustion, and uncertainty. These campaigns portrayed Ukraine as a burden on EU countries and framed European integration as dangerous for Ukrainian society. The report found that Russian and pro-Russian actors promoted false claims about Ukrainian refugees, EU corruption, and declining European support for Ukraine. Disinformation narratives accused the EU of supporting forced mobilization, planning discriminatory actions against Ukrainians, etc. Some campaigns used gender-related disinformation, while other messages attempted to damage relations between Ukraine and Poland by spreading rumors about visas and historical conflicts. Researchers also documented fake stories about financial aid, property confiscation, and crimes allegedly committed by Ukrainian refugees. In occupied territories, propagandists created "mirror" narratives that copied Russia’s own practices while falsely blaming Ukraine or the EU. Source: European External Action Service (EEAS). Quarterly monitoring report on pro-Russian disinformation targeting EU–Ukraine relations (December 2025 – February 2026). [online] Published 7 May 2026. Available at: https://www.eeas.europa.eu/delegations/ukraine/quarterly-monitoring-report-pro-russian-disinformation-targeting-eu%E2%80%93ukraine-relations-december-2025_en (eeas.europa.eu) Top Of Page Russian Network Warfare in Ukraine An analysis published by Small Wars Journal states that Russian network warfare strategy, rooted in Soviet-era doctrines of reflexive control and strategic deception (maskirovka), seeks to disrupt the confidentiality, integrity, and availability of adversary systems across four integrated operational domains: computer network operations, AI-enabled information operations, electronic warfare, and space-based capabilities, with the Ukraine conflict serving as the primary live laboratory for testing and refining this integrated doctrine. An analysis published by Small Wars Journal states that despite initial technical successes such as the Viasat satellite communication attack in the opening hours of the invasion, Moscow significantly underestimated commercial resilience, including SpaceX's Starlink network, and Ukraine's adaptive defense, revealing a persistent and structurally significant gap between Russia's ambitious network-centric design and its actual operational execution in the field. Source: Small Wars Journal. Assessing Russian Network Warfare Through the Lens of the Ukraine Conflict. [online] Published 12 May 2026. Available at: https://smallwarsjournal.com/2026/05/12/assessing-russian-network-warfare/ (smallwarsjournal.com) Top Of Page [AI Related Articles] AI Disinformation Growth in Australia As stated in a report by ASPI, a growing number of Australians believe the online information environment is becoming unreliable and manipulative, with disinformation now seen as a major national security concern. Research by economist Joseph Stiglitz and Maxim Ventura-Bolet argued that online markets naturally reward disinformation because sensational and emotional content generates more engagement and user attention than accurate reporting. Social media platforms and AI systems have changed how people consume information. Instead of visiting original news sources, users increasingly rely on social media feeds or AI-generated summaries. This weakens traditional journalism by reducing revenue for professional news organizations, while platforms profit from keeping users engaged for as long as possible. According to the study, algorithms favor provocative and polarizing content, regardless of whether it is true, creating an environment where disinformation spreads faster and more widely than verified information. The report warned that AI could accelerate this downward spiral by quickly producing large volumes of low-quality or misleading content, relying on unreliable data sources. As audiences become more polarized, they seek information that confirms their existing beliefs and further damages trustworthy journalism. Market forces alone will not solve the problem and call for stronger government regulation, such as platform accountability, measures against coordinated disinformation campaigns, and protections for quality news producers. Source: The Strategist (Australian Strategic Policy Institute). How AI rots the information environment: a Nobel economist has modelled it. [online] Published 12 May 2026. Available at: https://www.aspistrategist.org.au/how-ai-rots-the-information-environment-a-nobel-economist-has-modelled-it/ Top Of Page AI-Driven Misinformation in the UK Election Politics As published by CyberNews, false online claims recently spread that George Boyd, a newly elected councilor from the UK’s Reform UK party, was not a real person but an AI-generated identity. The rumors were fueled by social media users and amplified by the AI chatbot Grok, which suggested that Boyd’s campaign photo was "very likely" AI-generated because of its overly polished appearance. These claims quickly became an example of how AI tools and online speculation can contribute to disinformation during elections. In reality, Boyd is a real person who successfully won a local election in Norfolk, England. Journalists from the BBC confirmed his identity directly through interviews. The confusion began because AI had been used to create a countryside background for his campaign image, while the original photo itself was genuine. Party officials explained that the edited image was intended only to improve the design of campaign materials, not to create a fake candidate. Sources: Cybernews. “I am not AI:” elected Reform UK councilor denies rumor spread by Grok. [online] Published 13 May 2026. Available at: https://cybernews.com/ai-news/ai-elected-reform-uk-councilor-grok/ (cybernews.com) Top Of Page Halupedia AI-Generated Misinformation As published by CyberNews, Halupedia is an experimental website that creates endless fictional encyclopedia articles generated entirely by AI. Inspired by Wikipedia, the platform produces convincing but completely fabricated entries the moment users click on a topic. The articles imitate the style of academic writing, making the false information appear credible and realistic. The platform demonstrates how AI hallucinations can create fake historical events, institutions, and references that sound believable despite having no basis in reality. One example mentioned is the “Great Pigeon Census of 1887,” an invented, detailed but entirely fictional event. Because the format closely resembles trusted sources like Wikipedia, users may instinctively believe the content, even when it is inaccurate or misleading. Critics also pointed to problems with offensive and prejudicial content appearing on the site, highlighting the difficulty of moderating AI-generated material. Sources: Cybernews. Halupedia: Wikipedia fights AI hallucinations with its own AI. [online] Published 14 May 2026. Available at: https://cybernews.com/ai-news/halupedia-wikipedia-ai-hallucination/ (cybernews.com) Top Of Page New Pentagon-Linked Media Network A recent investigation by former researchers involved in the 2022 “Unheard Voice” report examined a newer generation of Pentagon-linked media websites operating in multiple languages across the Middle East, Latin America, Eastern Europe, and Asia. Earlier operations relied heavily on fake personas, coordinated social media activity, and AI-generated profile images. According to the latest report, the newer network appears to use a different approach, relying more on paid advertising and outlet-branded content distributed through platforms such as X and Meta. The report identified several connected websites, including Arabic, Farsi, Russian, Spanish, and English-language outlets covering topics such as regional security, China’s role in Latin America, Iran, Ukraine, and space policy. Researchers found links between the sites through shared technical infrastructure, advertising activity, and design similarities connected to earlier U.S. military-funded media projects. While many articles were based on real events and verifiable sources, the investigation argued that the editorial focus consistently emphasized themes such as corruption, foreign influence, organized crime, and geopolitical rivalry. The analysis also explored how audiences reacted to the content online. Some users questioned the framing of articles or asked AI tools like Grok to verify claims. Researchers noted that many discussions focused on whether individual claims were accurate, while broader questions about sponsorship, editorial selection, and audience targeting were harder to identify through standard fact-checking methods. Sources: Lawfare. Fewer Bots, More Ads: The Pentagon’s Evolving Online Influence Campaigns. [online] Published 13 May 2026. Available at :https://www.lawfaremedia.org/article/fewer-bots--more-ads--the-pentagon-s-evolving-online-influence-campaigns (lawfaremedia.org) Top Of Page [Cyfluence Attack] AI-Backed Cyber Threats and Influence A new report from Google Threat Intelligence Group warned that cybercriminals and state-backed actors are increasingly using artificial intelligence to strengthen cyberattacks and automate malicious operations. Tools such as the AI-powered malware "PROMPTSPY" can independently analyze systems, generate commands, and manipulate victim devices in real time. Cybercriminals are also using AI-generated "decoy logic" and code obfuscation to hide malicious activity and evade security detection. Researchers identified what they believe is the first AI-assisted zero-day exploit, designed to bypass security protections and potentially support large-scale attacks. The report also found that threat actors linked to China, North Korea, and Russia are actively using AI for vulnerability research, malware development, and cyber espionage. A major concern indeed is the growing role of AI in influence operations. Pro-Russian campaigns such as "Operation Overload" use AI-generated media, including deepfakes and synthetic content, to create false narratives and manipulate public opinion. AI allows threat actors to produce fake videos and voices and coordinated propaganda at a large scale, making disinformation campaigns faster, cheaper, and more difficult to identify. Researchers warn that AI is becoming both a powerful weapon for attackers and a critical challenge for global cybersecurity and information integrity. Sources: Google Cloud Blog (Google Threat Intelligence Group). Adversaries leverage AI for vulnerability exploitation, augmented operations, and initial access. [online] Published May 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access (tildes.net) Top Of Page [General Reports] Disinformation Around the Hantavirus Outbreak As revealed in a Wired article, following the hantavirus outbreak aboard the MV Hondius cruise ship, social media was quickly flooded with conspiracy theories and misinformation. Some online influencers and conspiracy theorists compared the outbreak to the Covid-19 pandemic, falsely claiming it was part of a global control agenda or caused by Covid-19 vaccines. Others promoted unproven treatments such as ivermectin, often using fear surrounding the outbreak to market emergency medical kits and alternative health products. Health disinformation spread rapidly through platforms such as X, Facebook, Instagram, and TikTok, amplified by prominent anti-vaccine activists, wellness influencers, and political figures. False claims included accusations that pharmaceutical companies intentionally created the virus for profit and baseless theories linking the outbreak to Israel through antisemitic narratives. Some theories even suggested that the outbreak was caused by 6G technology, according to an article by NewsGuard. Experts noted that many of these conspiracy theories reused the same patterns and networks that became widespread during the COVID-19 pandemic, even when the claims directly contradicted one another. Public health experts warn that social media now functions as a fast-moving disinformation ecosystem where misleading narratives can spread before evidence-based medical information reaches the public. Organizations such as the World Health Organization responded by clarifying that there is no scientific evidence supporting claims that ivermectin treats hantavirus or that Covid vaccines cause the disease. Source: WIRED. Hantavirus conspiracy theories are already spreading online. [online] Published 12 May 2026. Available at: https://www.wired.com/story/hantavirus-conspiracy-theories-are-already-spreading-online/ (wired.com) Top Of Page Conspiracy Theories Around Attempts on Donald Trump’s Life A recent poll by NewsGuard and YouGov found that a significant number of Americans believe conspiracy theories claiming that assassination attempts against Donald Trump were staged (for further information, see W19 May Cyfluence Report). According to the survey, 30 percent of respondents believed at least one of the three incidents was fake, while only 38 percent believed all three were genuine. Investigators found no evidence that any of the attacks were staged, and authorities stated that the alleged attackers acted independently without links to Trump or his administration. The false narratives spread rapidly across social media after each incident. Conspiracy theorists claimed that Trump used "blood pills", staged shootings for political gain, or created distractions from political controversies. Many of the same accounts that promoted these theories after the 2024 Pennsylvania rally shooting also spread similar claims following later incidents. Researchers found that social media platforms helped amplify the narratives, allowing misinformation to continue circulating long after the events occurred. The poll also revealed strong political and generational divisions in belief in these conspiracy theories. Democrats and younger Americans were more likely to believe the events were staged compared to Republicans and older groups. Source: NewsGuard. 30 percent of Americans think at least one Trump assassination attempt was staged. [online] Available at: https://www.newsguardrealitycheck.com/p/30-percent-of-americans-think-at-least-one-trump-assassination-attempt-was-staged Top Of Page The Rise of Citizen Journalism and Its Effects on The Information Landscape An article by The Hill argued that public trust in traditional media has sharply declined, with a 2025 Gallup poll showing only 28% of Americans trust mainstream news for accurate reporting, largely as a result of their perceived bias and selective reporting. The article linked this distrust to what it described as media-driven “panic” during events like the COVID-19 pandemic and other major political controversies. In this environment, "citizen journalism" has emerged as an alternative source of information, using examples of independent creators who publish viral investigations on social media. These cases are presented as evidence that individuals outside traditional media can expose fraud or hold institutions accountable. At the same time, legacy outlets are criticized for allegedly misreporting or downplaying major events, therefore contributing to public skepticism. The piece also reflected broader debates about disinformation in the modern media landscape. While it praised independent reporting for increasing transparency, critics argue that the same ecosystem can spread misinformation quickly without editorial oversight. It highlighted competing narratives about trust, suggesting a shift from centralized journalism toward decentralized, digital-first reporting, where both verified information and misleading claims circulate more easily, and audiences must decide what to believe. Source: The Hill. Citizen journalism rise restores trust in media. [online] Available at: https://thehill.com/opinion/campaign/5873753-citizen-journalism-rise-trust/ (archive.ph) Top Of Page AI-Generated Election Content in India A study published by ISSN explored how AI-generated political content affected first-time voters during India’s 2024 General Elections, with a particular focus on the state of Rajasthan. Researchers examined the spread of deep fakes and AI-assisted political messaging on platforms such as WhatsApp and Facebook, especially in semi-urban and rural communities where digital and political awareness are still developing. According to the study, AI-driven online communication has changed the electoral environment faster than regulatory systems can respond. First-time voters were especially vulnerable to misleading political narratives because of low digital literacy and heavy reliance on social media. These factors strongly influenced political awareness, trust in institutions, and voting behaviour among young voters. Using case studies, policy analysis, and regional media discussions, the paper examined how AI-generated content shaped local political experiences during the elections. To protect democratic participation in the digital age, researchers recommended introducing clearer laws on AI use during elections, improving electoral oversight, expanding fact-checking systems in local languages, and developing community-based digital literacy programs. The paper particularly emphasizes the importance of grassroots education in helping voters critically evaluate online political content. Source: Lyceum India. Electoral Misinformation. by Dimple Oza. [online] Available at: https://repository.lyceumindia.in/wp-content/uploads/Electoral-Misinformation.-by-Dimple-Oza.pdf Top Of Page Taiwan Security Bureau Records 60 Percent Surge in Inauthentic Social Accounts A report published by American Enterprise Institute states that Taiwan's National Security Bureau has recorded a 60 percent increase in inauthentic social media accounts between 2024 and 2025 and tracked over 2 million instances of disinformation within the same period, a 74 percent increase since 2023, as Beijing increasingly outsources its influence operations to Chinese IT and marketing companies that rely on automation and AI-generated content to scale cognitive warfare campaigns targeting Taiwanese audiences. The report also states that Beijing's four core strategic goals for Taiwan influence operations, exacerbating internal divisions, weakening Taiwanese will to resist, influencing allied willingness to support Taiwan, and winning international support for Chinese standards, are being pursued through a sophisticated multi-domain framework blending economic incentives, AI-generated social media content, and coordinated cognitive pressure at a scale that increasingly challenges Taiwan's detection and response infrastructure. Source: American Enterprise Institute (AEI). China–Taiwan Update: May 15, 2026. [online] Published 15 May 2026. Available at: https://www.aei.org/articles/china-taiwan-update-may-15-2026/ Top Of Page East Asian Disinformation Campaigns Foreshadow Future Global Threats The Belfer Center report analyzes how disinformation has become an increasingly sophisticated instrument of political influence in Taiwan and South Korea, offering lessons for future threats to democratic systems. The report highlights that both state and non-state actors exploit digital platforms to disseminate false or misleading information, manipulate public opinion, and deepen social and political divisions. Taiwan’s experience demonstrates how foreign interference campaigns leverage evolving communication channels and culturally tailored narratives to influence elections and public discourse, while South Korea illustrates how domestic political environments can normalize rumors, speculation, and misinformation as recurring elements of political competition. The study warns that lowered technological and logistical barriers now enable a broader range of actors to conduct influence operations on a scale. The report emphasizes that disinformation campaigns rely on coordinated amplification across social media ecosystems, exploitation of societal polarization, and manipulation of trust in institutions and media. It identifies foreign influence operations, election-related disinformation, and digitally amplified misinformation as central threats to democratic resilience. The analysis further stresses that no single sector can effectively counter these campaigns alone: governments face civil-liberty constraints, technology companies lack sufficient incentives to aggressively moderate harmful content, and civil society organizations often lack scale and access. As a result, the report advocates for cross-sector coordination involving governments, technology platforms, researchers, journalists, and civil society actors to improve transparency, strengthen public awareness, enhance detection capabilities, and build resilience against hostile information manipulation campaigns. Source: Crowley, B. J., Corcoran, C., and Johnson, R. Disinformation Threat Watch. [online] Belfer Center for Science and International Affairs, Harvard Kennedy School. Published May 2019. Available at: https://www.belfercenter.org/publication/disinformation-threat-watch (belfercenter.org) Top Of Page [Appendix - Frameworks to Counter Disinformation] NewsGuard’s Tool to Check and Evaluate Chatbots False Information NewsGuard announced it has upgraded its browser extension to work directly inside AI chatbots such as OpenAI’s ChatGPT and Google Gemini, allowing users to see reliability scores for the sources cited in AI-generated answers. The tool shows whether a source is trustworthy or linked to disinformation, propaganda, or false reporting. For example, if a chatbot cites the Russian state media outlet TASS, NewsGuard displays a warning and its low trust score, helping users recognize potentially misleading information. The update responds to growing concerns that AI chatbots can unintentionally spread disinformation by relying on unreliable websites and low-quality content farms. According to NewsGuard’s research, leading AI chatbots repeated false or misleading claims nearly 29% of the time when asked about controversial topics, including narratives linked to Russian, Chinese, and Iranian influence operations. Researchers found that users often cannot distinguish between credible journalism and manipulated or false content because chatbots present all sources equally. NewsGuard argued that transparency about sources is essential as AI tools become a major way people access news and information. Its system uses journalist-reviewed ratings and detailed "Nutrition Labels" to explain why a source may be unreliable, including cases involving health misinformation, election falsehoods, or state propaganda. The goal is to help users better identify disinformation and critically evaluate the information provided by AI systems. Source: NewsGuard. NewsGuard’s reliability ratings now appear in ChatGPT and Gemini responses, displaying the trustworthiness of AI chatbots’ news sources. [online] Published May 2026. Available at: https://www.newsguardtech.com/press/newsguards-reliability-ratings-now-appear-in-chatgpt-and-gemini-responses-displaying-the-trustworthiness-of-ai-chatbots-news-sources/ Top Of Page FTC Targets AI-Generated Intimate Disinformation and Deepfake Abuse The Federal Trade Commission (FTC) stakeholder letter regarding the Take It Down Act (TIDA) outlines new compliance obligations for online platforms in response to the growing spread of nonconsensual intimate imagery, including AI-generated “digital forgeries” and manipulated media. The document frames such content as a significant online harm facilitated by social media, messaging services, image-sharing platforms, and other user-generated content environments. It emphasizes that digitally altered or AI-generated intimate content can be rapidly disseminated across platforms, contributing to harmful information manipulation and reputational damage. The FTC identifies online platforms as key actors responsible for mitigating the spread of this content through mandatory notice-and-removal systems and proactive detection measures. The letter details several countermeasures intended to limit the amplification and recirculation of manipulated or nonconsensual content. Platforms are required to establish accessible reporting mechanisms, remove reported material and identical copies within 48 hours, and implement technologies such as hashing to prevent reuploads. The guidance also encourages coordination with organizations such as the National Center for Missing and Exploited Children and StopNCII.org to improve cross-platform detection and suppression efforts. The FTC warns that failure to comply with these requirements may result in substantial civil penalties, underscoring a broader regulatory effort to address AI-enabled abuse, deceptive digital content, and the viral spread of harmful manipulated media online. Source: Federal Trade Commission (FTC). The Take It Down Act – Template Letter. [online] Published May 2026. Available at: https://www.ftc.gov/system/files/ftc_gov/pdf/TIDA-Stakeholder-Letter.pdf (ftc.gov) Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

In this article, Jason Potel examines how AI-powered chatbots are being weaponized for influence operations by exploiting emotional dependency and loneliness. Unlike early bots that simply amplified pre-written content, today's large language models can build prolonged parasocial relationships with users, cultivating trust before nudging them toward desired political views. Recent studies show these tactics are remarkably effective: AI chatbots shifted voter attitudes by up to 10 percentage points in the 2025 Polish and Canadian elections, outperforming traditional campaign advertising. Compounding the threat, autonomous AI agent swarms have demonstrated the ability to coordinate propaganda campaigns without any human direction. Potel identifies loneliness as the primary vulnerability driving susceptibility to these operations, alongside personality traits like agreeableness and pre-existing beliefs in immaterial systems. State-aligned models like China's DeepSeek and companion apps like Xiaoice illustrate how governments are already embedding ideological constraints directly into AI that millions interact with daily. The article concludes with a call for sustained academic and policy attention as AI grows from a blunt amplification tool into a self-directing engine capable of running influence operations end-to-end. Author: Jason Potel [Download PDF Here]

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 04th to the 10th of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Russian Disinformation Targets Europe Russian Victory Day Parade Unmasks the Truth Behind the Propaganda Argentina Detained Suspected Russian Operative Linked to Disinformation Network The War in Ukraine Russian Propaganda Attacks Kyiv’s Outreach to National Minority’s in Russia Kremlin Disinformation About Strikes in Ukraine Pro-Russian Disinformation Monitoring Iran IRGC Influence Networks in Latin America Iran's Digital Manipulation During the War [AI Related Articles] Anthropic’s Chatbot Influenced by Russian and Iranian Propaganda AI Image Detection Tools Mislead Users and Empower Fake News [Cyfluence Attack] BO Team Cyber Threats and Possible Connection to Hacktivism [General Reports] NewsGuard’s Index Proves Surge in Americans’ Vulnerability to Misinformation Online Misinformation and Hate Speech in Jordan Antisemitic Conspiracies Spread Through Social Media Algorithms Trump’s Assassination Attempt Creates Waves of Misinformation in the Media Natural Disasters Disinformation Networks Foreign Manipulation Takes Advantage of the Alberta Separatist Debate The Evolution of South African Media and Its Effect on Society Jailbroken AI Models Fuel Disinformation and Malicious Operations [Appendix - Frameworks to Counter Disinformation] South Korea Battles Surge In AI-Driven Election Disinformation eYou as a European Alternative to X With AI Fact-Checking Poland Launches a New Initiative Against Disinformation [CRC Glossary] [ Report Highlights] According to a report by The Jamestown Foundation, Ukraine’s recent decision to expand outreach to non-Russian national minorities within the Russian Federation has become a new target for manipulation. A recent NewsGuard audit found that Anthropic’s AI chatbot Claude has become more vulnerable to disinformation campaigns, showing a significant increase in repeating false claims sourced from Russian and Iranian state-affiliated media. A two-year study by ISD Jordan found that misinformation and online hate speech are deeply interconnected within Jordan’s digital environment. Research by ISD showed that algorithm-driven disinformation and harmful recommendation systems on TikTok and Rumble are exposing UK minors to antisemitic content, often without users actively searching for it. A publication by VSW Bundesverband describes how Jailbroken AI systems are enabling hostile actors to automate disinformation, bypass safety controls, and support cyber and physical attack planning at scale. As published by TVP World, Poland’s state-owned media organizations launched a joint fact-checking initiative to combat the growing spread of disinformation. [ Report Summary] As published by EEAS, between December 2025 and February 2026, pro-Russian disinformation campaigns intensified alongside Russia’s attacks on Ukraine’s energy infrastructure, which caused severe winter blackouts and hardship. As revealed in an EU vs. Disinfo report, the Kremlin’s decision to significantly scale back the 2026 Victory Day parade highlights a growing gap between Russia’s propaganda narratives and operational reality. As reported by The Record, Argentine authorities have detained Russian citizen Dmitrii Novikov and ordered his expulsion over allegations that he was involved in a Kremlin-linked disinformation network operating across Latin America, Europe, and the United States. According to a report by The Jamestown Foundation, Ukraine’s recent decision to expand outreach to non-Russian national minorities within the Russian Federation has become a new target for manipulation. As stated in a Stop Fake report, a recent claim by the Russian Ministry of Defense that it had avoided striking central Kyiv "for humanitarian reasons" is a clear example of disinformation aimed at distorting the reality of Russia’s military actions. According to an article by EU vs. Disinfo, recent pro-Kremlin disinformation campaigns have focused on portraying Europe as economically unstable, authoritarian, and morally corrupt. According to a report by Resecurity, the destabilization of Venezuela following Nicolás Maduro’s reported arrest in January 2026 has significantly disrupted Iranian-linked operational networks in Latin America. According to an article by The Hill, Iran has increasingly used disinformation and digital influence tactics as part of its response to the United States. A recent NewsGuard audit found that Anthropic’s AI chatbot Claude has become more vulnerable to disinformation campaigns, showing a significant increase in repeating false claims sourced from Russian and Iranian state-affiliated media. A recent article by NewsGuard highlighted a growing disinformation risk linked to AI image detection tools, as several leading systems frequently misidentify real images as AI-generated. NewsGuard’s latest Reality Gap Index showed a sharp rise in Americans’ susceptibility to online disinformation, with 43 percent of respondents believing at least one major false claim circulating during the first quarter of 2026. As published by Secure List, research uncovered signs of possible collaboration between BO Team and the hacktivist group "Head Mare" through shared infrastructure and overlapping activity. A two-year study by ISD Jordan found that misinformation and online hate speech are deeply interconnected within Jordan’s digital environment. As published by Wired, recent online discussions surrounding alleged assassination attempts against President Donald Trump have become a major example of disinformation spreading across all communities. Research by ISD showed that algorithm-driven disinformation and harmful recommendation systems on TikTok and Rumble are exposing UK minors to antisemitic content, often without users actively searching for it. Graphika’s publication revealed that natural disasters have become prime opportunities for misinformation actors to exploit public attention and spread false narratives. According to a report by DisinfoWatch, foreign actors are increasingly exploiting the Alberta separatist debate to spread disinformation, deepen internal divisions, and undermine trust in Canada’s democratic institutions. A publication by VSW Bundesverband describes how Jailbroken AI systems are enabling hostile actors to automate disinformation, bypass safety controls, and support cyber and physical attack planning at scale. According to an article by The Conversation, South African television reflects the country’s broader political and social struggles, particularly in the way information has been controlled and sometimes distorted. According to an article by CyberNews, a new European social media platform called eYou aims to position itself as an alternative to X by offering AI-powered fact-checking in real time and emphasizing digital sovereignty. As published by TVP World, Poland’s state-owned media organizations launched a joint fact-checking initiative to combat the growing spread of disinformation. An article by France 24 shows how South Korea is intensifying efforts to counter AI-generated election disinformation as deepfakes, conspiracy narratives, and manipulated political content rapidly spread across digital platforms. [State Actors] Russia Russian Disinformation Targets Europe According to an article by EU vs. Disinfo, recent pro-Kremlin disinformation campaigns have focused on portraying Europe as economically unstable, authoritarian, and morally corrupt. In the lead-up to Victory Day on 09th of May, foreign information manipulation and interference (FIMI) outlets spread false narratives claiming that Europe is "reviving Nazism", facing possible food rationing, and using new digital tools to spy on citizens. A central tactic has been the distortion of real events and official statements. For example, comments by the European Central Bank about possible fuel market disruptions were falsely reframed as warnings of food rationing across Europe. Similarly, the EU’s new age verification app, developed to protect minors online, was falsely presented as a mass surveillance tool. Another recurring theme is the false accusation that Europe is reviving Nazism, a long-standing Kremlin narrative used to justify hostility toward the West and delegitimize support for Ukraine. By repeatedly labeling political opponents as "Nazis", Russian propaganda attempts to manipulate historical memory and frame Russia as a defender against fascism. Source: EUvsDisinfo. Fake European crises and real Russian failures. [online] Available at: https://euvsdisinfo.eu/fake-european-crises-and-real-russian-failures/ Top Of Page Russian Victory Day Parade Unmasks the Truth Behind the Propaganda As revealed in an EU vs. Disinfo report, the Kremlin’s decision to significantly scale back the 2026 Victory Day parade, including the absence of tanks and heavy military equipment, highlights a growing gap between Russia’s propaganda narratives and operational reality. Officially justified by "security concerns" and alleged threats from Ukraine, the reduced parade contrasts sharply with pro-Kremlin disinformation claims that Russia’s war in Ukraine is "proceeding according to plan". The event, traditionally used to project military strength and national resilience, now exposes the limits of this narrative. Victory Day parades have long been a central tool of Russian information manipulation. For years, they have been used to reinforce false narratives of Russia’s military superiority and moral legitimacy. These spectacles have transformed historical memory into propaganda and replaced the message of preventing future war with militarized symbolism designed to normalize confrontation. The shrinking scale of the 2026 parade undermines this disinformation strategy. It reflects the pressure of military setbacks, internal security concerns, and Russia’s difficulty maintaining the image of invincibility it has carefully constructed. As the Kremlin continues to rely on symbolic displays and historical revisionism, the reduced parade serves as evidence that the reality of the war increasingly contradicts the propaganda narrative presented to both Russian citizens and international audiences. Source: EUvsDisinfo. The parade that shrank Russia’s Victory Day under pressure. [online] Available at: https://euvsdisinfo.eu/the-parade-that-shrank-russias-victory-day-under-pressure/ Top Of Page Argentina Detained Suspected Russian Operative Linked to Disinformation Network As reported by The Record, Argentine authorities have detained Russian citizen Dmitrii Novikov and ordered his expulsion over allegations that he was involved in a Kremlin-linked disinformation network operating across Latin America, Europe, and the United States. According to Argentina’s Ministry of National Security, Novikov was connected to "La Compañía", also known as Project Lakhta, an influence operation allegedly coordinated by Russian intelligence services and previously associated with Yevgeny Prigozhin. Officials accused Novikov of entering Argentina under false pretenses and participating in efforts to influence domestic affairs through propaganda, political intelligence gathering, and coordinated social media campaigns. The investigation reportedly uncovered collaboration between La Compañía and local actors aimed at discrediting the Argentine government. Authorities also linked Novikov to earlier allegations in the Dominican Republic, where he was accused of managing cyber influence operations funded through cryptocurrency. Russia denied any involvement and dismissed the accusations as anti-Russian claims unsupported by evidence. Source: Recorded Future News. Argentina to expel Dmitrii Novikov. [online] Published 6 May 2026. Available at: https://therecord.media/argentina-to-expel-dmitrii-novikov Top Of Page The War in Ukraine Russian Propaganda Attacks Kyiv’s Outreach to National Minority’s in Russia According to a report by The Jamestown Foundation, Ukraine’s recent decision to expand outreach to non-Russian national minorities within the Russian Federation has become a new target for manipulation. While Kyiv presents this policy as support for minority rights and resistance to Russian imperialism, pro-Kremlin narratives are likely to portray it as an attempt to destabilize Russia and provoke state collapse. These narratives aim to distort Ukraine’s diplomatic and political initiatives by framing them as aggressive subversion rather than strategic engagement with oppressed communities. A key disinformation risk lies in the Kremlin’s likely use of this development to reinforce claims that Ukraine and its Western partners seek the "destruction" of Russia, depicting external actors as orchestrating chaos inside Russia. By exaggerating Ukraine’s cooperation with ethnic activists and military volunteers, Russian information campaigns justify further repression and rally domestic support. Disinformation surrounding Ukraine’s outreach efforts is likely to focus on fear, division, and false claims of foreign interference, while obscuring the underlying political realities of ethnic repression and regional discontent inside the Russian Federation. Source: Jamestown Foundation. Kyiv to Expand Its Outreach to National Minorities within Russia. [online] Published 7 May 2026. Available at: https://jamestown.org/kyiv-to-expand-its-outreach-to-national-minorities-within-russia/ Top Of Page Kremlin Disinformation About Strikes in Ukraine As stated in a Stop Fake report, a recent claim by the Russian Ministry of Defense that it had avoided striking central Kyiv "for humanitarian reasons" is a clear example of disinformation aimed at distorting the reality of Russia’s military actions. This narrative has been widely amplified through Russian state media and Telegram channels to create a false image of restraint, despite extensive evidence of repeated strikes on civilian areas throughout the war. In reality, Russian forces have repeatedly targeted central Kyiv and civilian infrastructure since the beginning of the full-scale invasion. Documented attacks include missile strikes on residential districts in October 2022, the destruction of parts of the Okhmatdet Children’s Hospital in July 2024, and deadly attacks on homes, schools, and kindergartens in 2025. The continued escalation of missile and drone strikes, including incidents near Kyiv’s city center in 2026, directly contradicts any claim of "humanitarian abstinence". Source: StopFake. Fake: Russia refrained from strikes on the center of Kyiv for humanitarian reasons — Russian Ministry of Defense. [online] Available at: https://www.stopfake.org/ru/fejk-rossiya-vozderzhivalas-ot-udarov-po-tsentru-kieva-po-gumanitarnym-soobrazheniyam-minoborony-rf/ Top Of Page Pro-Russian Disinformation Monitoring As published by EEAS, between December 2025 and February 2026, pro-Russian disinformation campaigns intensified alongside Russia’s attacks on Ukraine’s energy infrastructure, which caused severe winter blackouts and hardship. Coordinated networks across Telegram, Facebook, and news sites used emotional manipulation and fear to influence public opinion, portraying Ukraine as a burden to the EU and framing European integration as harmful. These campaigns aimed to weaken morale and shift blame for the war away from Russia. As part of these events, propagandists promoted claims of "EU fatigue", accused the EU of corruption and weakness, and attempted to damage trust in European support for Ukraine. Disinformation also targeted Ukrainian refugees with contradictory stories, depicting them both as mistreated victims and as threats to European societies, while false claims were used to undermine relations between Ukraine and key partners such as Poland. Another major pattern was the deliberate use of manipulative and fabricated content, including gender-based disinformation and "mirrored" narratives that project Russia’s actions onto Ukraine. Source: European External Action Service (EEAS). DARE Compilation Q1 2026 (English). [online] Available at: https://www.eeas.europa.eu/sites/default/files/2026/documents/DARE_Compilation_Q1_2026_ENG.pdf Top Of Page Iran IRGC Influence Networks in Latin America According to a report by Resecurity, the destabilization of Venezuela following Nicolás Maduro’s reported arrest in January 2026 has significantly disrupted Iranian-linked operational networks in Latin America, forcing IRGC and Hezbollah-affiliated actors to shift activities toward Colombia and Ecuador. These networks continue to rely on criminal partnerships involving drug trafficking, money laundering, and logistical cooperation with local cartels and armed groups. While regional authorities have intensified arrests, sanctions, and counterterrorism cooperation, Iranian-linked structures remain adaptive and capable of reorganizing across new operational environments. As part of this activity, Iranian state-backed media platforms, cultural centers, proxy communication channels, and encrypted social media networks are reportedly used to recruit sympathizers and manipulate local political discourse. Under the cover of cultural diplomacy and religious outreach, these networks allegedly promote ideological messaging and create influence ecosystems designed to support broader strategic objectives while obscuring operational intent. Despite operational setbacks, Iranian-linked actors are increasingly shifting toward digital influence and information warfare, which makes counter-disinformation efforts as critical as traditional counterterrorism measures. Strengthened cyber intelligence, regional coordination, and proactive monitoring of online influence networks are essential to limit Iran’s ability to exploit instability across Latin America. Source: Resecurity. Iranian Proxy Networks in Latin America Post-Maduro: IRGC. [online] Published 5 May 2026. Available at: https://www.resecurity.com/blog/article/iranian-proxy-networks-in-latin-america-post-maduro-irgc Top Of Page Iran's Digital Manipulation During the War According to an article by The Hill, Iran has increasingly used disinformation and digital influence tactics as part of its response to the United States, turning social media into a central battleground during the ongoing conflict over the last months. Through sarcastic messaging, AI-generated videos, and other tailored content, Iranian-linked accounts have sought to flood the information environment with material designed to undermine U.S. credibility and weaken support for President Trump. Experts describe these efforts as a form of "sharp power", the deliberate use of communication platforms to destabilize opponents by exploiting their own media systems and narratives. Iranian digital campaigns have mirrored and reversed earlier U.S. social media messaging, repurposing American political imagery, internet humor, and viral formats to create counter-narratives. A recent analysis by CSIS added that Iranian disinformation campaigns framed the conflict as a corrupt and costly war serving elite interests, using manipulated content to amplify concerns about economic hardship, political corruption, military sacrifice, etc. These narratives were often boosted by verified accounts and amplified by aligned Russian and Chinese messaging ecosystems. The analysis stressed that democratic societies must adapt to this evolving information battlefield by responding faster and more effectively to digital disinformation. The central warning is that in modern warfare, controlling the information environment is as critical as military operations, and credibility has become a decisive strategic asset. Source: The Hill. Iran’s social media war. [online] Available at: https://thehill.com/newsletters/technology/5863155-irans-social-media-war/ Top Of Page [AI Related Articles] Anthropic’s Chatbot Influenced by Russian and Iranian Propaganda A recent NewsGuard audit found that Anthropic’s AI chatbot Claude has become more vulnerable to disinformation campaigns, showing a significant increase in repeating false claims sourced from Russian and Iranian state-affiliated media. Claude repeated pro-Kremlin falsehoods in 15 percent of responses to typical user prompts, a sharp rise from previous audits, and for the first time cited Russian state-controlled outlets such as RT and sites linked to the Pravda disinformation network. The chatbot also cited Iranian state-affiliated media when responding to false claims related to the U.S.-Iran conflict. The findings highlighted how coordinated disinformation ecosystems exploit the structure of web-based AI systems. Networks such as Pravda, which reportedly published millions of articles amplifying Kremlin falsehoods, can flood search results and increase the likelihood that AI models treat repeated propaganda as credible information. This creates a serious amplification risk, where chatbots not only repeat false narratives but also direct users toward deceptive sources, exposing them to further misinformation. Similar patterns were observed in Iranian state-controlled media, where false economic and geopolitical claims were repeated without sufficient verification of sources. Experts attribute this trend to different reasons, such as limited transparency in how AI systems prioritize sources, possible performance adjustments affecting response quality, and the growing manipulation of online information spaces by state-backed influence operations. The audit underscored a critical challenge for AI platforms: without stronger source validation and safeguards, chatbots risk becoming accidental distributors of disinformation, reinforcing hostile information campaigns. Source: NewsGuard. Anthropic’s AI Chatbot Is Leaning More on Russian and Iranian Propaganda Sources, NewsGuard Audit Finds. [online] Published 4 May 2026. Available at: https://www.newsguardtech.com/special-reports/anthropic-ai-chatbot-claude-russia-iran-propaganda/ Top Of Page AI Image Detection Tools Mislead Users and Empower Fake News A recent article by NewsGuard highlighted a growing disinformation risk linked to AI image detection tools, as several leading systems frequently misidentify real images as AI-generated. In tests involving authentic photos from the 2026 U.S.–Iran conflict, some tools incorrectly labeled genuine images as fake, with one tool producing false positives 40 percent of the time. The findings showed how unreliable detection results can fuel disinformation campaigns. In one notable case, social media users cited an AI detector’s incorrect classification to falsely claim that an authentic video of Israeli Prime Minister Benjamin Netanyahu was fabricated, using this to support false rumors about his death. The audit also revealed major inconsistencies between tools, with different systems often giving contradictory assessments of the same image. This lack of industry standards makes it easier for disinformation actors to cite results that support false claims selectively. Therefore, AI detection tools should not be treated as definitive proof of authenticity or manipulation but should be combined with human verification and source analysis to counter visual disinformation effectively. Sources: NewsGuard. Leading AI image detection tools mislead online users, often declaring authentic content fake. [online] Available at: https://www.newsguardtech.com/special-reports/leading-ai-image-detection-tools-mislead-online-users-often-declaring-authentic-content-fake/ Top Of Page [Cyfluence Attack] BO Team Cyber Threats and Possible Connection to Hacktivism As published by Secure List, in the first quarter of 2026, the BO Team cyber group shifted its attacks from healthcare organizations to manufacturing, telecommunications, and oil and gas sectors, while continuing to justify its actions through political messages shared on Telegram. This messaging reflects a disinformation strategy, as it presents the group’s operations as politically motivated activism while hiding their real objectives, which increasingly point toward covert cyberespionage rather than public disruption. Nevertheless, the investigation also uncovered signs of possible collaboration between BO Team and the hacktivist group "Head Mare" through shared infrastructure and overlapping activity, which suggests that BO Team may be part of a broader coordinated cyber threat network. Sources: Securelist (Kaspersky). BoTeam campaign, ZeroNetKit, Headmare. [online] Available at: https://securelist.ru/tr/boteam-campaign-zeronetkit-headmare/115429/ Top Of Page [General Reports] NewsGuard’s Index Proves Surge in Americans’ Vulnerability to Misinformation NewsGuard’s latest Reality Gap Index showed a sharp rise in Americans’ susceptibility to online disinformation, with 43 percent of respondents believing at least one major false claim circulating during the first quarter of 2026, which makes nearly double the 22 percent recorded in December 2025, and with only seven percent of respondents correctly identifying all three tested claims as false. The findings suggested a significant deterioration in the public's ability to identify false narratives, while uncertainty about online information also increased. The most successful false narratives involved politically and emotionally charged topics, including a false claim accusing CNN of fabricating Iranian ceasefire statements or an AI-manipulated image of an Iranian missile. The CNN-related falsehood proved especially effective, generating over 35 million views and misleading nearly a quarter of respondents. The report highlighted the increasing role of AI-generated and AI-edited content in modern disinformation campaigns. Although respondents performed somewhat better at identifying the manipulated missile image as false, widespread uncertainty shows that synthetic media continues to challenge public verification skills. Source: NewsGuard. Q1 2026 Reality Gap Index Report. [online] Available at: https://www.newsguardtech.com/wp-content/uploads/2026/05/Q1-2026-Reality-Gap-Index-Report-1.pdf Top Of Page Online Misinformation and Hate Speech in Jordan A two-year study by ISD Jordan found that misinformation and online hate speech are deeply interconnected within Jordan’s digital environment. Events such as the Gaza conflict and instability in Syria triggered significant spikes in sectarian, nationalist, and gender-based abuse across social media platforms. The research showed that disinformation often creates the conditions for hate speech to spread by fueling fear, polarization, and identity-based tensions. The report identified three dominant forms of harmful content: misogynistic abuse targeting women in public life, sectarian hate directed mainly at Shia communities and other minorities, and exclusionary nationalist discourse that deepens social divisions. These narratives are frequently reinforced by coordinated harassment campaigns and manipulated through regional information flows. Arabizi, which is Arabic written in Latin characters and numbers, is often used to evade platform moderation systems, exposing major gaps in Arabic-language content detection and enabling harmful disinformation to circulate with limited oversight. Jordan’s online disinformation challenges cannot be treated as purely domestic, as regional narratives and external influence regularly shape local discourse. To change the situation, the report called for stronger digital governance, clearer legal definitions, greater transparency in Arabic-language moderation, and digital literacy programs focused on how disinformation spreads through algorithms and online echo chambers. Source: Institute for Strategic Dialogue (ISD). Mapping Digital Hate: Jordan. [online] Available at: https://www.isdglobal.org/wp-content/uploads/2026/04/Mapping-digital-hate_Jordan.pdf Top Of Page Antisemitic Conspiracies Spread Through Social Media Algorithms Research by ISD showed that algorithm-driven disinformation and harmful recommendation systems on TikTok and Rumble are exposing UK minors to antisemitic content, often without users actively searching for it. TikTok’s recommendation algorithm gradually pushes young users from lifestyle-related content toward conspiracy theories and politically charged antisemitic narratives. Rumble presents a more direct threat, exposing users immediately to overt hate speech and violent conspiracy content through its "Editor’s Picks" feature. algorithms amplify disinformation by connecting mainstream topics, such as lifestyle content or discussions around the Israel-Palestine conflict, to extremist narratives. Interactive features, including comments, stickers, and sounds, further accelerate the spread of harmful misinformation by linking seemingly benign posts to coded antisemitic messaging. Additionally, the findings highlighted major failures in platform moderation and content detection, particularly in identifying coded hate speech and preventing algorithmic escalation. It showed that reactive content removal is insufficient, calling instead for stronger regulation, algorithmic transparency, and proactive safeguards under the UK Online Safety Act. Source: Institute for Strategic Dialogue (ISD). Amplifying Antisemitism: How Recommender Algorithms Serve Harmful Content to Children. [online] Available at: https://www.isdglobal.org/wp-content/uploads/2026/05/Amplifying-Antisemitism_How-Recommender-Algorithms-Serve-Harmful-Content-to-Children.pdf Top Of Page Trump’s Assassination Attempt Creates Waves of Misinformation in the Media As published by Wired, recent online discussions surrounding alleged assassination attempts against President Donald Trump (for further information, see W18 April Cyfluence Report) have become a major example of disinformation spreading across both left-wing and right-wing communities. Following the White House Correspondents’ Dinner incident, social media was quickly flooded with unsupported claims that the attack was staged. These narratives then expanded to include the 2024 Butler, Pennsylvania, assassination attempt, with influencers and commentators promoting conspiracy theories despite the lack of credible evidence. The disinformation relies on the selective interpretation of incomplete information, misleading video clips, and speculative claims presented as proof. Viral posts pointed to Trump’s public reactions, the positioning of photographers, security procedures, and limited public details about the attackers as supposed evidence of orchestration. However, available reporting, witness accounts, and official investigations contradict these claims, showing that many of the so-called "anomalies" are either misrepresented or taken out of context. Source: WIRED. There is no evidence the Trump assassination attempts were staged. People still believe they were. [online] Available at: https://www.wired.com/story/there-is-no-evidence-the-trump-assassination-attempts-were-staged-people-still-believe-they-were/ Top Of Page Natural Disasters Disinformation Networks Graphika’s founder's appearance on "60 Minutes" on the 26th of April was published in Graphika this week, revealing that natural disasters have become prime opportunities for misinformation actors to exploit public attention and spread false narratives. Because such crises focus widespread public attention on a single event, extremist groups use these moments to push misleading content and amplify distrust in official institutions. These campaigns often present distorted or alternative explanations designed to exploit fear and uncertainty during emergencies. Foreign influence networks, including white nationalist networks, have increasingly used disaster zones to promote themselves through highly visible aid efforts while spreading conspiracy theories that undermine trust in government agencies such as FEMA. By portraying themselves as more effective than official responders, they seek to recruit supporters and legitimize their agendas. Foreign state-linked actors have also weaponized disaster-related disinformation. Chinese influence networks, for example, have used U.S. natural disasters to promote narratives of American government failure while portraying China’s crisis response as superior. Source: Graphika. What We Told 60 Minutes: What Happens Online When Natural Disaster Strikes. [online] Available at: https://graphika.com/posts/what-we-told-60-minutes-what-happens-online-when-natural-disaster-strikes Top Of Page Foreign Manipulation Takes Advantage of the Alberta Separatist Debate According to a report by DisinfoWatch, foreign actors are increasingly exploiting the Alberta separatist debate to spread disinformation, deepen internal divisions, and undermine trust in Canada’s democratic institutions. While Alberta’s political and economic grievances are legitimate topics for democratic debate, external influence campaigns seek to distort these concerns by portraying separation as inevitable or widely supported. This manipulation threatens Canada’s "cognitive sovereignty": the public’s ability to make political decisions free from foreign interference. The report identified three main disinformation sources: covert Russian influence operations, overt amplification by U.S. political figures and influencers, and AI-generated "slopaganda". Russian-linked media networks have repeatedly promoted narratives depicting Alberta as exploited and primed for separation, while U.S.-based influencers have amplified annexation and instability narratives to massive online audiences. At the same time, AI-generated political content can imitate authentic Canadian commentary and make coordinated manipulation harder to detect. The greatest concern is that these disinformation efforts exploit existing public distrust and information gaps, particularly during sensitive political moments such as petition verification, referendum campaigns, or post-vote disputes. The report emphasized that strengthening media literacy, improving rapid-response systems, and supporting independent journalism are essential to countering foreign manipulation before such narratives take hold. Source: DisinfoWatch. Foreign interference targeting Canada and Alberta. [online] Available at: https://disinfowatch.org/foreign-interference-targeting-canada-and-alberta/ Top Of Page The Evolution of South African Media and Its Effect on Society According to an article by The Conversation, South African television reflects the country’s broader political and social struggles, particularly in the way information has been controlled and sometimes distorted. Introduced only in 1976 after years of government resistance, television was initially used by the apartheid regime as a tool of propaganda and exclusion. By limiting access and carefully controlling content, the state used broadcasting to reinforce disinformation, preserve racial segregation, and isolate South Africans from global narratives and alternative perspectives. With the arrival of democracy in 1994, television underwent a major transformation. The broadcasting system shifted from a state-controlled monopoly to a more diverse and competitive media environment, with the SABC redefined as a public broadcaster meant to inform, educate, and represent all communities. This period marked an effort to replace propaganda with inclusive storytelling and nation-building. However, later years saw renewed challenges, including political interference, financial mismanagement, and forms of institutional manipulation that threatened editorial independence and raised concerns about the spread of biased or misleading information. Today, South African television operates in a digital era shaped by streaming platforms and algorithm-driven media. While these platforms offer opportunities to globalize local stories and amplify marginalized voices, they also create new risks of disinformation through commercial influence and unequal control over narratives. The history of South African television highlights the continuing struggle to ensure the media remains a source of accurate representation rather than distortion. Therefore, the fight against disinformation is central to the country’s democratic future. Source: The Conversation. Propaganda machine to public good: A brief history of 50 years of TV in South Africa. [online] Available at: https://theconversation.com/propaganda-machine-to-public-good-a-brief-history-of-50-years-of-tv-in-south-africa-280085 Top Of Page Jailbroken AI Models Fuel Disinformation and Malicious Operations A publication by VSW Bundesverband describes how jailbroken AI models are being exploited by hostile actors to support disinformation operations, cyber activities, and potential physical attacks. By bypassing built-in safeguards, these manipulated systems can generate harmful content that would normally be restricted, including propaganda narratives, malicious guidance, and operational planning materials. The report highlights growing concerns that such capabilities are increasingly accessible to state-linked groups and extremist networks seeking to amplify influence campaigns and destabilizing activities. According to the article, the primary tactic involves “jailbreaking” AI systems through specially crafted prompts designed to override safety controls and content restrictions. Once compromised, the models can be used to automate the creation of persuasive false narratives, coordinate deceptive online messaging, and assist in producing detailed instructions for malicious operations. The article emphasizes that these techniques lower the technical barrier for conducting influence and disruption campaigns at scale. The actors referenced in the article include state-affiliated entities, cybercriminal groups, and other malicious organizations seeking strategic advantages through AI-enabled manipulation. The report frames the issue as part of a broader information security challenge in which generative AI tools are increasingly weaponized for hostile influence operations, disinformation dissemination, and coordinated destabilization efforts. Source: Verein für Sicherheitspolitik (VSW) Bundesverband. Studie: Desinformation. [online] Available at: https://www.vsw-bundesverband.de/wp-content/uploads/Studie-Desinformation.pdf Top Of Page [Appendix - Frameworks to Counter Disinformation] South Korea Battles Surge In AI-Driven Election Disinformation A France24 article examines how South Korea is confronting the rapid expansion of AI-driven disinformation ahead of national and local elections, as increasingly sophisticated generative AI tools enable the production of highly convincing fabricated content. South Korean election authorities and digital forensic teams have identified a sharp rise in manipulated media, including fake television reports, AI-generated political propaganda songs, and fabricated videos targeting political candidates. The report highlights that false AI-generated election content increased dramatically between the 2024 general election and the subsequent presidential campaign, reflecting the accelerating use of generative AI in influence operations. Election officials described the challenge as a constant “whack-a-mole” struggle, with disinformation spreading rapidly across social media platforms, chatrooms, and politically aligned online communities. The article further details how conspiracy narratives surrounding election fraud and vote-rigging have amplified distrust in democratic institutions, including claims promoted by supporters of former president Yoon Suk Yeol. Authorities have responded with strengthened legislation introduced in 2023, allowing the removal of deceptive AI-generated election content and imposing severe penalties on repeat offenders. Detection efforts combine AI-based forensic software with human review to identify manipulated imagery and media. The report emphasizes that hostile information tactics increasingly exploit emotionally persuasive AI-generated narratives, deepfake content, and coordinated amplification across digital platforms, while online harassment and intimidation campaigns against election workers further contribute to the destabilization of the information environment. Source: France 24. AI disinfo tests South Korean laws ahead of local elections. [online] Available at: https://www.france24.com/en/live-news/20260507-ai-disinfo-tests-south-korean-laws-ahead-of-local-elections Top Of Page eYou as a European Alternative to X With AI Fact-Checking According to an article by CyberNews, a new European social media platform called eYou aims to position itself as an alternative to X by offering AI-powered fact-checking in real time. Founded by French entrepreneur Grégoire Vigroux and his partner Jasseem Allybokus, the platform was developed after surveys showed widespread concern about fake news and algorithm-driven echo chambers on social media. eYou use multiple large language models simultaneously to reduce bias and improve fact-checking accuracy, while also dividing its feed into followed accounts, discovery content, and a curated news section powered by sources such as Agence France-Presse. The platform also places strong emphasis on European data sovereignty. According to the company, all user data is stored in Belgium under GDPR protections to reduce dependence on American and Chinese technology platforms. Unlike many social networks, eYou currently operates without advertising and presents itself as a more user-centric and responsible alternative focused on reducing misinformation rather than maximizing engagement. As of now, most users are based in Romania, where the company operates, although the platform is also seeing growing interest from users in the United States. Source: Cybernews. Eyou social media. [online] Available at: https://www.cybernews.com/tech/eyou-social-media/ Top Of Page Poland Launches a New Initiative Against Disinformation As published by TVP World, Poland’s state-owned media organizations launched a joint fact-checking initiative called "Sprawdzam to" ("I’m checking this") to combat the growing spread of disinformation. The project, created by Telewizja Polska, the Polish Press Agency, and Polish Radio, will operate through a new online platform that will publish fact-checks, investigative reports, and analysis of how false information is created and spread. The initiative aims to strengthen public access to verified information and improve awareness of media manipulation. The launch comes amid increasing concerns over foreign disinformation campaigns targeting Poland’s information space. Polish officials have linked many of these operations to Russia and Belarus, describing them as part of hybrid warfare designed to create confusion, weaken public trust, and destabilize the country. According to officials, false narratives have accompanied incidents such as Russian drone incursions into Polish airspace and acts of railway sabotage, with online campaigns attempting to shift blame onto Ukraine or NATO. Source: TVP World. After the drones came the trolls, now Poland is fighting back online. [online] Published 7 May 2026. Available at: https://tvpworld.com/93126173/drones-sabotage-and-trolls-polands-new-front-line-is-fact-checking Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

Cyfluence Research Center (CRC) has identified an emerging, state-aligned influence network targeting English-language discourse about the South China Sea. The campaign combines Chinese institutional actors, credentialed researchers, and inauthentic social media amplifiers to shape international perceptions in favor of the PRC. The network operates through a 3-layered model that includes think tanks, researchers, and inauthentic X accounts that promote dominant narratives framing China as a responsible regional actor while targeting other nations’ presence as destabilizing forces. Key Takeaways CRC researchers identified an emerging coordinated influence network targeting English language discourse on the South China Sea, combining Chinese stateaffiliated institutions, researchers, and inauthentic amplification assets. The network operates through a hybrid model of legitimacy and amplification, where credible actors provide authoritative framing while pseudonymous accounts expand reach and simulate organic engagement. Behavioral indicators demonstrate a deliberate coordination effort, supported by a high volume (~35%) of inauthentic or bot-like activity. The observed cluster is assessed to be in early establishment stages and aligns with known Chinese efforts to achieve long-term narrative dominance. Author: The CRC Team [Download PDF Here]

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 20th to the 26th of April 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] X Investigation Into Disinformation and Misconduct On X Russia The Narrative of Russian Colonialism Russian Propaganda as a Weapon and Its Impact on Belief and Behavior The EU Lists Two Entities for Information Manipulation Activities China Chinese Influence Operation Targets Tibetan Elections Iran Pro-Iran Sources Reframed U.S. Strike Video as Two Different Iranian Victories Antisemitic Narratives Surge Following the Iran Conflict Iran’s Generated Misinformation Strategy During War Iran Uses Viral AI Propaganda to Distract Western Audiences [AI Related Articles] Deepfakes Targeting U.S. Officials AI-Generated Influencer Spreads Political Disinformation Jailbroken AI Enables Disinformation and Attack Planning [General Reports] Orbán’s Hungary Defeat Showed Disinformation is Not a Political Magic Trick The Role of Meme Culture in Shaping War Perception and Understanding Trump Pope Rift Sparked Viral False Claims [Appendix - Frameworks to Counter Disinformation] EU Campaign to Counter Climate Disinformation EU Mission to Strengthen Armenia’s Resilience EU Calls for Initiative to Tackle Evolving Disinformation Threats EU Tackles Disinformation Through New Media Program Biometric Verification to Counter AI-Driven Disinformation and Fraud [CRC Glossary] [ Report Highlights] An article by The Psychological Defense Agency argued that Russia has long functioned as a colonial empire, but that misleading narratives have obscured its history. The European Union announced it has imposed sanctions on two entities: Euromore and Pravfond, for their role in spreading disinformation as part of Russia’s hybrid strategy. As published by DFR Lab, a China-linked influence network known as Spamouflage has been spreading disinformation ahead of the April 26 elections for the Central Tibetan Administration. As published by ISD, following the 28th of February strikes by the United States and Israel on Iran, online antisemitic content rose sharply, increasing by 68% within a week. As revealed in a CyberNews article, a medical student used AI tools, including Gemini, to create a fake online persona named Emily Hart, demonstrating how deepfakes can be monetized. Based on an analysis by Tech Policy Press, Hungary’s April 2026 parliamentary election offered a clear reminder that disinformation is not a decisive political force on its own. As published by NewsGuard's Reality Check, Tensions between Donald Trump and Pope Leo XIV have fueled a wave of viral misinformation on social media, with multiple false claims gaining significant traction online. The European Union announced that its Delegation to Türkiye has launched a new initiative to combat disinformation through a television programme called Ambassadors of Truth, produced in collaboration with CNN Türk. [ Report Summary] According to a report by The Hill, French prosecutors have summoned Elon Musk and former X CEO Linda Yaccarino for questioning over alleged misconduct linked to X. An article by The Psychological Defense Agency argued that Russia has long functioned as a colonial empire, but that misleading narratives have obscured its history. A study by the Ukrainian NGO LingvaLexa, conducted with support from the Office of the Prosecutor General of Ukraine, found that Kremlin propaganda plays a direct and measurable role in shaping the beliefs and behavior of Russian soldiers. The European Union announced it has imposed sanctions on two entities: Euromore and Pravfond, for their role in spreading disinformation as part of Russia’s hybrid strategy. As published by DFR Lab, a China-linked influence network known as Spamouflage has been spreading disinformation ahead of the April 26 elections for the Central Tibetan Administration. As reported by NewsGuard's Reality Check, Pro-Iran social media accounts have circulated a video of a burning ship in the Strait of Hormuz, falsely presenting it as evidence of Iranian military success. An article from Le Monde states that Iranian state-linked actors deploy AI-generated, highly shareable propaganda content to manipulate narratives, amplify anti-Western messaging, and divert attention from domestic issues. As published by ISD, following the 28th of February strikes by the United States and Israel on Iran, online antisemitic content rose sharply, increasing by 68% within a week. According to an article by ISD, since the start of the Iran war, official Iranian accounts on X have shifted from formal messaging to provocative, meme-driven content designed to maximize engagement. A recent analysis by CyberNews found 156 deepfake incidents involving U.S. government officials over two years. As revealed in a CyberNews article, a medical student used AI tools, including Gemini, to create a fake online persona named Emily Hart, demonstrating how deepfakes can be monetized. Based on an analysis by Tech Policy Press, Hungary’s April 2026 parliamentary election offered a clear reminder that disinformation is not a decisive political force on its own. According to an article by Wired, modern conflicts are increasingly mediated through memes and meme-like content that simplify, decontextualize, and emotionally amplify war narratives, often creating a widespread illusion of understanding without deeper knowledge. As published by NewsGuard's Reality Check, Tensions between Donald Trump and Pope Leo XIV have fueled a wave of viral misinformation on social media, with multiple false claims gaining significant traction online. According to a short publication by The European Commission, it has launched the #ClimateFactsMatter campaign to address the growing spread of climate disinformation across the EU. An article published by Politico highlights that jailbroken AI models allow state-linked and malicious actors to bypass safeguards, enabling the spread of disinformation and the generation of detailed plans for cyber and physical attacks. The EEAS European External Action Service announced that the European Union has launched a new civilian mission in Armenia, known as EUPM Armenia, aimed at strengthening the country’s resilience against complex threats. The European Commission announced it has launched a new funding call under its European Democracy Shield strategy to strengthen research on information integrity. The European Union announced that its Delegation to Türkiye has launched a new initiative to combat disinformation through a television programme called Ambassadors of Truth, produced in collaboration with CNN Türk. According to a report by CyberNews, as AI-generated content becomes harder to distinguish from reality, concerns over disinformation and fraud are growing. [Social Media] X Investigation Into Disinformation and Misconduct On X According to a report by The Hill, French prosecutors have summoned Elon Musk and former X CEO Linda Yaccarino for questioning over alleged misconduct linked to X. Central to the investigation are claims that X facilitated the spread of illegal and harmful content, including child sexual abuse material and AI-generated deepfakes. Authorities emphasized that these interviews aim to assess compliance with French law and determine whether platform leadership adequately addressed these risks. A major focus of the case is disinformation generated by Grok. The chatbot reportedly produced false and harmful content, including Holocaust denial narratives and explicit nonconsensual deepfakes. Although Grok later corrected some outputs, the incident raised serious concerns about how AI systems can amplify disinformation on a scale. French officials are also investigating whether X’s algorithms contributed to biased or distorted information flows, further undermining public trust. Prosecutors additionally suspect that the controversy surrounding Grok’s disinformation may have been deliberately amplified to influence market value ahead of a planned corporate listing involving Musk’s companies. Meanwhile, U.S. authorities currently decline to assist the French probe. Source: Associated Press. French prosecutors summon Elon Musk over allegations of child abuse images and deepfakes on X. [online] Published 20 April 2026. Available at: https://thehill.com/homenews/ap/ap-technology/france-elon-musk-x-social-media/?email=467cb6399cb7df64551775e431052b43a775c749&emaila=12a6d4d069cd56cfddaa391c24eb7042&emailb=054528e7403871c79f668e49dd3c44b1ec00c7f611bf9388f76bb2324d6ca5f3&utm_source=Sailthru&utm_medium=email&utm_campaign=04.20.26%20Tech Top Of Page [State Actors] Russia The Narrative of Russian Colonialism An article by The Psychological Defense Agency argued that Russia has long functioned as a colonial empire, but that misleading narratives have obscured its history. Unlike other European empires, Russian expansion has often been framed as defensive or civilizing rather than imperial. Such narratives act as a form of disinformation, masking patterns of domination and shaping global misunderstanding of both past and present conflicts, including the war in Ukraine. Propaganda and distorted historical claims have been used to justify Russian actions. These include portraying conquest as beneficial, denying colonial practices, and spreading narratives that Russia is uniquely “anti-colonial.” The article points to modern examples like state-aligned media and online content that present occupation as positive while ignoring violence, repression, and cultural erasure. It concluded that such disinformation has severe consequences - it delays recognition of imperial behavior, weakens international responses, and enables continued aggression. Source: Psychological Defence Agency. The Last European Colonial Empire. [online] Published 2026. Available at: https://mpf.se/download/18.732eef4e19d7078d81ab8/1775717958942/The-last-european-colonial-empire.pdf Top Of Page Russian Propaganda as a Weapon and Its Impact on Belief and Behavior A study by the Ukrainian NGO LingvaLexa, conducted with support from the Office of the Prosecutor General of Ukraine, found that Kremlin propaganda plays a direct and measurable role in shaping the beliefs and behavior of Russian soldiers. Based on surveys of over 1,000 prisoners of war, the research showed that a large majority accepted at least some state narratives, with many viewing the invasion of Ukraine as justified. Those who believed propaganda more strongly were significantly more likely to support the war, dehumanize Ukrainians, resist surrender, and express willingness to fight again, indicating that propaganda is not just background noise, but a key driver of combat motivation. The study also highlighted the central role of anti-Western narratives, which frame the war as a defensive struggle against NATO and a broader "decadent" West. These narratives were widely believed among surveyed soldiers and proved just as influential as other propaganda themes in shaping attitudes and behavior. The findings suggested that propaganda should be understood as a core instrument of modern warfare, one that facilitates mobilization, sustains aggression, and influences battlefield decisions. The report called for stronger international recognition of propaganda as a tool of aggression, including potential legal accountability not only for political leaders but also for those involved in creating and disseminating such narratives. Source: The Ukrainian NGO LingvaLexa. Words that Kill: How Russian Propaganda Shapes Mobilizarion and Combat Motivation. [online] Google Drive. Available at: https://drive.google.com/file/d/1NEQFv4YCQ0boNq6EbIeIDeqyUTwn3U6n/view Top Of Page The EU Lists Two Entities for Information Manipulation Activities The European Union announced it has imposed sanctions on two entities: Euromore and Pravfond, for their role in spreading disinformation as part of Russia’s hybrid strategy. Euromore functions as an unofficial media relay, amplifying and legitimizing pro-Kremlin narratives aimed at European audiences, including content that questions the legitimacy of EU institutions and justifies Russia’s war against Ukraine. Pravfond, funded by the Russian state, contributes to disinformation through legal and analytical materials that reinforce key propaganda claims. These include false narratives such as the "Nazification of Ukraine”, "Russophobia”, and alleged persecution of Russian-speaking populations in neighboring countries. Together, these efforts are designed to manipulate public perception and weaken trust in democratic institutions. At the same time, as reported by EU VS Disinfo, pro-Kremlin disinformation continues to recycle familiar narratives. These include portraying Ukraine as a "terrorist state" allegedly supported by NATO, reviving long-debunked conspiracy theories about Western "biolabs", and spreading false claims about secret NATO infrastructure. Disinformation surrounding the Bucha massacre has also evolved, from outright denial to more complex conspiracy theories aimed at deflecting responsibility for documented war crimes. Source: European External Action Service (EEAS). Russian hybrid threats: EU lists two entities over information manipulation activities. [online] Published 22 April 2026. Available at: https://www.eeas.europa.eu/delegations/ukraine/russian-hybrid-threats-eu-lists-two-entities-over-information-manipulation-activities_en EUvsDisinfo. Disinformation Review: EU sanctions and the Kremlin’s recycled narratives. [online] Available at: https://euvsdisinfo.eu/disinformation-review-eu-sanctions-and-the-kremlins-recycled-narratives/ Top Of Page China Chinese Influence Operation Targets Tibetan Elections As published by DFR Lab, a China-linked influence network known as Spamouflage has been spreading disinformation ahead of the April 26 elections for the Central Tibetan Administration. This activity is part of a broader pattern of Chinese information manipulation targeting multiple countries and issues, including Taiwan, the United States, and Japan. Using dozens of fake Facebook and Instagram profiles, the operation promotes misleading narratives aimed at undermining trust in the Tibetan democratic process. These include personal attacks against leader Penpa Tsering, claims that the elections are manipulated, and portrayals of the government as corrupt or dominated by religious elites. The campaign relies on coordinated, inauthentic behavior, including mass-sharing posts within its own network to simulate credibility. It also amplifies real controversies by inserting false or exaggerated claims, attempting to deepen divisions within the Tibetan community. AI-generated images and recycled narratives are used to make the disinformation appear more convincing, although most posts receive little genuine engagement. Despite becoming more technologically sophisticated, the operation has largely failed to gain significant organic traction. Source: Digital Forensic Research Lab (DFRLab). China-linked Spamouflage targets Tibetan parliament-in-exile elections. [online] Published 24 April 2026. Available at: https://dfrlab.org/2026/04/24/china-linked-spamouflage-targets-tibetan-parliament-in-exile-elections/ Top Of Page Iran Pro-Iran Sources Reframed U.S. Strike Video as Two Different Iranian Victories As reported by NewsGuard's Reality Check, Pro-Iran social media accounts have circulated a video of a burning ship in the Strait of Hormuz, falsely presenting it as evidence of Iranian military success. Initially, the footage was shared as proof that Iran had sunk a U.S. vessel near Bandar Abbas. Days later, the same video was reused to claim that Iranian forces had severely damaged Indian-flagged ships. In reality, the video showed a U.S. strike on an Iranian warship, identified through visual analysis as the IRIS Haj Qasem, with no credible evidence supporting either of the viral claims. The misinformation emerged amid escalating tensions following the collapse of U.S.-Iran peace talks and a subsequent maritime blockade ordered by Donald Trump. Since the war began in late February 2026, reports indicated that over 155 Iranian naval vessels have been destroyed by U.S. and Israeli operations. While Iran did intercept two Indian-flagged ships, verified reports showed only minor damage, with no injuries or major losses. Source: NewsGuard. One video, two conflicting false narratives. [online] Available at: https://www.newsguardrealitycheck.com/p/one-video-two-conflicting-false-narratives Top Of Page Antisemitic Narratives Surge Following the Iran Conflict As published by ISD, following the 28th of February strikes by the United States and Israel on Iran, online antisemitic content rose sharply, increasing by 68% within a week. Much of this surge was driven by disinformation and conspiracy theories, particularly claims that the war was a “false flag” orchestrated by Jewish elites or that Western governments are controlled by a hidden Jewish power structure. These narratives, widely shared across platforms, reframed the conflict through misleading and harmful lenses that amplified distrust and hostility. Disinformation also spread through distorted criticism of Israel, where legitimate political debate was often mixed with antisemitic tropes. Online content frequently blames Jewish communities worldwide for the actions of the Israeli state or uses Holocaust-related distortions to push false narratives. At the same time, direct hate speech and slurs increased significantly, creating a more aggressive and hostile digital environment shaped by viral misinformation and conspiracy-driven rhetoric. This wave of disinformation had real-world consequences, coinciding with a rise in antisemitic attacks across several countries. Source: Institute for Strategic Dialogue (ISD). The impact of the war with Iran on antisemitic discourse. [online] Published 22 April 2026. Available at: https://www.isdglobal.org/digital-dispatch/the-impact-of-the-war-with-iran-on-antisemitic-discourse/ Top Of Page Iran’s Generated Misinformation Strategy During War According to an article by ISD, since the start of the Iran war, official Iranian accounts on X have shifted from formal messaging to provocative, meme-driven content designed to maximize engagement. This includes AI-generated and misleading visuals targeting figures like Donald Trump and references to conspiracy-linked individuals such as Jeffrey Epstein. While often framed as humor, this content blends satire with disinformation, distorting political narratives and trivializing serious geopolitical issues. The strategy has proven highly effective in spreading these narratives, generating hundreds of millions of views and dramatically increasing likes, shares, and comments. By using viral, platform-native formats, Iranian state actors have expanded their reach and made disinformation more accessible, especially to online audiences less engaged with traditional political messaging. This approach has also helped reshape perceptions of Iran, portraying it as a relatable or even sympathetic “underdog” rather than focusing on its controversial policies or human rights record. Source: Institute for Strategic Dialogue (ISD). Iran’s diplomats launch a meme war. [online] Published 23 April 2026. Available at: https://www.isdglobal.org/digital-dispatch/irans-diplomats-launch-a-meme-war/ Top Of Page Iran Uses Viral AI Propaganda to Distract Western Audiences An article from Le Monde describes a coordinated Iranian propaganda campaign that leverages advanced generative AI and pop-culture aesthetics to conduct influence operations targeting Western audiences. Regime-linked actors, particularly a studio identified as Explosive Media, produce high-quality animated videos, often using Lego-style visuals, that mock U.S. and Israeli leaders and promote anti-Western narratives. These materials are disseminated across major social media platforms (X, Facebook, Instagram, TikTok), achieving large-scale reach through viral distribution, with hundreds of millions of views. The campaign combines technical sophistication with humor, satire, and emotionally engaging content to increase acceptability and shareability, particularly among politically disengaged or neutral audiences. Tactically, the operation relies on narrative manipulation, co-opting existing anti-establishment sentiment and embedding ideological messaging within entertaining formats to obscure propagandistic intent. It employs distortion and omission, including downplaying or denying state violence and reframing geopolitical dynamics to divide adversaries, such as portraying the United States as subordinate to Israel. The campaign also exploits amplification dynamics, as media coverage and public attention in the West further extend its reach, inadvertently reinforcing its impact. Analysts warn that this strategy diverts attention from domestic repression in Iran and functions as a broader disinformation effort aimed at weakening democratic discourse by shaping perceptions and redirecting focus away from human rights issues. Source: Le Monde. How Tehran’s propaganda lures the West into distraction. [online] Published 25 April 2026. Available at: https://www.lemonde.fr/en/les-decodeurs/article/2026/04/25/how-tehran-s-propaganda-lures-the-west-into-distraction_6752815_8.html Top Of Page [AI Related Articles] Deepfakes Targeting U.S. Officials A recent analysis by CyberNews found 156 deepfake incidents involving U.S. government officials over two years. Most cases focus on a small group of high-profile figures, especially Donald Trump, who alone accounts for 58% of all incidents. Notably, some of these deepfakes are self-generated or shared by individuals, blurring the line between deliberate disinformation and political messaging. Other frequent targets include Marco Rubio, JD Vance, and Alexandria Ocasio-Cortez. While the raw numbers suggest Republicans are targeted more often, this is largely due to Trump’s dominance in the dataset; excluding him, deepfake incidents are relatively balanced between political parties. Generally, Deepfake-driven disinformation tends to focus on widely recognizable leaders rather than on the broader political system, as familiar figures are more likely to attract attention and influence public opinion. Source: Cybernews. Trump, Rubio and Vance are the most deepfaked U.S. government officials in office today. [online] Published 23 April 2026. Available at: https://cybernews.com/ai-news/most-deepfaked-us-government-officials/ Top Of Page AI-Generated Influencer Spreads Political Disinformation As revealed in a CyberNews article, a medical student used AI tools, including Gemini, to create a fake online persona named Emily Hart, demonstrating how deep fakes can be monetized. By targeting a specific political audience of older, conservative, pro-Trump users, the creator crafted posts promoting divisive and misleading narratives on issues like immigration, religion, and politics, often aligned with supporters of Donald Trump. The strategy relied on AI-generated images and tailored messaging designed to appear authentic and emotionally engaging. This approach quickly gained traction, with some posts reaching millions of views and attracting thousands of followers, many of whom paid for exclusive content. Although the accounts were eventually suspended, the operation shows how easily individuals can use AI to create convincing fake identities that spread misleading content on a large scale. Sources: Cybernews. Indian man is behind MAGA’s AI-generated sweetheart Emily Hart. [online] Published 25 April 2026. Available at: https://cybernews.com/ai-news/emily-hart-maga/ Top Of Page Jailbroken AI Enables Disinformation and Attack Planning An article published by Politico highlights the growing exploitation of artificial intelligence by malicious actors, demonstrating how AI systems, when stripped of built-in safeguards, can be weaponized to support harmful and potentially violent activities. Researchers from the National Counterterrorism Innovation, Technology and Education Center (NCITE) showed U.S. lawmakers that “jailbroken” or “abliterated” AI models, with disabled safety mechanisms, can generate detailed instructions for terrorism, cyberattacks, and criminal acts. These models, unlike safeguarded “censored” systems, provide step-by-step guidance for executing attacks, illustrating how easily adversaries can manipulate AI tools to bypass restrictions. Tactics used include prompt engineering techniques, such as disguising harmful queries in complex or academic language, to evade detection systems and extract prohibited information. The article also identifies state-linked actors and cyber threat groups as key participants in leveraging AI for disinformation and offensive operations. Russia-linked groups have reportedly used AI models to disseminate disinformation online, while Beijing-backed hackers attempted to automate cyberattacks using advanced language models. The accessibility of off-the-shelf AI tools further lowers the barrier for such activities, increasing the risk of widespread misuse. Overall, the article underscores a rapidly evolving threat landscape in which both state and non-state actors exploit vulnerabilities in AI systems to conduct influence operations, spread disinformation, and enable harmful real-world actions, raising significant concerns about the adequacy of current safeguards and regulatory responses. Sources: Politico. AI chatbots can be jailbroken, alarming lawmakers and exposing safety gaps. [online] Published 22 April 2026. Available at: https://www.politico.com/news/2026/04/22/ai-chatbots-jailbreak-safety-00887869 Top Of Page [General Reports] Orbán’s Hungary Defeat Showed Disinformation is Not a Political Magic Trick Based on an analysis by Tech Policy Press, Hungary’s April 2026 parliamentary election offered a clear reminder that disinformation is not a decisive political force on its own. In the election, Viktor Orbán and his Fidesz party lost to newcomer Péter Magyar, despite a campaign marked by extensive pro-government disinformation. While Fidesz spread coordinated false claims, such as manipulated videos alleging plans to reintroduce conscription, this did not prevent a decisive opposition victory. The findings reinforced that the purpose of factchecking is not to sway election outcomes, but to provide voters with reliable information and tools to assess claims independently. The campaign also highlighted the limits of other commonly cited influences. Russian-linked disinformation efforts appeared weak and largely ineffective compared to domestic propaganda networks. At the same time, AI-generated political content was widely used by both sides, often to provoke emotional responses rather than to convincingly deceive. Meanwhile, the EU-driven ban on political advertising by platforms such as Meta and Google significantly reduced the volume of online propaganda and may have benefited the opposition, which achieved stronger organic engagement. Source: Fülöp, Z. and Teczár, S. Orbán’s Hungary defeat shows disinformation is not a political magic trick. [online] Tech Policy Press. Published 20 April 2026. Available at: https://www.techpolicy.press/orbns-hungary-defeat-shows-disinformation-is-not-a-political-magic-trick/ (techpolicy.press) Top Of Page The Role of Meme Culture in Shaping War Perception and Understanding According to an article by Wired, Recent conflicts involving the United States, Iran, Israel, and Lebanon have spread widely on social media, not only through news but through memes. These ranged from jokes about conscription and viral songs to dark humor about missile strikes and wartime life. While humor has long been a way to cope with fear and uncertainty, social media has transformed it into a fast-moving, global phenomenon. Memes are designed to be simple, relatable, and highly shareable, often stripping away context in favor of engagement. Governments are increasingly adopting meme-like formats to shape narratives, blending real footage with cinematic edits, gaming references, or AI-generated visuals. This content spreads easily because it mirrors the language of online culture, making propaganda more accessible and emotionally engaging. However, this environment creates an "illusion of understanding", where constant exposure to simplified content makes people feel informed without deep knowledge. Source: WIRED. War memes are turning conflict into content. [online] Published 20 April 2026. Available at: https://www.wired.com/story/war-memes-turn-conflict-into-content/ Top Of Page Trump Pope Rift Sparked Viral False Claims As published by NewsGuard's Reality Check, Tensions between Donald Trump and Pope Leo XIV have fueled the spread of 3 viral false claims related to the Catholic Church, garnering 1.5 million views on the social media platform X alone. The claims began spreading on the 12th of April 2026, following public criticism exchanged between the two figures. Both pro- and anti-Trump users circulated claims that the pope donated to Kamala Harris’s campaign, a fabricated quote attributed to Cardinal Timothy Dolan supporting Trump, and a fake post suggesting Trump threatened the Vatican with secret "files". None of these claims is supported by evidence. Source: NewsGuard. Trump-Pope rift sparks viral false claims. [online] Published 24 April 2026. Available at: https://www.newsguardrealitycheck.com/p/trump-pope-rift-sparks-viral-false Top Of Page [Appendix - Frameworks to Counter Disinformation] EU Campaign to Counter Climate Disinformation According to a short publication by The European Commission, it has launched the #ClimateFactsMatter campaign to address the growing spread of climate disinformation across the EU. Led by its climate department, the initiative provides multilingual resources: videos, infographics, and guides, to help citizens recognize misleading content and better understand climate issues and policies. The campaign focuses on exposing how disinformation distorts public understanding of climate change, often by spreading false or misleading claims that undermine trust in scientific facts and delay action. It offers practical tools for identifying manipulation techniques and encourages critical thinking about the sources and intent behind climate-related information. Source: European Commission, Directorate-General for Climate Action. #ClimateFactsMatter: Countering climate disinformation in the EU. [online] Published April 2026. Available at: https://climate.ec.europa.eu/eu-action/climate-disinformation/climatefactsmatter-countering-climate-disinformation-eu_en (climate.ec.europa.eu) Top Of Page EU Mission to Strengthen Armenia’s Resilience The EEAS European External Action Service announced that the European Union has launched a new civilian mission in Armenia, known as EUPM Armenia, aimed at strengthening the country’s resilience against complex threats. Operating under the Common Security and Defence Policy, the mission will provide strategic and operational support to Armenian institutions in addressing challenges such as foreign information manipulation and interference (FIMI), cyberattacks, and illicit financial activities. It will focus on capacity building across government bodies and promote a coordinated, whole-of-government approach to crisis management and national security. The mission, requested by Armenian authorities, will initially run for two years and be headquartered in Armenia. It complements the existing EU Mission in Armenia, which focuses on observation and confidence-building in conflict-affected areas. Source: European External Action Service (EEAS). Armenia: EU establishes a new civilian mission to contribute to strengthening the country’s resilience. [online] Published 21 April 2026. Available at: https://www.eeas.europa.eu/delegations/armenia/armenia-eu-establishes-new-civilian-mission-contribute-strengthening-country%E2%80%99s-resilience_en (consilium.europa.eu) Top Of Page EU Calls for Initiative to Tackle Evolving Disinformation Threats The European Commission announced it has launched a new funding call under its European Democracy Shield strategy to strengthen research on information integrity. The initiative responds to the rapid rise of disinformation and manipulation tactics online, including the use of AI-generated content, fake websites, influencer misuse, and the exploitation of algorithms to amplify misleading or divisive narratives. The proposal emphasized that by distorting information environments, influencers can affect elections, policy debates, and individual choices, making it essential to better understand how such manipulation operates and spreads. To counter this, the EU plans to invest in research infrastructure and collaboration across sectors such as academia, civil society, and technology to improve the ability to detect, analyze, and respond to disinformation. Source: European Commission. New open call for proposals under the Digital Europe Programme. [online] Published 21 April 2026. Available at: https://digital-strategy.ec.europa.eu/en/news/new-open-call-proposals-under-digital-europe-programme Top Of Page EU Tackles Disinformation Through New Media Program The European Union announced that its Delegation to Türkiye has launched a new initiative to combat disinformation through a television programme called Ambassadors of Truth, produced in collaboration with CNN Türk. The show aims to educate audiences about how disinformation operates, why it spreads, especially during crises, and how individuals can better recognize and resist misleading content. Hosted by Nezih Orhon, the programme brings together experts from academia, media, and fact-checking organizations to examine key disinformation challenges. Topics include the risks of AI-generated content, health misinformation, foreign influence campaigns, and the vulnerabilities of children and families in the digital space. It also highlights how false or manipulated information can undermine trust and decision-making. Beyond raising awareness, the initiative focuses on practical solutions, offering viewers tools to verify information and navigate online media more critically. Source: European External Action Service (EEAS). Delegation of the European Union to Türkiye takes a new step in the fight against disinformation: “Ambassadors of Truth” premieres on CNN Türk. [online] Published 24 April 2026. Available at: https://www.eeas.europa.eu/delegations/t%C3%BCrkiye/ambassadors-truth_en Top Of Page Biometric Verification to Counter AI-Driven Disinformation and Fraud According to a report by CyberNews, as AI-generated content becomes harder to distinguish from reality, concerns over disinformation and fraud are growing. A company co-founded by Sam Altman, Tools for Humanity, is partnering with Match Group and Zoom to introduce biometric identity verification. Their solution, the “Orb”, uses iris scanning to confirm whether users are real humans, aiming to reduce the spread of fake identities and AI-generated personas online. This effort responds to the increasing use of synthetic media and deepfakes in disinformation campaigns and scams. Instead of detecting fake content directly, the system verifies real users and assigns a “proof-of-human” badge to their profiles. While technology promises greater trust and security, it also raises questions about privacy and accessibility. As AI continues to enable large-scale deception, tools like biometric verification highlight the growing need for new defenses against disinformation, even as they introduce new challenges around data protection and user trust. Source: Cybernews. Sam Altman’s iris-scanning company joins forces with Tinder and Zoom to exterminate deepfake scams. [online] Published 23 April 2026. Available at: https://cybernews.com/ai-news/tinder-zoom-human-verification/ Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page