Background A recent OCCRP investigation revealed leaked documents related to the Social Design Agency (SDA), a Russian firm and long-time hostile influence campaigns (HICs) contractor executing “cognitive strikes” against Western countries. The investigation focused in part on a September 2025 Islamophobic incident in which several mosques and cultural centers in and around Paris reported pig heads marked with the word “Macron” left outside their entrances. These attacks appeared to extend beyond the physical act itself. Following online amplification, it drew extensive media attention and fed existing societal tensions and political polarization. The newly leaked documents demonstrate how hybrid threats, such as multi-dimensional influence efforts, increasingly integrate physical and digital aspects into a single operational structure. Rather than functioning only through online platforms, hostile influence campaigns (HICs) instigate and exploit real-world events to continuously destabilize adversaries. Revisiting The Russian Cognitive Warfare Playbook The reported operations align closely with established patterns of Russian hostile influence activity. One of the most prominent remains the DSA-linked Doppelgänger campaign coordinated information operations with the orchestration of antisemitic incidents in Paris to amplify social polarization. The uncovered modus operandi reflects the persistent rationale behind Russian HICs: the exploitation of existing societal fault lines surrounding immigration, nationalism, religion, identity politics and institutional distrust. Instead of creating an entirely new narrative, Russian foreign information manipulation and interference (FIMI) operations are designed to intensify pre-existing tensions within targeted democratic and western societies. Importantly, the convergence between cognitive and physical effects is increasingly visible within urban environments. Hostile FIMI activities, including the instigation and exploitation of racial, religious or politically-charged incidents, mostly occur within urban environments. They are aimed against high-value managed contested spaces (MCSs), such as major cities, demonstrating how local communities and municipal authorities are in fact the front lines of hybrid geopolitical conflict, a dynamic that is central to the CRC’s Urban Cyfluence Framework initiative. The leaked material also provides a valuable behind-the-scenes view, in the form of internal SDA chats. These shed new light on the organizational structure behind the firm’s operations, particularly through the role of Sofia Zakharova, a Russian senior official who appeared under the name of “Kristin Kiler”. The exposed conversations suggest that Zakharova operated as a coordinating figure between the SDA and senior administration officials, overseeing operational updates, funding discussions, and broader project management across multiple campaigns. Zakharova was previously sanctioned by several Western countries due to her involvement in previous Russian influence operations. Figure 1 - EU sanctions designation of Sofia Avraamovna Zakharova, issued in December 2024, citing her continued involvement in hostile Russian information manipulation and interference activities, including the Doppelganger campaign. 1, 2 The internal documents further suggest that these activities were not isolated operations, but part of wider and ongoing destabilization efforts. Plans for 2026 included projects focused on monitoring Western opinion leaders, creating media platforms, and expanding AI-assisted informational capabilities across several European information environments. The leaked documents thus highlight the emphasis on operational continuity, connecting past, present and to-be-executed narrative attacks. While the methods continue to adapt across different platforms and environments, the long-term strategic objective remains consistent. Multi-Dimensional Operations One of the most important aspects of the reported activities was the operational fusion between the physical, digital and cognitive layers. The pig-head attacks were not just physical provocations, but were meant to drive online discourse, attract media attention, and trigger political reactions. This operational hybridity – recently defined by the Cyfluence Security Paradigm – reflects an increasingly common model for influence operations: A provocative physical act generates emotional reactions. Visual content from the incident is being circulated across online platforms. Media coverage and coordinated inauthentic activity amplify and reframe narratives. Polarized public and political discourse affect societal cohesion. The HICs described in the leaked documents demonstrate how hostile influence efforts increasingly function as multi-dimensional threats. These threats are not limited to fictitious narratives or synthetic propaganda proliferated online. Instead, physical acts of provocation and online amplification are used as core components that elevate the sophistication of modern hybrid threats. Implications for Cognitive Security and Defensive Cyfluence Although this operational structure complicates influence defense efforts, the exposure of ongoing Russian FIMI activities targeting Western communities and MCSs through the opportunistic exploitation and orchestration of hate crimes demonstrates the value of proactive defensive cyfluence operations. Much like the exposure of Russian proxy interference efforts surrounding the Moldovan elections – where a timely hack-and-leak operation revealed the operational architecture of Ilan Shor’s FIMI apparatus – this case, alongside previous SDA leaks (which were likely cyber-enabled rather than HUMINT-derived), underscores the strategic importance of publicly exposing adversarial methods, infrastructure, and objectives. Regardless of the information’s source, these crucial disclosures help in neutralizing future narrative attacks, while supporting the cognitive resilience of targeted communities against hybrid threats. [References:] https://data.europa.eu/apps/eusanctionstracker/subjects/171196 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=OJ:L_202403188#:~:text=3.-,Sofia%20Avraamovna%20ZAKHAROVA,-(Russian%3A%20%D0%A1%D0%BE%D1%84%D0%B8%D1%8F%20%D0%90%D0%B2%D1%80%D0%B0%D0%B0%D0%BC%D0%BE%D0%B2%D0%BD%D0%B0

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 01st to the 07th of June 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Turkish Propaganda Amplifies Russian Misinformation About the Armenian Elections Russian Information Campaigns Ahead of Armenia’s Elections False Narratives Surrounding the Baltic Drone Incursions Abu Dhabi-Based Video News Agency Links to RT The War in Ukraine FSB’s “Matryoshka” Cyberespionage Campaign Against Ukraine China Congressional Concerns Over Foreign Influence on U.S. AI Development Misinformation About Anthropic’s Access in China Iran Handala Brand Threat Expands to Support MOIS Operations [AI Related Articles] 2026 U.S. Midterm Election Threat Outlook Uncensored AI Accelerates the Spread of Conspiracy Theories Online Disinformation About London AI Use in Political Campaigns Gemini Omni Generates Videos Advancing False Online Claims AI-Generated Police “Drag Queen Raid” Story Misleads Global Media [General Reports] 2026 FIFA World Cup Threat Outlook NATO’s Defence Strategic Communications Journal Modeling the Strategic Logic of Disinformation Governance NSO Group Breaks Court Order, Targets Journalists and Officials via WhatsApp [Appendix - Frameworks to Counter Disinformation] Using TrustOps in Governments' Fight Against Deepfakes and Disinformation Tools for Addressing Climate Misinformation in Reporting Training Platform to Investigate Online Influence Campaigns [CRC Glossary] [ Report Highlights] According to an article by DFR Lab, following drone incursions into Latvia and Estonia in March 2026 and another incident in Latvia in May, pro-Russia media and officials promoted claims that the Baltic states had opened their airspace to support Ukrainian drone attacks against Russia. A three-part investigation by Sekoia reconstructed the cyberespionage group Gamaredon’s 2026 infection chain and clarified its malware ecosystem through a unified taxonomy. According to NewsGuard’s Reality Check, pro-China social media accounts have circulated claims that American AI company Anthropic has begun allowing users in China to access its Claude chatbot. According to a report by Insikt Group, Iran’s Ministry of Intelligence has likely expanded its use of the Handala brand beyond cyber activities to include physical threat actors and influence operations targeting U.S. and Israeli interests. Research by CIR, assisted by other research, found a growing volume of online content portraying London as unsafe, lawless, and in decline. A survey of campaign professionals found that AI has become a routine part of political operations, with 87% using it daily or several times a week. A NewsGuard assessment found that Google’s text-to-video model, Gemini Omni, was able to generate realistic videos illustrating several false claims that have circulated online. Song Xiaoyu's article, published in Scientific Reports, proposes a behavioral game-theoretic model that shows that effective disinformation governance requires penalties severe enough to cross a psychological loss-aversion threshold that shifts platforms from passive to active content moderation. [ Report Summary] A NewsGuard investigation identified Turkish freelance journalist Okay Deprem as a significant source of false narratives circulated ahead of Armenia’s June 2026 parliamentary elections. According to an article by DFR Lab, following drone incursions into Latvia and Estonia in March 2026 and another incident in Latvia in May, pro-Russia media and officials promoted claims that the Baltic states had opened their airspace to support Ukrainian drone attacks against Russia. A Bellingcat investigation examined the relationship between Viory, an Abu Dhabi-based video news agency that promotes itself as a “video news agency of the Global South,” and Ruptly, a video agency connected to Russian state media outlet RT. A three-part investigation by Sekoia reconstructed the cyberespionage group Gamaredon’s 2026 infection chain and clarified its malware ecosystem through a unified taxonomy. The House Committee on Energy and Commerce’s letter has raised concerns about evidence suggesting that foreign influence campaigns may be attempting to slow U.S. artificial intelligence development and the infrastructure needed to support it. According to NewsGuard’s Reality Check, pro-China social media accounts have circulated claims that American AI company Anthropic has begun allowing users in China to access its Claude chatbot. According to a report by Insikt Group, Iran’s Ministry of Intelligence has likely expanded its use of the Handala brand beyond cyber activities to include physical threat actors and influence operations targeting U.S. and Israeli interests. As stated in a Check Point publication, the 2026 U.S. midterm election cycle will likely see increased cyber-related activity targeting the election ecosystem, including campaigns, media organizations, and government services. As published in a NewsGuard Reality Check, “Uncensored AI” is a chatbot that promotes itself as a source of “unfiltered” and “objective” information, positioning itself as an alternative to mainstream AI models. Research by CIR, assisted by other research, found a growing volume of online content portraying London as unsafe, lawless, and in decline. A survey of campaign professionals found that AI has become a routine part of political operations, with 87% using it daily or several times a week. A NewsGuard assessment found that Google’s text-to-video model, Gemini Omni, was able to generate realistic videos illustrating several false claims that have circulated online. As revealed by CyberNews, an AI-generated image shared on a Thai police Facebook page falsely depicted officers dressed as drag queens during a drug raid, leading to widespread media coverage of what appeared to be a real undercover operation. Song Xiaoyu's article, published in Scientific Reports, proposes a behavioral game-theoretic model that shows that effective disinformation governance requires penalties severe enough to cross a psychological loss-aversion threshold that shifts platforms from passive to active content moderation. According to Recoded Future’s paper, the 2026 FIFA World Cup is expected to face a complex threat environment across the United States, Mexico, and Canada. The new Defence Strategic Communications journal of the NATO Strategic Communications Centre of Excellence argued that societies need new, credible narratives to address political, economic, and technological transformation. Meta published that despite a permanent court injunction, NSO Group continued spear phishing operations against journalists, officials, and civil society actors via WhatsApp, prompting Meta to seek a federal contempt order and publish threat indicators. As published by the Global Government Forum, Gartner predicted that by 2028, 40% of government organizations will establish dedicated “TrustOps” functions to address growing risks from deepfakes and other forms of disinformation. A webinar organized by the International Federation of Journalists (IFJ) focused on helping journalists identify and respond to misleading climate-related claims. Check First introduced “Tutki”, a training platform developed to provide realistic OSINT and online investigation exercises based on real-world cases and information environments. [State Actors] Russia Turkish Propaganda Amplifies Russian Misinformation About the Armenian Elections A NewsGuard investigation identified Turkish freelance journalist Okay Deprem as a significant source of false narratives circulated ahead of Armenia’s June 2026 parliamentary elections. According to the report, 17 of the 43 claims promoted by the pro-Kremlin influence operation Storm-1516 originated with Deprem. These allegations targeted Prime Minister Nikol Pashinyan and included claims about constitutional changes, personal scandals, and concessions to Türkiye and Azerbaijan. Rather than relying on fake websites, many of these stories were first published in established Turkish media outlets, allowing them to appear more credible before spreading across social media and regional news networks. Armenia has become a major focus of Russian influence efforts as Pashinyan continues to pursue closer ties with the European Union and the West. Researchers found that Storm-1516 directed more narratives at Armenia over the past year than at Ukraine, reflecting Moscow’s concern over Armenia’s geopolitical trajectory. Analysts described the campaign as more sophisticated than previous efforts, combining political messaging with personal attacks designed to influence undecided voters ahead of the election. Several examples highlighted in the investigation involve claims that were later denied or contradicted by available evidence, including allegations concerning Pashinyan’s wife and reports of government approval for an LGBTQ parade. Such stories moved from Turkish media outlets to pro-Kremlin social media accounts and regional news platforms, amplifying their reach. Source: NewsGuard. How a Turkish Propagandist Powers a Russian Campaign Targeting Armenia’s Elections. [online] Published 4 June 2026. Available at: https://www.newsguardtech.com/special-reports/how-a-turkish-propagandist-powers-a-russian-campaign-targeting-armenias-elections/ (newsguardtech.com) Top Of Page Russian Information Campaigns Ahead of Armenia’s Elections According to a report by The Jamestown Foundation, ahead of Armenia’s 07th June parliamentary elections, Russia has pursued a broad campaign to weaken support for Prime Minister Nikol Pashinyan and his Civil Contract party. According to the article, Moscow’s strategy focuses less on securing victory for a single opposition candidate and more on strengthening multiple opposition forces to prevent Civil Contract from achieving a dominant parliamentary position. The elections are widely viewed as a choice between maintaining Armenia’s current pro-Western course and preserving closer ties with Russia. A central element of this effort has been an extensive information campaign. Reports cited in the article state that pro-Kremlin media channels and the “Matryoshka” network have circulated hundreds of videos and messages targeting Pashinyan, including claims about his health, his policies, and Armenia’s relations with Russia. Many of these narratives portray Pashinyan as endangering Armenia’s stability, risking conflict with Russia, or undermining the country’s national identity, while presenting opposition figures as better suited to maintain relations with Moscow. These messaging efforts have been accompanied by economic pressure. Russia has warned Armenia about the costs of deeper integration with the European Union, threatened higher gas prices, and imposed restrictions on several Armenian exports. Adding to this subject, a joint investigation by DFRLab and CivilNet examined the activities of the Russian NGO Evrazia in Armenia ahead of the June 2026 parliamentary elections. Evrazia, which has been sanctioned by the United States, European Union, and United Kingdom, is replicating methods previously observed in Moldova. Through humanitarian aid programs, educational initiatives, church-related campaigns, and online platforms, the organization has sought to build networks of influence and mobilize public support around political and social issues. Researchers also highlighted Evrazia’s cooperation with figures linked to the pro-Russian Strong Armenia party. Source: Jamestown Foundation. Moscow Nervous About Armenian Parliamentary Elections. [online] Published 5 June 2026. Available at: https://jamestown.org/moscow-nervous-about-armenian-parliamentary-elections/ (jamestown.org). Top Of Page False Narratives Surrounding the Baltic Drone Incursions According to an article by DFR Lab, following drone incursions into Latvia and Estonia in March 2026 and another incident in Latvia in May (for further information, see W21 May Cyfluence Report), pro-Russia media and officials promoted claims that the Baltic states had opened their airspace to support Ukrainian drone attacks against Russia. These allegations originated in Kremlin-linked media and were later amplified by Russian state television, senior officials, and pro-Kremlin online networks. Baltic governments repeatedly rejected the accusations, stating that their territories and airspace had not been used for attacks on Russia. The article also documented several false stories that emerged after the 07th May drone incident in Latvia, including claims that a drone had struck a passenger train, hit an apartment building, and caused multiple deaths. Researchers found that these reports were based on unrelated events or unsupported allegations but were widely circulated through Telegram channels, social media accounts, and pro-Kremlin information networks. An analysis of international coverage found that Russia-linked sources generated substantial attention to the drone incidents, particularly in Spanish, Portuguese, French, and Italian-language information spaces. While the narrative gained limited traction among mainstream audiences in NATO countries, it reached wider audiences in parts of Latin America and Africa through a network of media outlets, social media accounts, and republished content. Source: DFRLab. Russian Narratives about Baltic Drone Incursions Miss Europe, Land in Global South. [online] Published 4 June 2026. Available at: https://dfrlab.org/2026/06/04/russian-narratives-about-baltic-drone-incursions-miss-europe-land-in-global-south/ (dfrlab.org). Top Of Page Abu Dhabi-Based Video News Agency Links to RT A Bellingcat investigation examined the relationship between Viory, an Abu Dhabi-based video news agency that promotes itself as a “video news agency of the Global South”, and Ruptly, a video agency connected to Russian state media outlet RT. Viory has rapidly expanded its international presence through partnerships with media organizations, universities, and government institutions across Africa, Asia, and the Middle East. However, the investigation identifies multiple technical connections between Viory and Ruptly, despite both organizations denying any formal relationship. These links include shared IP addresses, the use of a security certificate associated with Ruptly on a Viory-related website, and Ruptly domains sending technical performance data to Viory-controlled infrastructure. In the broader context of international media influence, Analysts cited in the report note that Viory provides news content and training to media organizations across the Global South and that its coverage often features prominent reporting on Russia, China, and Russia–China cooperation. RT has been sanctioned by the European Union for spreading pro-Kremlin narratives and supporting Russia’s war against Ukraine, and while Viory maintains that it is an independent media company, technical evidence raises questions about its relationship with Ruptly and the transparency of its operations. Source: Bellingcat. Tracing Digital Links Between Viory and Ruptly. [online] Published 4 June 2026. Available at: https://www.bellingcat.com/news/2026/06/04/viory-ruptly-rt-russia-uae-propaganda-video-news/ (bellingcat.com). Top Of Page The War in Ukraine FSB’s “Matryoshka” Cyberespionage Campaign Against Ukraine Gamaredon, a cyberespionage group operated by Russia’s FSB, continues to conduct long-term intrusion operations against Ukrainian government, military, and critical infrastructure networks. A three-part investigation by Sekoia reconstructed the group’s 2026 infection chain and clarified its malware ecosystem. The first part of the investigation examined Gamaredon, an FSB-linked cyberespionage group targeting Ukrainian government and critical infrastructure networks, focusing on its malware ecosystem, phishing operations, USB-based propagation, and long-term persistence techniques. In the second part and the third parts, researchers analyzed GammaLoad, a multi-layered in-memory loader used to deploy malware while avoiding detection, and GammaSteel, a data-collection tool that monitors drives, USB devices, and active files to gather intelligence from compromised systems. Combined with fileless execution, extensive use of NTFS Alternate Data Streams, registry-based payload staging, and encrypted storage mechanisms, these capabilities demonstrate a significant evolution in Gamaredon’s tradecraft and provide the group with a resilient platform for long-term espionage against Ukrainian targets. Sources: Sekoia.io. FSB’s Matryoshka #1/3 – Gamaredon’s Gifts That Keeps Unpacking – GammaPhish and GammaWorm. [online] Published 1 June 2026. Available at: https://blog.sekoia.io/fsbs-matryoshka-1-3-gamaredons-gifts-that-keeps-unpacking-gammaphish-and-gammaworm/ (blog.sekoia.io). Sekoia.io. FSB’s Matryoshka #2/3 – Gamaredon’s Gifts That Keeps Unpacking – GammaLoad. [online] Published 2 June 2026. Available at: https://blog.sekoia.io/fsbs-matryoshka-2-3-gamaredons-gifts-that-keeps-unpacking-gammaload/ (blog.sekoia.io). Sekoia.io. FSB’s Matryoshka #3/3 – Gamaredon’s Gifts That Keeps Unpacking – GammaSteel. [online] Published 3 June 2026. Available at: https://blog.sekoia.io/fsbs-matryoshka-3-3-gamaredons-gifts-that-keeps-unpacking-gammasteel/ (blog.sekoia.io). Top Of Page China Congressional Concerns Over Foreign Influence on U.S. AI Development The House Committee on Energy and Commerce’s letter has raised concerns about evidence suggesting that foreign influence campaigns may be attempting to slow U.S. artificial intelligence development and the infrastructure needed to support it. Reports from the Bitcoin Policy Institute and Power the Future show that international actors, particularly from China, are working through state media organizations, nonprofit networks, and other channels to shape public opinion and policy discussions related to AI and data center expansion. According to the reports referenced in the letter, these efforts are accompanied by funding networks that support activist campaigns opposing data center projects and related energy infrastructure. Some groups have sought to delay or block projects through litigation, regulatory challenges, and campaigns targeting the financial mechanisms used to fund infrastructure development. The letter also raises concerns about limited transparency regarding the sources of funding behind some of these activities. Maintaining U.S. leadership in the AI sector requires continued investment in data centers and supporting infrastructure. Therefore, the committee has requested a briefing from the Trump Administration on how it is investigating alleged foreign influence efforts and what steps are being taken to address activities that could hinder the growth of the U.S. AI ecosystem. Source: U.S. House Committee on Energy and Commerce. Letter to PCAST and FBI on Foreign Influence and AI Data Centers. [online PDF] Published 4 June 2026. Available at: https://d1dth6e84htgma.cloudfront.net/2026_06_04_Letter_to_PCAST_and_FBI_on_Foreign_Influence_AI_Data_Centers_99f6aa6cda.pdf (cloudfront.net). Top Of Page Misinformation About Anthropic’s Access in China According to NewsGuard’s Reality Check, pro-China social media accounts have circulated claims that American AI company Anthropic has begun allowing users in China to access its Claude chatbot, portraying the alleged move as evidence that U.S. technology firms cannot ignore the Chinese market despite national security concerns. The narrative was supported by a widely shared screenshot that appeared to show Claude accepting Chinese phone numbers during account registration. However, the claim is false. Anthropic confirmed that China is not a supported region and that users in China cannot access its products or create Claude accounts using Chinese phone numbers. NewsGuard found no evidence that the company had changed its policy, and multiple China-based users reported being unable to register with Chinese numbers. The authenticity of the viral screenshot could not be verified and may have been manipulated or artificially generated. Anthropic continues to restrict access in China and has previously acted against Chinese state-linked accounts accused of misusing its services. Other major U.S. AI companies, including OpenAI and Google, also do not operate in China for similar national security reasons. Source: NewsGuard Reality Check. Anthropic’s Fictional Entry into the … [online] Published 5 June 2026. Available at: https://www.newsguardrealitycheck.com/p/anthropics-fictional-entry-into-the (newsguardrealitycheck.com). Top Of Page Iran Handala Brand Threat Expands to Support MOIS Operations According to a report by Insikt Group, Iran’s Ministry of Intelligence (MOIS) has likely expanded its use of the Handala brand beyond cyber activities to include physical threat actors and influence operations targeting U.S. and Israeli interests. The report identified a newly emerged persona, the Handala Popular Resistance Front (HPRF), along with three influence-operation networks that appear to be linked to MOIS through coordinated online activity, cross-promotion, and shared messaging. These entities support a common objective of recruiting individuals for espionage, sabotage, and other operations directed at U.S. and Israeli personnel and assets. Combining cyber, physical, and influence activities under a single recognizable brand increases the reach and effectiveness of MOIS’s external operations. Handala-linked actors are believed to use online platforms to solicit recruits, amplify operational claims, and promote their capabilities. Looking ahead, Insikt Group assessed that coordination among these different personas may enable more sophisticated operations by integrating cyber intrusions, intelligence gathering, and physical activities into a single campaign. MOIS and other Iranian intelligence and military entities will likely continue conducting cyber, influence, espionage, and physical operations against U.S. and Israeli targets regardless of developments in the Iran War. Source: Recorded Future, Insikt Group. TA-IR-2026-0602. [online PDF] Published 2 June 2026. Available at: https://assets.recordedfuture.com/insikt-report-pdfs/2026/TA-IR-2026-0602.pdf Top Of Page [AI Related Articles] 2026 U.S. Midterm Election Threat Outlook As stated in a Check Point publication, the 2026 U.S. midterm election cycle will likely see increased cyber-related activity targeting the election ecosystem, including campaigns, media organizations, and government services. Rather than focusing primarily on voting systems, threat actors are expected to target trusted accounts, public-facing platforms, and information channels that play a key role in shaping public trust and communications. A major concern is the growing use of phishing, impersonation, and coordinated misinformation campaigns. Election-themed websites, fraudulent donation pages, AI-generated content, and more misleading online narratives are expected to be used to influence public perception. These tactics are relatively inexpensive and can generate significant political and psychological effects without directly compromising election infrastructure. In the foreign influence field, Russia, Iran, and China were identified as the principal state-linked actors associated with risks of foreign interference. Overall, the most significant threat to the 2026 election environment is the cumulative impact of disruption and manipulation across the channels that voters, campaigns, media outlets, and public institutions rely on for accurate information. Source: Check Point Research. 2026 U.S. Midterm Election Threat Outlook. [online PDF] Published June 2026. Available at: https://checkpoint.cyberint.com/hubfs/2026%20U.S.%20Midterm%20Election%20Threat%20Outlook.pdf (checkpoint.cyberint.com). Top Of Page Uncensored AI Accelerates the Spread of Conspiracy Theories As published in a NewsGuard Reality Check, “Uncensored AI” is a chatbot that promotes itself as a source of unfiltered and objective information, positioning itself as an alternative to mainstream AI models. Although its user base is relatively small, its responses have been widely shared by prominent conservative social media influencers, giving visibility to claims about topics such as the 2020 U.S. election, assassination attempts against President Trump, and the killing of commentator Charlie Kirk. According to NewsGuard, several influencers cited Uncensored AI as an authoritative source when sharing claims that contradict established findings and official investigations. Examples include assertions that the 2020 election was rigged, that Trump assassination attempts were staged, and that Israeli intelligence was involved in Kirk’s murder. These claims lack supporting evidence and conflict with conclusions reached by law enforcement, courts, and other official investigations. NewsGuard also tested the chatbot on several well-known conspiracy theories and found that it endorsed claims that the 1969 moon landing was faked, that the 11th of September attacks involved Mossad and elements of the U.S. government, and that COVID-19 vaccines caused millions of deaths. Chatbot-generated responses can be presented as independent analysis, potentially increasing the perceived credibility of claims when they are amplified by influential online accounts. Sources: NewsGuard Reality Check. Uncensored AI Chatbot Pushes Conspiracy Theories. [online] Published 5 June 2026. Available at: https://www.newsguardrealitycheck.com/p/uncensored-ai-chatbot-pushes-conspiracy (newsguardrealitycheck.com). (euronews.com) Top Of Page Online Disinformation About London Research by CIR, assisted by other research, found a growing volume of online content portraying London as unsafe, lawless, and in decline. Across platforms including X, Facebook, Instagram, YouTube, and TikTok, posts frequently use misleading, exaggerated, or decontextualized information to link crime, social disorder, and cultural change to immigrant and minority communities. The study identified five recurring themes: London as unsafe, anti-immigration narratives, Islamophobia, “Great Replacement” conspiracy theories, and nostalgia for a perceived better past. One of the findings was the widespread use of AI-generated content to reinforce these narratives. Examples included fabricated scenarios depicting immigrants receiving special treatment, fictional futures in which London is “taken over” by specific ethnic groups, and staged “street interviews” that present misleading claims about migrants and asylum seekers. By mimicking authentic footage or citizen journalism, this content makes false narratives appear more credible to online audiences. These narratives are often amplified through comment sections, where users repeat claims about demographic change, crime, and cultural decline, sometimes alongside extremist rhetoric or calls for action. The narratives even extend beyond UK audiences and are increasingly reaching international users. Misleading content about London is frequently intertwined with anti-immigration, anti-Muslim, and conspiracy-based themes, contributing to social polarization and reinforcing perceptions of conflict between different communities. Sources: InfoRes (Centre for Information Resilience). London Has Fallen: How Online Disinformation Distorts Perceptions of Safety in the Capital. [online] Published 5 June 2026. Available at: https://www.info-res.org/cir/articles/london-has-fallen-how-online-disinformation-distorts-perceptions-of-safety-in-the-capital/ (info-res.org). Top Of Page AI Use in Political Campaigns A survey of campaign professionals found that AI has become a routine part of political operations, with 87% using it daily or several times a week. The most common applications are internal functions such as research, news monitoring, and drafting content rather than direct voter engagement. At the same time, 75% of respondents identified inaccurate or misleading AI outputs as their biggest concern, reflecting broader worries about the reliability of AI-generated information in political contexts. Results showed growing attention to how AI systems handle political information and civic questions. AI companies are taking steps to improve the quality of election-related responses and direct users to authoritative sources, but concerns remain about transparency, source selection, and the accuracy of information provided to voters. The survey also found a gap between voter expectations and campaign practices regarding AI transparency. While most voters consider disclosure of AI-generated content important, only a small share of campaigns consistently disclose such use, and one-third of campaign professionals report having no formal AI policy. According to the author, more public disclosure is needed regarding how AI companies make decisions about political content and what measures they use to address errors and misinformation. Additionally, campaigns should develop clear governance and disclosure frameworks as AI becomes more deeply integrated into political research, communications, voter outreach, and campaign operations. Sources: Anchor Change. What Campaign Professionals Told Us About AI-Generated Content. [online] Published 5 June 2026. Available at: https://anchorchange.substack.com/p/what-campaign-professionals-told (anchorchange.substack.com). (anchorchange.com). Top Of Page Gemini Omni Generates Videos Advancing False Online Claims A NewsGuard assessment found that Google’s text-to-video model, Gemini Omni, was able to generate realistic videos illustrating several false claims that have circulated online. In seven out of ten tested prompts, the model produced videos depicting inaccurate narratives related to topics such as the Iran war, migration, international shipping, and geopolitical events. The examples included videos portraying a false claim that Somalia had blocked Israeli ships from passing through the Bab el-Mandeb Strait, a fabricated story about migrants receiving free PlayStations in the UK, and so on. The model also generated videos connected to inaccurate narratives about military events and major companies. At the same time, the report found that some safeguards were effective. Gemini Omni consistently refused requests involving false health-related claims and generally declined to generate videos depicting specific public figures. While the model has stronger protections than some earlier AI image and video generators, the findings suggested that realistic AI-generated videos can still be used to create persuasive visual content around inaccurate claims, particularly on political, geopolitical, and social issues. Sources: NewsGuard Reality Check. Google’s New AI Video Model Churns Out Misinformation. [online] Published 6 June 2026. Available at: https://www.newsguardrealitycheck.com/p/googles-new-ai-video-model-churns (newsguardrealitycheck.com). Top Of Page AI-Generated Police “Drag Queen Raid” Story Misleads Global Media As revealed by CyberNews, an AI-generated image shared on a Thai police Facebook page falsely depicted officers dressed as drag queens during a drug raid, leading to widespread media coverage of what appeared to be a real undercover operation. The viral post showed five men and one woman in costumes surrounding a detained suspect and was picked up by major outlets, including The Sun, The Telegraph, The Mirror, and The New York Post, before being revealed as fake. Thai police later confirmed that the image was AI-generated and not an authentic depiction of the arrest, although the underlying drug arrest itself was real. The post originated from a local police station administrator who reportedly intended it as a humorous way to make police work seem more approachable. However, because it came from an official source, it was widely accepted as genuine and quickly spread across international media. Experts noted that the image contained inconsistencies that could have raised suspicion, but its official origin helped it appear credible at first glance, demonstrating how authority can amplify the impact of synthetic media. Sources: Cybernews. Thai Police Use AI-Generated “Drag Raid” Photo in Anti-Drug Campaign Hoax. [online] Published 6 June 2026. Available at: https://cybernews.com/ai-news/thai-police-ai-drag-raid-photo-hoax/ (cybernews.com). Top Of Page [General Reports] 2026 FIFA World Cup Threat Outlook According to Recoded Future’s paper, the 2026 FIFA World Cup is expected to face a complex threat environment across the United States, Mexico, and Canada. Physical security remains the primary concern due to the scale of the event and the concentration of large crowds. Cybercriminal activity is also expected to increase as the tournament approaches. The report also assessed that Russian, Chinese, and Iranian state-sponsored groups may use the tournament as an intelligence-gathering opportunity. World Cup-related influence activity observed so far has been largely overt and driven through state media and diplomatic messaging, focusing on issues such as host-country legitimacy, public safety, immigration, visa access, ticketing, and Iran’s participation. While covert activity has remained limited, it could increase in response to geopolitical developments or major news events during the tournament. Source: Recorded Future, Insikt Group. CTA-2026-0604. [online PDF] Published 4 June 2026. Available at: https://assets.recordedfuture.com/insikt-report-pdfs/2026/CTA-2026-0604.pdf (recordedfuture.com). Top Of Page NATO’s Defence Strategic Communications Journal The new Defence Strategic Communications journal of the NATO Strategic Communications Centre of Excellence reflected on growing concerns about the decline of the post-World War II liberal international order. It argued that societies need new, credible narratives to address political, economic, and technological transformation. Drawing on discussions from the Knowledge Economy Transition by 2045 dialogue at Cambridge, participants emphasized the importance of legitimacy, strategic communication, and long-term storytelling in shaping future political and economic systems. Effective narratives must be rooted in authentic ideas and practical solutions rather than slogans, particularly as societies confront challenges such as geopolitical competition, AI, climate change, and declining trust in institutions. A significant place was given to the changing information environment. The foreword highlighted concerns about AI, algorithmic influence, microtargeting, and emerging neurotechnology's, arguing that these developments are reshaping how people form opinions, build consensus, and understand reality. It also noted the growing role of state-sponsored influence campaigns and information manipulation, particularly through the concept of Foreign Information Manipulation and Interference (FIMI), which emerged in response to systematic efforts by state actors to shape public perceptions and political discourse. Strategic communication should help societies develop shared understanding and legitimacy during periods of disruption. Several contributions to the journal explored topics including foreign information manipulation, international cooperation against influence operations, hybrid threats, media objectivity, and the role of narratives in democratic resilience. The authors stress the need for stronger frameworks to understand how information, technology, and political power interact in an increasingly contested global environment. Source: NATO Strategic Communications Centre of Excellence. Defence Strategic Communications | Volume 15, Spring 2025. [online] Published 4 June 2025. Available at: https://stratcomcoe.org/publications/defence-strategic-communications-volume-15-spring-2025/322 (stratcomcoe.org). (stratcomcoe.org) Top Of Page Modeling the Strategic Logic of Disinformation Governance Song Xiaoyu's article, published in Scientific Reports (2026), proposes a tripartite evolutionary game model to analyze strategic behavior in online disinformation governance. The three actors modeled are regulators, social media platforms, and self-media operators, the last referring to independent or semi-professional content producers who function as primary vectors for disinformation spread. The core methodological contribution is the integration of Prospect Theory into the game-theoretic framework, replacing the standard assumption of rational utility maximization with a behaviorally grounded model that accounts for loss aversion and diminishing sensitivity to outcomes. This allows the model to capture how subjective perception of risk and loss, rather than objective cost-benefit calculation, drives each actor's strategic choices in an environment characterized by high uncertainty, such as an unfolding public opinion crisis. The paper maps the disinformation ecosystem as a dynamic equilibrium problem. Self-media operators choose between truthful, verified reporting and false or unverified reporting, with the latter driven by traffic incentives, urgency, and low verification costs. Platforms choose between active content moderation and passive response, with governance inertia explained not as irresponsibility but as rational risk-aversion under insufficient regulatory pressure. Regulators choose between proactive information disclosure and silence, with silence producing credibility erosion, and public distrust. The model's replicator dynamics equations demonstrate that the system converges to an ideal cooperative equilibrium, where all three actors adopt proactive strategies, only under specific parameter conditions: sufficiently high reward-penalty intensity, strong initial participation willingness, and a loss aversion coefficient exceeding a critical threshold of approximately 2.25. Below this threshold, platforms default to passive governance; above it, fear of reputational and legal consequences outweighs the costs of active moderation. Numerical simulations conducted in MATLAB confirm several policy-relevant findings. First, initial willingness across actors significantly accelerates convergence toward cooperative governance, suggesting that norm-building and pre-crisis coordination have structural effects on disinformation resilience. Second, the relationship between loss aversion and platform behavior is non-monotonic: moderate loss aversion reinforces passivity, while high loss aversion triggers proactive moderation, a dynamic with direct implications for regulatory design, since sanctions must cross a perceptual threshold to alter platform behavior. Third, reward-penalty intensity must reach what the paper terms a "perceived tipping point" to achieve synchronized responses across all three actors. The model's limitations include reliance on theoretically assumed rather than empirically calibrated parameters and a simplified treatment of platform-regulator interaction that does not fully account for legal-obligation structures or dynamic content-moderation costs. Source: Nature Portfolio. A Prospect-Theoretic Evolutionary Game Approach for Disinformation Governance in Social-Media Ecosystems. Scientific Reports. [online] Published 3 June 2026. Available at: https://www.nature.com/articles/s41598-026-53697-9 (nature.com). Top Of Page NSO Group Breaks Court Order, Targets Journalists and Officials via WhatsApp Meta published that WhatsApp's June 2026 update discloses that NSO Group, a commercial spyware firm placed on the US government's Entity List for activities contrary to national security, continued offensive cyber operations against WhatsApp users despite a permanent federal injunction barring it from doing so. The tactics employed included spear phishing via malicious links that redirected targets to external websites outside the WhatsApp environment, consistent with previously documented one-click phishing campaigns associated with NSO's Pegasus platform. NSO-linked actors also created fraudulent test accounts and groups on WhatsApp as part of their targeting infrastructure. WhatsApp is now seeking a federal contempt order against NSO and has published three malicious domains used in the operation as threat indicators. NSO's CEO confirmed in court that the company actively seeks access vectors beyond WhatsApp, targeting browsers, operating systems, and other applications, with a reported target set that includes journalists, government officials, military personnel, and humanitarian organizations, a profile consistent with state-adjacent surveillance operations designed to suppress information flows and enable intelligence gathering against civil society. The article frames commercial spyware as a structural threat to secure communications infrastructure and argues that no single platform can counter it unilaterally. WhatsApp's response centers on a multi-stakeholder coalition of security researchers, digital rights organizations, and legal advocates, alongside financial support to the Spyware Accountability Initiative, positioning coordinated institutional action across legal, technical, and civil society domains as the necessary framework for defense. Source: Meta. Fighting Spyware: An Update from WhatsApp. [online] Published 5 June 2026. Available at: https://about.fb.com/news/2026/06/fighting-spyware-an-update-from-whatsapp/ (about.fb.com). Top Of Page [Appendix - Frameworks to Counter Disinformation] Using TrustOps in Governments' Fight Against Deepfakes and Disinformation According to a Global Government Forum publication, Gartner predicted that by 2028, 40% of government organizations will establish dedicated “TrustOps” functions to address growing risks posed by deepfakes, impersonation, social engineering, and other forms of disinformation. To counter these threats, Gartner recommended creating trust-focused governance structures, strengthening high-risk business processes, and implementing procedures to verify the content. The firm also highlighted technologies such as the C2PA standard, which can help authenticate the origin and integrity of digital content through cryptographic provenance data. These measures are intended to help governments move from reacting to false information toward proactively building trust in official communications. Concerns about AI-generated disinformation are already influencing public policy and debates. In the UK, efforts are underway to develop frameworks to detect harmful deepfakes, while recent research in London identified a sharp increase in online narratives portraying the city as unsafe or in decline. The analysis found signs of coordinated activity, including repetitive posting and AI-generated content used to amplify misleading claims, with some activity linked to extremist groups and accounts aligned with foreign state interests. Source: Global Government Forum. Growth of Government ‘TrustOps’ Predicted in Fight Against Deepfakes and Disinformation. [online] Published 5 June 2026. Available at: https://www.globalgovernmentforum.com/growth-of-government-trustops-predicted-in-fight-against-deepfakes-and-disinformation/ (globalgovernmentforum.com). Top Of Page Tools for Addressing Climate Misinformation in Reporting A webinar organized by the International Federation of Journalists (IFJ) focused on helping journalists identify and respond to misleading climate-related claims. Climate scientist Emmanuel Vincent of Science Feedback emphasized that media outlets are often targeted because they remain trusted sources of information. Using examples such as the claim that “global warming stopped for 18 years”, he demonstrated how the selective use of data can create misleading narratives that ignore broader scientific evidence and long-term trends. The session highlighted practical resources journalists can use to verify climate-related information. Recommended sources included the IPCC, NASA, NOAA, Carbon Brief, and Climate Brink for scientific information, as well as fact-checking and research tools such as the International Fact-Checking Network (IFCN), InfluenceMap, DeSmog’s Climate Disinformation Database, Retraction Watch, and PubPeer. Vincent also stressed the importance of evaluating the credibility of sources, checking for conflicts of interest, and investigating the background of individuals making climate-related claims. Speakers also warned against “false balance” in reporting, arguing that presenting climate science and climate skepticism as equally supported positions can mislead audiences. Journalists were encouraged to challenge inaccurate claims with evidence and prepare thoroughly before interviews. Source: International Federation of Journalists (IFJ). Climate: Tips and Tools to Help Journalists Counter Disinformation. [online] Published 5 June 2026. Available at: https://www.ifj.org/media-centre/news/detail/category/unesco-climate/article/climate-tips-and-tools-to-help-journalists-counter-disinformation (ifj.org). Top Of Page Training Platform to Investigate Online Influence Campaigns Check First introduced “Tutki”, a training platform developed to provide realistic OSINT and online investigation exercises based on real-world cases and information environments. The platform allows trainers to create custom scenarios or use templates inspired by actual influence campaigns, helping participants develop practical investigative skills. It supports multiple languages and has been used in contexts such as election-related information environments, including work with Armenian civil society organizations. A key feature of Tutki is its simulation of social media platforms. Instead of relying on live content, which may be deleted, moderated, or contain harmful material, the platform recreates realistic online environments where participants can safely investigate posts, accounts, and networks. This approach improves consistency across training sessions and reduces exposure to graphic or disturbing content while preserving the experience of conducting authentic online investigations. Tutki also includes professional OSINT tools such as cross-platform search, timeline analysis, network visualization, and coordinated inauthentic behavior detection. In 2026, it was used in a training exercise for Radio France journalists involving a fictional foreign interference scenario linked to local elections. The platform is designed both for organizations seeking tailored training and for independent trainers who want to run their own investigation exercises. Source: CheckFirst. Introducing Tutki: We Simulated Social Media to Teach How It Gets Weaponised. [online] Published 5 June 2026. Available at: https://checkfirst.network/introducing-tutki-we-simulated-social-media-to-teach-how-it-gets-weaponised/ (checkfirst.network). (checkfirst.network) Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 25th to the 31st of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Russian-Linked Conspiracy Theories Amplified by Political Figures Disinformation Through Hacked Bluesky Accounts Matryoshka Launches Campaign Targeting Armenia’s Elections The War in Ukraine Russian Disinformation Campaigns About Ukrainian Refugees China China’s Influence Campaign Against Japan [AI Related Articles] New “NewsBench” Tool to Evaluate AI-Based News Reliability AI in California Courts Raises Concerns Over Accuracy and Fairness AI-Generated Influencers Spread Political Propaganda [General Reports] Australia’s Defence Strategy in Facing Foreign Misinformation Diphtheria Outbreak and Public Misinformation Challenges in Australia Hidden Polarisation on Malaysian TikTok Addressing Misinformation in the Public Health Field Investigation into the Cuban Influence Network in the United States The Sandygate Affair Raises Disputed Evidence and Public Trust in Cyprus [Appendix - Frameworks to Counter Disinformation] OpenAI’s Measures to Safeguard Elections Information and Transparency Exposing Fake AI Content YouTube’s New AI Content Labels RESIST Framework to Create Resilience to Disinformation Fighting Climate Disinformation [CRC Glossary] [ Report Highlights] According to a report by TechXplore, researchers have uncovered a Russian disinformation campaign that hacked hundreds of Bluesky accounts to spread pro-Kremlin propaganda. A report by First Monday examined Russian disinformation campaigns targeting Ukrainian refugees in Europe and argued that these campaigns are effective not only because they imitate credible media sources, but because they activate existing cultural prejudices and social anxieties. According to a publication by The Jamestown Foundation, since Prime Minister Sanae Takaichi took office in late 2025, Beijing has increased political, economic, and military pressure on Japan in response to Tokyo’s efforts to strengthen its security policies. According to an article by EDMO, a traditional weakness of ideological movements has been the gap between what their leaders preach and how they behave in private. As published by ASPI, Australia’s defence strategy is being challenged by the growing importance of information environments in modern conflict. YouTube announced it is introducing new updates to improve transparency around AI-generated content. As published by the Council of Europe, it developed the RESIST framework to help countries understand and strengthen their resilience to disinformation while respecting democratic principles, human rights, and freedom of expression. [ Report Summary] According to a report by DisinfoWatch, recent claims promoted by far-right conspiracy theorist Alex Jones and convicted Russian arms trafficker Viktor Bout represent a clear example of disinformation designed to spread fear and uncertainty. According to a report by TechXplore, researchers have uncovered a Russian disinformation campaign that hacked hundreds of Bluesky accounts to spread pro-Kremlin propaganda. As revealed in a NewsGuard report, the Russia-linked influence operation Matryoshka launched a coordinated disinformation campaign against Armenian Prime Minister Nikol Pashinyan ahead of the June 2026 parliamentary elections. A report by First Monday examined Russian disinformation campaigns targeting Ukrainian refugees in Europe and argued that these campaigns are effective not only because they imitate credible media sources, but because they activate existing cultural prejudices and social anxieties. According to a publication by The Jamestown Foundation, since Prime Minister Sanae Takaichi took office in late 2025, Beijing has increased political, economic, and military pressure on Japan in response to Tokyo’s efforts to strengthen its security policies. A large independent evaluation of more than 12,500 chatbot responses found significant weaknesses in how major AI models handle news and current events. According to an article by CyberNews, California’s largest courts are testing an AI tool called Learned Hand to assist judges and court staff with drafting legal orders, summarizing motions, and conducting legal research. According to an article by EDMO, a traditional weakness of ideological movements has been the gap between what their leaders preach and how they behave in private. As published by ASPI, Australia’s defence strategy is being challenged by the growing importance of information environments in modern conflict. As stated in an article by ABC News, health authorities in Western Australia’s far north are responding to an ongoing diphtheria outbreak while addressing confusion and misinformation surrounding the disease and vaccination. A study published by University Sains Islam Malaysia states that polarizing and disinformation-adjacent content circulates widely on Malaysian TikTok through strategically neutral captions and identity-coded moral framing, not through overt hostility. As published by Health Policy Watch, recent disease outbreaks, including hantavirus, Ebola, and COVID-19, have been accompanied by false claims about the causes of diseases, vaccines, and treatments. An article by Fox News examined allegations that U.S. authorities are investigating a network of nonprofit organizations, activist groups, media platforms, and political organizations that coordinate activities supportive of the Cuban government. As reported by MEDDMO, an influential media event named the “Sandygate affair” began with serious allegations of sexual abuse, corruption, and influence involving prominent figures in Cyprus. As published by OpenAI, as major elections approach in 2026, efforts are focused on helping people access accurate voting information and strengthening trust in election-related content. According to an article by The Conversation, the rapid growth of online images and videos has made disinformation more convincing and harder to detect. YouTube announced it is introducing new updates to improve transparency around AI-generated content. As published by the Council of Europe, it developed the RESIST framework to help countries understand and strengthen their resilience to disinformation while respecting democratic principles, human rights, and freedom of expression. An essay published by The Union of Concerned Scientists argued that periods of extreme weather and climate-related disasters depend on a strong “safety chain”, which connects scientific data, weather forecasting, trusted communication, public understanding, and effective preparation and response. [State Actors] Russia Russian-Linked Conspiracy Theories Amplified by Political Figures According to a report by DisinfoWatch, recent claims promoted by far-right conspiracy theorist Alex Jones and convicted Russian arms trafficker Viktor Bout represent a clear example of disinformation designed to spread fear and uncertainty. The segment falsely presents Bout as a credible Russian military expert while omitting his criminal background, and it makes unverified claims that Vladimir Putin has announced plans to attack NATO sites and devastate major Ukrainian cities. There is no independent evidence to support these claims, making them best understood as escalation propaganda rather than factual reporting. While Russia has engaged in nuclear signaling and military exercises with Belarus, credible reporting does not confirm any official plan for imminent strikes on NATO or global nuclear war. NATO has consistently described its actions as defensive support for Ukraine’s self-defence, while Russia continues its documented attacks on Ukrainian civilians, with the UN reporting a significant rise in civilian casualties in 2026. Another publication by DisinfoWatch stated that recent claims amplified by Alex Jones falsely portray Canada as forcibly committing political critics and using medically assisted death (MAiD) as a tool of state punishment. These allegations are based on an uncorroborated individual case that is misleadingly expanded into sweeping accusations of government abuse. The claims that more than 100,000 people were “medically murdered” in the past year and that psychiatrists can force people into MAiD are demonstrably false and unsupported by official data. Sources: DisinfoWatch. Russia’s “Merchant of Death” Threatens Nuclear War Against NATO on Alex Jones Show. [online] Published 26 May 2026. Available at: https://disinfowatch.org/disinfo/russias-merchant-of-death-threatens-nuclear-war-against-nato-on-alex-jones-show/ (disinfowatch.org) DisinfoWatch. Alex Jones “Canada Death-State” Conspiracy Promotes MAiD Panic. [online] Published 26 May 2026. Available at: https://disinfowatch.org/disinfo/alex-jones-canada-death-state-conspiracy-promotes-maid-panic/ (DisinfoWatch) Top Of Page Disinformation Through Hacked Bluesky Accounts According to a report by TechXplore, researchers have uncovered a Russian disinformation campaign that hacked hundreds of Bluesky accounts to spread pro-Kremlin propaganda. Instead of creating fake profiles, the operation used real accounts belonging to journalists, academics, and other public figures, making the false information appear more credible and harder to detect. Many of the compromised accounts were used to share anti-Ukraine narratives before the posts were removed. The campaign was linked to the Moscow-based Social Design Agency and the broader influence operation known as Matryoshka, which has previously used impersonation, stolen media logos, and AI-generated voice cloning to spread misleading content. Although Bluesky removed thousands of accounts connected to state-backed influence activity, researchers believe the real scale of the operation may be larger. However, experts emphasized that the campaign’s impact was limited, as most posts received little attention. They argued that its main goal was not direct persuasion, but creating the perception of widespread support for false narratives. Source: Tech Xplore. Bluesky accounts hijacked in pro-Russia propaganda campaign. [online] Published 29 May 2026. Available at: https://techxplore.com/news/2026-05-bluesky-accounts-hijacked-pro-russia.html (techxplore.com) Top Of Page Matryoshka Launches Campaign Targeting Armenia’s Elections As revealed in a NewsGuard report, the Russia-linked influence operation Matryoshka launched a coordinated disinformation campaign against Armenian Prime Minister Nikol Pashinyan ahead of the June 2026 parliamentary elections. The campaign spread dozens of fabricated reports designed to damage his credibility, falsely portraying him as abusive, corrupt, and preparing for conflict with Russia. These fake stories were made to look like they came from trusted international and Armenian media outlets, increasing their appearance of legitimacy. The campaign used anonymous social media accounts and AI-generated content to make false claims more convincing. Some videos copied real news broadcasts and used cloned voices of journalists to present fabricated accusations, including false reports about Pashinyan’s health, personal misconduct, and election fraud. The operation also exploited celebrity names and even impersonated media monitoring organizations to amplify misleading narratives and create confusion among voters. Researchers say this is one of the most extensive disinformation efforts linked to Armenia’s election, with hundreds of fake reports produced over several months. Source: NewsGuard. Russia Takes Aim at Armenia. [online] Published 28 May 2026. Available at: https://www.newsguardtech.com/special-reports/russia-takes-aim-at-armenia/ (newsguardtech.com) Top Of Page The War in Ukraine Russian Disinformation Campaigns About Ukrainian Refugees A report by First Monday examined Russian disinformation campaigns targeting Ukrainian refugees in Europe and argued that these campaigns are effective not only because they imitate credible media sources, but because they activate existing cultural prejudices and social anxieties. False narratives portraying refugees as violent, dishonest, or dependent on welfare circulated widely in countries such as Germany, Poland, Czechia, and Slovakia. According to the authors, these messages sought to weaken public support for refugees and increase social division within European societies. The paper paid particular attention to the role of racial and ethnic prejudice in these campaigns, especially regarding Roma refugees, as disinformation resonates more easily when audiences already hold fears or negative stereotypes about migrants or minority groups. Rather than viewing disinformation simply as false information entering an otherwise healthy public sphere, the authors suggest that these narratives build upon long-standing social inequalities, nationalism, and distrust already present in society. To counter this, responses such as fact-checking or prebunking may help, but addressing disinformation also requires confronting the deeper cultural and political conditions that allow such narratives to spread and gain support. Source: First Monday. [Article title unavailable from URL alone]. [online] Available at: https://firstmonday.org/ojs/index.php/fm/article/view/14649/12443 Top Of Page China China’s Influence Campaign Against Japan According to a publication by The Jamestown Foundation, since Prime Minister Sanae Takaichi took office in late 2025, Beijing has increased political, economic, and military pressure on Japan in response to Tokyo’s efforts to strengthen its security policies. China has imposed export restrictions, sanctioned Japanese officials, and increased activity near Japanese territory, while state media has strongly criticized Japan’s defense expansion. The article highlighted how Beijing is using media influence operations to shape public opinion inside Japan. Chinese state media amplified small anti-missile protests and presented them as broader national opposition to government policy. These efforts focus on exploiting real public concerns, such as local frustration over missile deployments, to influence debate without confrontation. Japan’s internal communication gaps make it more vulnerable to external influence campaigns, as selective reporting and pressure tactics can undermine trust and affect public opinion on key national security decisions. Source: Jamestown Foundation. Cognitive Warfare Against Japan’s Security Normalization. [online] By Sze-Fung Lee. Published 29 May 2026. Available at: https://jamestown.org/cognitive-warfare-against-japans-security-normalization/ (jamestown.org) Top Of Page [AI Related Articles] New “NewsBench” Tool to Evaluate AI-Based News Reliability A large independent evaluation of more than 12,500 chatbot responses found significant weaknesses in how major AI models handle news and current events. About 30% of responses contained factual errors, including incorrect dates, figures, and policy details, while nearly one in four failed neutrality checks. These issues were especially noticeable in election-related prompts, where mistakes appeared in responses about voting procedures, public opinion, and major political issues. The study also highlighted differences between models. ChatGPT showed the highest overall accuracy, while other systems had much higher error rates. Responses varied in political framing, with some models showing stronger left-leaning patterns and others more right-leaning tendencies. Examples included inconsistent answers to politically sensitive questions and responses that appeared to shift depending on how a prompt was framed. Another key finding was source quality - many responses cited state-controlled foreign outlets or commercial sources when answering public-policy and foreign-affairs questions. As AI becomes a more common tool for accessing news, these issues raise important concerns about accuracy, neutrality, and source selection. Source: ForumAI. Introducing NewsBench. [online] Published on Substack. Available at: https://forumai.substack.com/p/introducing-newsbench Top Of Page AI in California Courts Raises Concerns Over Accuracy and Fairness According to an article by CyberNews, California’s largest courts are testing an AI tool called Learned Hand to assist judges and court staff with drafting legal orders, summarizing motions, and conducting legal research. The pilot program, launched by the Los Angeles County Superior Court, is part of an effort to improve efficiency and reduce growing case backlogs by providing faster research and drafting support. However, the program has raised significant concerns among judges and legal professionals. Critics warn that AI systems are prone to inaccuracies, including hallucinated facts and false legal citations, problems that have already affected real court cases. Some judges argue that relying on AI in legal decision-making could undermine human judgment, especially in complex cases involving social dynamics and racial bias appeals under California’s Racial Justice Act. Opponents also stress that AI lacks the human understanding and empathy required for fair judicial evaluation, and that its use could lead to a “one-size-fits-all” approach to justice and reduce public confidence in the fairness of the courts. Sources: Cybernews. California courts are secretly testing AI to help decide criminal cases, including racial bias appeals. [online] Published 28 May 2026. Available at: https://cybernews.com/ai-news/california-court-ai-criminal-cases-racial-bias/ (cybernews.com) Top Of Page AI-Generated Influencers Spread Political Propaganda According to an article by EDMO, a traditional weakness of ideological movements has been the gap between what their leaders preach and how they behave in private. Public figures often lose credibility when their actions contradict their stated values. AI-generated characters can continuously produce content, engage with large audiences, and promote a consistent ideological message without the personal flaws, contradictions, or behavioral scandals that affect real people. In an online environment where algorithms reward outrage and polarization, such synthetic figures could become increasingly influential tools for spreading political propaganda and mobilizing supporters. As an example, the article discusses “Danny Bones”, an AI-generated rapper created by The Node Project and funded by Advance UK. Although the character does not exist, he has attracted followers through anti-immigration and racist content. The risk is that some audiences either do not realize or do not care that the figure is artificial, focusing instead on the message being delivered. Sources: European Digital Media Observatory (EDMO). AI Political Influencers: The New Gods of Propaganda and Disinformation? [online] Available at: https://edmo.eu/publications/ai-political-influencers-the-new-gods-of-propaganda-and-disinformation/ Top Of Page [General Reports] Australia’s Defence Strategy in Facing Foreign Misinformation As published by ASPI, Australia’s defence strategy is being challenged by the growing importance of information environments in modern conflict. Adversaries increasingly use digital platforms, algorithmic amplification, and emotionally charged content to shape how crises are interpreted by the public and decision-makers. Examples such as Russian influence operations related to Ukraine and Chinese narrative-shaping efforts around Taiwan and COVID-19 show how information campaigns are used to create confusion and influence responses during moments of strategic tension. While Australia’s 2026 National Defence Strategy acknowledges the information domain, these issues are still treated as secondary to conventional military planning. This creates risks, including strategic disadvantages against actors that prioritise influence operations and slower responses to rapidly evolving information campaigns. Interference and online influence efforts could exploit social divisions and intensify uncertainty before any direct military confrontation occurs. The article called for Australia to strengthen national resilience through coordinated government action, media literacy initiatives, and stronger public communication systems, and suggested integrating information warfare scenarios into defence planning and building closer cooperation between government agencies, technology platforms, and media organizations. Source: The Strategist (Australian Strategic Policy Institute). Australia is not prepared for the war over perception. [online] By Daniel Baldino. Published 25 May 2026. Available at: https://www.aspistrategist.org.au/australia-is-not-prepared-for-the-war-over-perception/ Top Of Page Diphtheria Outbreak and Public Misinformation Challenges in Australia As stated in an article by ABC News, health authorities in Western Australia’s far north are responding to an ongoing diphtheria outbreak while addressing confusion and misinformation surrounding the disease and vaccination. The outbreak has contributed to rising case numbers across Western Australia, the Northern Territory, and Queensland, with at least one reported death. Health officials noted that diphtheria, which had not been detected in the Kimberley region for decades, has spread more rapidly due to socio-economic pressures and limited healthcare access in remote communities. A major challenge has been public uncertainty about diphtheria’s symptoms, transmission, and prevention. Some residents were unfamiliar with the disease, while others expressed scepticism about vaccines and Western medicine. As a result, authorities had to fight disinformation and misconceptions to contain the outbreak. Source: ABC News. Diphtheria vaccine push in WA's north as authorities battle ‘disease of the past’ disinformation. [online] By Giulia Bertoglio. Published 29 May 2026. Available at: https://www.abc.net.au/news/2026-05-29/diphtheria-vacine-push-wa-north-disinformation/106732378 (abc.net.au) Top Of Page Hidden Polarisation on Malaysian TikTok A study published by University Sains Islam Malaysia analysed 1,841 publicly accessible Malaysian TikTok videos (2023–2025) using a Digital Humanities computational workflow combining sentiment modelling, thematic clustering, and engagement metrics to map digital polarisation. The key finding is that 86.1% of captions are neutral in sentiment, yet polarising content still circulates through “moderated affect”, where identity boundary-making is embedded in everyday sociocultural discourse rather than overt hostility. Disinformation and hoax framings account for 8.09% of themes and mainly act as credibility-contest tools. In this context, calling something fake works less as a factual check and more as a way to delegitimise claims and mobilise audiences, in line with information disorder frameworks. The study did not identify organised or state-led campaigns, but it shows how TikTok’s platform design, algorithmic recommendations, hashtag clustering, and short-form formats like stitches, duets, and “receipt” videos allow decentralised users to produce boundary work at scale. Religious discourse shows the highest concentration of explicitly antagonistic signals, making religion a key site for loyalty signalling and out-group suspicion. Political content relies more on satire, insinuation, and indirect framing than confrontation, while racial and ethnic polarisation often emerges through recontextualised historical references used as proof-like narratives to reinforce communal grievance. The study showed a fragmented system where platform incentives reward subtle, identity-coded content rather than open hostility. This allows disinformation-adjacent narratives and credibility disputes to circulate widely while still appearing normal within platform norms. Source: Research Square. [Title unavailable from URL alone]. [online] Available at: https://www.researchsquare.com/article/rs-9268897/v1 Top Of Page Addressing Misinformation in the Public Health Field As published by Health Policy Watch, recent disease outbreaks, including hantavirus, Ebola, and COVID-19, have been accompanied by false claims about the causes of diseases, vaccines, and treatments. Speakers at the World Health Assembly noted that misinformation and disinformation have become increasingly visible in health-related discussions and are spreading rapidly through social media, AI tools, and online platforms. Examples mentioned in the article include false claims about vaccine safety, infertility, contraceptives, and public health guidance. Participants argued that these narratives affect how people understand health information, whether they seek medical care, and how they respond to public health recommendations. Several speakers linked the issue to declining trust in health authorities and governments, and highlighted cases in which misleading information influenced attitudes toward vaccination and other health measures in different countries. The discussion focused on the need to improve access to reliable health information, strengthen communication between health institutions and communities, and respond more quickly to false claims. Source: Health Policy Watch. How to Treat the Disinformation ‘Virus’ Undermining Health and Democracy. [online] By Kerry Cullinan. Published 28 May 2026. Available at: https://healthpolicy-watch.news/how-to-treat-the-disinformation-virus-undermining-health-and-democracy/ Top Of Page Investigation into the Cuban Influence Network in the United States An article by Fox News examined allegations that U.S. authorities are investigating a network of nonprofit organizations, activist groups, media platforms, and political organizations that coordinate activities supportive of the Cuban government. One example is the rapid response that followed the indictment of Cuban leader Raúl Castro, when several organizations and individuals quickly published messages criticizing the charges and expressing support for Cuba. Investigators are examining whether certain groups coordinated lobbying, messaging, fundraising, delegations, and political organizing efforts with Cuban government officials. The inquiry involves organizations connected to labor activism, socialist and solidarity movements, travel delegations, media platforms, and humanitarian aid campaigns. Additionally, the article discussed possible investigations under the Foreign Agents Registration Act (FARA) and U.S. sanctions regulations. Authorities are examining whether any organizations moved beyond independent advocacy into activities directed by or coordinated with the Cuban government, including fundraising efforts, aid shipments, and political campaigns. In response, Cuban officials deny any improper conduct and state that their diplomatic activities comply with international law and standard diplomatic practice. Source: Fox News. DOJ, Treasury investigate nonprofits and leaders allegedly coordinating with Cuba in influence campaign. [online] By Asra Q. Nomani. Published 23 May 2026. Available at: https://www.foxnews.com/politics/doj-treasury-investigate-nonprofits-leaders-allegedly-coordinating-cuba-influence-campaign Top Of Page The Sandygate Affair Raises Disputed Evidence and Public Trust in Cyprus As reported by MEDDMO, an influential media event named the “Sandygate affair” began with serious allegations of sexual abuse, corruption, and influence involving prominent figures in Cyprus. The claims were made public by journalist and parliamentary candidate Makarios Drousiotis and were largely based on messages, photographs, audio recordings, and other digital material allegedly provided by a source known as “Sandy”. As the case gained political attention during the 2026 election campaign, the focus gradually shifted from the allegations themselves to the reliability of the evidence used to support them. Several Cypriot media outlets conducted independent verification of the digital material and identified significant inconsistencies. Journalists traced some images to unrelated websites, linked a key audio recording to a previously published documentary, and raised questions about the authenticity of videos and translated messages. At the same time, investigators reportedly examined additional concerns involving disputed files, timelines, and digital records. These findings did not resolve whether the original allegations were true or false, but they increased scrutiny of the evidence and its authenticity. The case became a major topic in the election campaign and broader public debate, demonstrating the importance of journalistic fact-checking, as media organizations went beyond reporting claims and examined the supporting material themselves. Rather than providing clear answers, Sandygate exposed how difficult it can be to assess sensitive allegations when key evidence remains disputed or unauthenticated. Source: MEDDMO (Mediterranean Digital Media Observatory). “Sandygate”: How journalists’ investigations shook up the election campaign and public debate in Cyprus. [online] By Théophile Bloudanis. Published 25 May 2026. Available at: https://meddmo.eu/sandygate-how-journalists-investigations-shook-up-the-election-campaign-and-public-debate-in-cyprus/ Top Of Page [Appendix - Frameworks to Counter Disinformation] OpenAI’s Measures to Safeguard Elections Information and Transparency As published by OpenAI, as major elections approach in 2026, efforts are focused on helping people access accurate voting information and strengthen trust in election-related content. The measures include directing users to reliable sources for voter registration, voting locations, deadlines, and live election results, while continuing to improve the quality of information provided on election topics and breaking news. Another important priority is increasing transparency around AI-generated content. New tools such as digital watermarks, metadata standards, and public verification systems are being introduced to help people identify whether images have been created or modified using AI. These measures are intended to make online content more traceable and to support informed decision-making during election periods. In addition, strict safeguards are in place to prevent the misuse of AI tools for election interference or other deceptive activities. Ongoing monitoring also aims to ensure political neutrality in responses to election-related questions, while continued collaboration with public institutions and election authorities supports secure and resilient election processes. Source: OpenAI. Election Information and Safeguards in 2026. [online] Published 27 May 2026. Available at: https://openai.com/index/election-safeguards-2026/ Top Of Page Exposing Fake AI Content According to an article by The Conversation, the rapid growth of online images and videos has made disinformation more convincing and harder to detect. AI-generated content, including fake celebrity photos and realistic deepfake videos, can spread quickly and mislead large audiences before fact-checkers have time to verify it. As synthetic media becomes more advanced, traditional verification methods are becoming less effective, increasing the risk of false information shaping public opinion. The article gives three keys to fighting disinformation. First, people need to develop stronger media literacy skills and get familiar with examples of fake and distorted content. Then, it is important to inspect the article very closely and carefully examine visual details such as unnatural textures, distorted movements, inconsistent shadows, and unrealistic perspective. The third note is to look at the wide context: the source of the content in comparison with trusted reports, and whether credible evidence supports the claims. All these are used by fact-checkers to verify whether content is real or fake. However, these clues are not always reliable. Even older or “verified” accounts can spread false information, since platforms like Facebook and X allow users to pay for verification. This is why people should carefully question online content instead of trusting it immediately. Source: The Conversation. Three ways to avoid being fooled by AI slop. [online] By Silvia Montaña-Niño and T.J. Thomson. Published 26 May 2026. Available at: https://theconversation.com/three-ways-to-avoid-being-fooled-by-ai-slop-282974 Top Of Page YouTube’s New AI Content Labels YouTube announced it is introducing new updates to improve transparency around AI-generated content. Since 2024, the platform has required creators to label videos made with AI tools, and it is now making these disclosures more visible and easier for viewers to notice. For long-form videos, labels will appear directly below the video player, while for Shorts, they will appear as an overlay on the video itself. Less significant or unrealistic AI edits will continue to be disclosed in the expanded description. Starting in May 2026, YouTube will also begin using automatic detection systems to identify significant photorealistic AI-generated content. If creators fail to disclose AI use, YouTube may automatically apply a label. Creators can challenge incorrect labels through YouTube Studio, although disclosures will remain permanent for videos created with YouTube’s AI tools or those containing metadata that confirms full AI generation. YouTube clarified that AI disclosure labels will not affect a video’s recommendations or monetization, reflecting the platform’s goal of providing clear information to viewers rather than limiting AI-generated content. Source: YouTube. Improving AI Labels for Viewers and Creators. [online] Published 27 May 2026. Available at: https://blog.youtube/news-and-events/improving-ai-labels-viewers-creators/ Top Of Page RESIST Framework to Create Resilience to Disinformation As published by the Council of Europe, the RESIST framework was developed by the Council to help countries understand and strengthen their resilience to disinformation while respecting democratic principles, human rights, and freedom of expression. Rather than measuring countries through rankings, the framework provides a structured way to examine how societies are exposed to disinformation and how well institutions and communities are prepared to address it. The methodology is based on three complementary levels of analysis. The first examines structural conditions that may influence resilience to disinformation, such as education, media, information literacy, youth, and culture. The second assesses the legal frameworks, policies, coordination mechanisms, and governance arrangements that governments have in place. The third focuses on how these measures are experienced in practice by civil society organizations and practitioners. By comparing these three dimensions, the framework aims to identify gaps between policy design and real-world implementation. The results are intended to support evidence-based policy discussions, cooperation between governments and civil society, and the development of long-term approaches to strengthening democratic resilience against disinformation. Source: Council of Europe. Report on the Methodology to Assess Societal Vulnerabilities and Strengths to Disinformation (RESIST Methodology). [online] Published 2026. Available at: https://rm.coe.int/report-on-the-methodology-to-assess-societal-vulnerabilities-and-stren/48802b8213 Top Of Page Fighting Climate Disinformation An essay published by The Union of Concerned Scientists argued that periods of extreme weather and climate-related disasters depend on a strong “safety chain,” which connects scientific data, weather forecasting, trusted communication, public understanding, and effective preparation and response. According to the author, this chain is weakened when climate research is reduced, scientific expertise is lost, or misleading information about climate science and disaster risks circulates in public debate. Disinformation can disrupt public understanding and decision-making during disasters. It identifies several recurring patterns, including false explanations for disasters, misleading claims about responsibility, attacks on the credibility of public institutions, messages that downplay risks, and efforts to link disaster response to divisive political issues. These narratives can reduce trust in official information and affect how people respond to warnings and emergencies. Therefore, the article encouraged individuals to verify information before sharing it, rely on trusted sources for weather and emergency updates, and pay attention to misleading narratives that emerge during extreme weather events. Source: Union of Concerned Scientists (UCS). Your Anti-Disinformation Safety Chain for Danger Season. [online] By Kate Cell. Published 28 May 2026. Available at: https://blog.ucs.org/kate-cell/your-anti-disinformation-safety-chain-for-danger-season/ Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 18th to the 24th of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia The Kremlin’s Expanding Digital Control Russian Propaganda Exploits Hantavirus Fears in France Condemnation of Russian Allegations Against the Baltic States Russian Hybrid Disinformation Operations in France Pro-Kremlin AI Disinformation Targets Armenia’s Elections The War in Ukraine Kremlin Falsely Claims Russia Has the Right to Attack NATO Ukraine Reveals Russian Disinformation Campaign Against Ukraine China China Shapes Narratives Through Subtle Media Influence in Albania Chinese Influence Operations Exploit G7 Local Vulnerabilities and Elite Networks [AI Related Articles] AI-Influenced Politics and Democracy First Arrests Under the Take It Down Act Over Deepfake Pornography AI-Generated Influence Operations on YouTube [General Reports] Suspected Inauthentic Facebook Activity in Malaysian Media Discussions Concerns Over U.S. Election Security Ahead of the 2026 Midterms False Claims Following the San Diego Mosque Shooting Disinformation as a Tool of Repression in Indonesia [Appendix - Frameworks to Counter Disinformation] Countering Online Misinformation in Science Education Detecting AI-Generated False Contents RFI Launches Armenian-Language Service to Strengthen Verified Reporting [CRC Glossary] [ Report Highlights] According to a report by EU vs. Disinfo, Russia’s effort to control its digital environment has evolved from simply restricting foreign platforms to building a state-managed communication ecosystem. According to a Le Monde report, leaked documents reveal a coordinated Russian disinformation campaign in France that combines traditional online propaganda with “hybrid” operations in public spaces to provoke outrage and social division. According to an article by DisinfoWatch, a false narrative promoted by Glenn Diesen claimed that Russia has the right to attack NATO following a large Ukrainian drone strike on targets near Moscow. The MIGS report argues that Chinese state-linked influence networks systematically exploit political, economic, and local governance vulnerabilities across G7 countries through elite cultivation, economic pressure, and coordinated interference operations designed to shape policy and public discourse. A study by three Malaysian researchers examined Facebook discussions on Malaysian media pages during the diplomatic tensions between China and Japan. NewsGuard’s Reality Check examined baseless claims spread on social media following the deadly shooting at The Islamic Center of San Diego, where two teenagers killed three people before taking their own lives. According to a publication by The Conversation, science teachers can no longer separate science from politics and social issues, especially as misinformation and conspiracy-driven content spread online. Radio France Internationale announced it has launched its eighteenth language service with the opening of an Armenian-language newsroom in Paris. [ Report Summary] According to a report by EU vs. Disinfo, Russia’s effort to control its digital environment has evolved from simply restricting foreign platforms to building a state-managed communication ecosystem. As published by NewsGuard, Pro-Kremlin propagandists launched a campaign falsely claiming that hantavirus was spreading rapidly across France and overwhelming the country’s healthcare system. In a recent statement, the Presidents of the Baltic States, together with many others, have condemned recent airspace violations from Russia and Belarus, as well as attempts to spread false narratives and undermine regional stability. According to a Le Monde report, leaked documents reveal a coordinated Russian disinformation campaign in France that combines traditional online propaganda with “hybrid” operations in public spaces to provoke outrage and social division. A Euronews article reports that a pro-Kremlin disinformation campaign in Armenia is using AI-generated content and coordinated online amplification to spread fear-based narratives and undermine pro-Western political forces ahead of the elections. According to an article by DisinfoWatch, a false narrative promoted by Glenn Diesen claimed that Russia has the right to attack NATO following a large Ukrainian drone strike on targets near Moscow. Ukraine’s Foreign Intelligence Service reported that it has obtained Russian documents revealing plans to destabilize Ukraine and weaken international support through a coordinated disinformation campaign. The MIGS report argues that Chinese state-linked influence networks systematically exploit political, economic, and local governance vulnerabilities across G7 countries through elite cultivation, economic pressure, and coordinated interference operations designed to shape policy and public discourse. A RSF article argues that Chinese influence operations in Albania rely on subtle narrative shaping, media partnerships, and exploitation of weak media structures to normalize pro-Beijing messaging rather than using overt disinformation alone. An article in The Hill suggested that digital technology is transforming political debate faster than democratic institutions can adapt. According to a report by CyberNews, the first arrests under the Take It Down Act have been made, involving two men accused of creating and sharing AI-generated explicit images of around 140 women without their consent. An investigation by Alliance4Europe and Doublethink Lab examined a coordinated network of at least 29 YouTube accounts that published more than 7,300 AI-generated geopolitical videos between March and December 2025. A study by three Malaysian researchers examined Facebook discussions on Malaysian media pages during the diplomatic tensions between China and Japan. According to a report by The Conversation, concerns are growing over whether key federal election security programs are fully operational. NewsGuard’s Reality Check examined baseless claims spread on social media following the deadly shooting at The Islamic Center of San Diego, where two teenagers killed three people before taking their own lives. An Amnesty International report discovered how coordinated disinformation campaigns in Indonesia have been used to silence critics, intimidate civil society, and justify violence against human rights defenders under President Prabowo Subianto. According to a publication by The Conversation, science teachers can no longer separate science from politics and social issues, especially as misinformation and conspiracy-driven content spread online. An investigation published by GPTZero introduced its Hallucination Check tool, designed to detect “vibe citing”: fabricated or inaccurate references created through large language model hallucinations. Radio France Internationale announced it has launched its eighteenth language service with the opening of an Armenian-language newsroom in Paris. [State Actors] Russia The Kremlin’s Expanding Digital Control According to a report by EU vs. Disinfo, Russia’s effort to control its digital environment has evolved from simply restricting foreign platforms to building a state-managed communication ecosystem. Earlier attempts to block apps, such as Telegram, failed. By 2026, however, the Kremlin shifted strategy by promoting the state-backed messenger MAX while disrupting access to platforms such as WhatsApp and Telegram. This created conditions where citizens and institutions increasingly depend on government-approved channels. MAX is presented as a secure and convenient communication platform, but its structure reveals broader ambitions. The app is deeply connected to Russian state systems, including digital identity and government service databases. Through verified accounts and the collection of behavioral and technical data, the platform merges communication, identity verification, and state oversight into a single infrastructure. While these features are framed as modernization, they also increase the state’s ability to monitor information flows and shape public narratives. This development is significant for disinformation because control over communication infrastructure allows the Kremlin to influence not only what information is censored, but also how information is distributed and consumed. Rather than relying solely on overt propaganda or bans, the state is creating an environment in which official platforms become the default channels for communication and information exchange. An article by DFR Lab highlighted concerns about how MAX could affect users both inside and outside Russia. Sources: EUvsDisinfo. The Digital Iron Curtain 2.0: How the MAX Messenger is Reshaping Russia’s Communication Space. [online] Published 25 May 2026. Available at: https://euvsdisinfo.eu/the-digital-iron-curtain-2-0-how-the-max-messenger-is-reshaping-russias-communication-space/ (stopfake.org) Digital Forensic Research Lab (DFRLab). The domestic Russian ‘super-app’ that could create cross-border security risks. [online] Published 21 May 2026. Available at: https://dfrlab.org/2026/05/21/the-domestic-russian-super-app-that-could-create-cross-border-security-risks/ (dfrlab.org) Top Of Page Russian Propaganda Exploits Hantavirus Fears in France As published by NewsGuard, Pro-Kremlin propagandists launched a campaign falsely claiming that hantavirus was spreading rapidly across France and overwhelming the country’s healthcare system. The operation used fabricated articles and videos designed to imitate trusted media outlets such as CNN, BBC, France 24, and The Guardian. The campaign appears aimed at damaging the reputation of French President Emmanuel Macron, a major supporter of Ukraine, while also spreading fear about a deadly virus outbreak. The false reports, linked to the Russian “Matryoshka” influence campaign, claimed that hundreds of people in France had been infected, hospitals were collapsing under pressure, and the country lacked sufficient testing because of sanctions against Russia. These fabricated stories circulated widely on X. French authorities confirmed only one hantavirus case in the country as of the 20th of May. The media organizations whose names and logos were misused publicly stated that the reports were entirely fake. Source: NewsGuard Reality Check. “Hantavirus Is Overrunning France” and Other False Claims Spread Online Amid Viral Outbreak. [online] Published May 2026. Available at: https://www.newsguardrealitycheck.com/p/hantavirus-is-overrunning-france (rtl.fr) Top Of Page Condemnation of Russian Allegations Against the Baltic States In a recent statement, the Presidents of Estonia, Latvia, and Lithuania have condemned recent airspace violations involving unmanned aerial systems entering Baltic airspace from Russia and Belarus, and strongly rejected Russia’s ongoing disinformation campaign, including false accusations that the Baltic States have allowed their territories to be used for drone attacks against Russia. They also condemned threats against Latvia at a recent UN Security Council meeting, describing these claims as deliberate attempts to spread false narratives and undermine regional stability. According to the statement, Russia is using disinformation to divert international attention from its unlawful war against Ukraine and to weaken support for Ukraine’s right to self-defence under international law. The Baltic States reaffirmed their full solidarity with Ukraine and called on Russia to end its aggression, while emphasizing that countering disinformation remains essential to preserving NATO unity and regional security. In its publication, the European Parliament’s Conference of Presidents expressed full solidarity with Estonia, Latvia, and Lithuania and called on EU institutions and NATO partners to strengthen airspace surveillance and strategic communication efforts to better respond to disinformation. Many other countries rejected Russia’s campaign, such as Canada (in an official post) and Finland. Sources: President of the Republic of Estonia. Joint Statement of the President of the Republic of Estonia, the President of the Republic of Latvia and the President of the Republic of Lithuania on the situation on NATO’s Eastern Flank. [online] Published 21 May 2026. Available at: https://president.ee/en/official-duties/statements/58511-joint-statement-president-republic-estonia-president-republic-latvia-and-president-republic (president.ee) European External Action Service (EEAS). Russia’s unfounded allegations: EP leaders express full solidarity with the Baltic states. [online] Published 22 May 2026. Available at: https://www.eeas.europa.eu/delegations/ukraine/russia%E2%80%99s-unfounded-allegations-ep-leaders-express-full-solidarity-baltic-states_en (eeas.europa.eu) Global Affairs Canada. Canada rejects Russia’s destabilizing disinformation campaign targeting the Baltic states. [online] Facebook post published May 2026. Available at: https://www.facebook.com/CanadaFP/posts/canada-rejects-russias-destabilizing-disinformation-campaign-targeting-the-balti/1429803895852584/ Top Of Page Russian Hybrid Disinformation Operations in France According to a Le Monde report, leaked documents reveal a coordinated Russian disinformation campaign in France that combines traditional online propaganda with “hybrid” operations in public spaces to provoke outrage and social division. One documented case involved pig heads marked with the name “Macron” being placed outside mosques in Paris in September 2025, an act designed to inflame tensions and generate widespread media attention. Investigators later linked the operation to individuals acting on behalf of Russian intelligence. The files showed that the planned operations included defacing synagogues, staging anti-immigrant spectacles, and creating false-flag incidents. The leak highlights a shift in Russian disinformation tactics toward real-world provocations that generate immediate media coverage and public reaction. According to the documents, these physical acts proved more effective at spreading confusion and amplifying false narratives than traditional digital propaganda. Source: Le Monde. Pig heads, green synagogues and inflatable sex dolls: Inside the Russian disinformation operations targeting France. [online] Published 24 May 2026. Available at: https://www.lemonde.fr/en/pixels/article/2026/05/24/pig-heads-green-synagogues-and-inflatable-sex-dolls-inside-the-russian-disinformation-operations-targeting-france_6753777_13.html Top Of Page Pro-Kremlin AI Disinformation Targets Armenia’s Elections A Euronews article reports that Armenia is facing a large-scale pro-Kremlin disinformation campaign ahead of its parliamentary elections, involving coordinated efforts to manipulate public opinion and undermine pro-Western political forces. According to researchers cited in the report, the operation is linked to the “Matryoshka” network, a pro-Kremlin influence structure that uses artificial intelligence to produce fabricated videos and deceptive online content at scale. The campaign promotes narratives portraying Armenia’s closer alignment with Europe as a threat to national security, warning that support for Prime Minister Nikol Pashinyan and pro-European actors could provoke conflict with Russia. The operation reportedly seeks to exploit fears of instability and geopolitical insecurity to influence voter perceptions and electoral behavior. The article further highlights that the campaign relies on AI-generated media, coordinated amplification across digital platforms, and emotionally charged geopolitical messaging designed to polarize Armenian society and weaken trust in democratic processes. Researchers describe the tactics as consistent with broader Kremlin-linked influence operations previously observed in other countries, particularly Moldova. The report frames the campaign as a deliberate effort to shape Armenia’s political trajectory by leveraging disinformation, fear-based narratives, and digitally amplified manipulation ahead of a critical election period. Source: Euronews. Pro-Kremlin actors launch large-scale disinformation campaign targeting Armenia’s elections. [online] Published 20 May 2026. Available at: https://www.euronews.com/my-europe/2026/05/20/pro-kremlin-actors-launch-large-scale-disinformation-campaign-targeting-armenias-elections (euronews.com) Top Of Page The War in Ukraine Kremlin Falsely Claims Russia Has the Right to Attack NATO According to an article by DisinfoWatch, a false narrative promoted by Glenn Diesen claimed that Russia has the right to attack NATO following a large Ukrainian drone strike on targets near Moscow. Diesen suggested that because Ukraine attacked Russia, Moscow now has “every right” to retaliate against NATO. This argument portrays NATO as the true aggressor in the war and falsely presents Ukraine as merely a proxy controlled by the West. Although Russian authorities reported that more than 1,000 drones were intercepted during the 17th of May attack, there is no independent evidence that NATO was involved in the operation. Ukraine’s actions fall under its internationally recognized right to self-defense, which NATO and international law, including Article 51 of the UN Charter, support. The claim also ignores evidence that Russia itself has endangered NATO territory. Latvian authorities reported that Russian electronic warfare redirected Ukrainian drones into Latvia, causing them to crash on Latvian soil. Source: DisinfoWatch. Russia Has No Right to Attack NATO or Ukraine. [online] Available at: https://disinfowatch.org/disinfo/russia-has-no-right-to-attack-nato-or-ukraine/ Top Of Page Ukraine Reveals Russian Disinformation Campaign Against Ukraine Ukraine’s Foreign Intelligence Service reported that it has obtained Russian documents revealing plans to destabilize Ukraine and weaken international support through a coordinated disinformation campaign. According to the materials, the effort is driven by Russia’s failed spring offensive and growing economic difficulties. The campaign is reportedly being directed by the Russian presidential administration and focuses on undermining trust in Ukraine’s mobilization efforts, military leadership, and political leadership, including attempts to damage the reputation of President Zelenskyy and his team. The strategy includes the creation and distribution of fake documents falsely presented as official Ukrainian government materials, the amplification of politically sensitive narratives, and efforts to keep selected media controversies active in the public sphere. The plan also seeks to involve former Ukrainian officials, political figures, and experts to give false narratives greater credibility. The documents further indicate that Russia intends to spread these narratives through a network of proxy media outlets targeting Western audiences. More than 15 such outlets are expected to participate in amplifying false or misleading claims. Source: Служба зовнішньої розвідки України (Foreign Intelligence Service of Ukraine). Telegram post no. 1702. [online] Telegram. Available at: https://t.me/FISUkraine/1702 (linkbaza.com) Top Of Page China China Shapes Narratives Through Subtle Media Influence in Albania A Reporters Without Borders (RSF) article argues that Chinese influence operations in Albania rely less on overt disinformation and more on sustained propaganda, narrative management, and structural penetration of the local media ecosystem. According to Albanian researcher Blerjana Bino, the tactics employed by Chinese actors focus on embedding favorable narratives into coverage of issues relevant to Albanian audiences, including economic development, technology, and geopolitics, rather than spreading easily identifiable falsehoods. Chinese state-linked media, particularly China Radio International, are described as consistently promoting positive portrayals of China while subtly advancing Beijing’s political messaging. The article emphasizes that these influence efforts exploit vulnerabilities within Albania’s media environment, including concentrated ownership, weak editorial independence, and financial fragility. The article further highlights that the effectiveness of these campaigns stems from the interaction between foreign influence operations and domestic structural weaknesses. Rather than relying primarily on fabricated content, the campaigns seek to normalize pro-China narratives over time through strategic communication, media partnerships, and indirect amplification mechanisms. The report also notes broader concerns regarding foreign information manipulation in the Western Balkans, where external actors exploit weak information ecosystems to shape public discourse and influence political perceptions. Overall, the article presents Albania as a case study in how modern influence campaigns increasingly operate through subtle narrative integration and long-term informational influence rather than through traditional high-visibility disinformation campaigns. Source: Reporters Without Borders (RSF). “When it comes to China, we’re not dealing with classic disinformation campaigns”: How Albania’s information space became vulnerable to Chinese influence. [online] Available at: https://rsf.org/en/when-it-comes-china-we-re-not-dealing-classic-disinformation-campaigns-how-albania-s-information Top Of Page Chinese Influence Operations Exploit G7 Local Vulnerabilities and Elite Networks A report by the Montreal Institute for Global Security (MIGS) characterizes Chinese interference across all G7 countries as “systemic” and deeply embedded within political, economic, and local governance structures. According to the report, the Chinese Communist Party’s influence apparatus, particularly the United Front Work Department (UFWD) and the Ministry of State Security (MSS), conducts coordinated influence and interference operations designed to bypass national-level safeguards by targeting subnational actors such as municipalities, provinces, and regional governments. The report argues that these local institutions are especially vulnerable due to lower awareness, limited institutional protections, and economic incentives tied to foreign partnerships. Tactics attributed to Chinese influence efforts include political co-option, elite cultivation, economic pressure, indirect intimidation, and narrative shaping through diplomatic, academic, and commercial relationships. The report highlights multiple cases across G7 states involving alleged electoral interference, political influence operations, espionage, and strategic economic engagement. Examples cited include electoral interference in Canada, political corruption concerns in the United States, influence over political figures in France and the United Kingdom, promotion of China’s Belt and Road Initiative in Italy, and institutional vulnerabilities in Japan. The study also describes subtler coercive methods, including implied economic retaliation linked to political decisions and the cultivation of influential elites through access, status, and ideological alignment rather than direct financial inducement. MIGS recommends establishing a permanent G7 task force to coordinate intelligence sharing, monitor proxy networks and United Front-linked organizations, and strengthen cooperation between national and local authorities to counter foreign interference and political warfare more systematically. Source: Intelligence Online. Chinese interference in G7 countries ‘systemic’, report warns. [online] Published 21 May 2026. Available at: https://www.intelligenceonline.com/asia-pacific/2026/05/21/chinese-interference-in-g7-countries--systemic--report-warns,110769520-art Top Of Page [AI Related Articles] AI-Influenced Politics and Democracy Former U.S. Senator Ben Sasse argued that Congress is failing to address major issues related to the rapid pace of technological change. An article in The Hill suggested that digital technology is transforming political debate faster than democratic institutions can adapt and warned that traditional political divisions are becoming less important than a deeper question about whether democratic norms and a shared understanding of reality can still be maintained. The article pointed to growing concerns over AI-generated political content, including deepfake videos, fabricated images, and synthetic audio designed to influence voters. One example involved manipulated content targeting congressional candidate Stefany Shaheen in New Hampshire. Modern campaign tools now allow political actors to rapidly create and distribute highly targeted messages across digital platforms, increasing the speed and scale at which misleading or fabricated material can spread. While acknowledging that new campaign technologies are not inherently harmful, AI does make fabrication more convincing and easier to distribute. If political campaigns increasingly rely on synthetic media, public trust in elections and political communication could weaken. Democracy depends on a shared understanding of reality and on maintaining transparency and clear boundaries in political communication. Source: The Hill. Technology accelerates distortion in politics. [online] Available at: https://thehill.com/opinion/technology/5883845-technology-accelerates-distortion-politics/ Top Of Page First Arrests Under the Take It Down Act Over Deepfake Pornography According to a report by CyberNews, the first arrests under the Take It Down Act have been made, involving two men accused of creating and sharing AI-generated explicit images of around 140 women without their consent. The manipulated content included both celebrities and private individuals and gained millions of views online. Authorities described the case as a serious form of digital abuse. Recent technological advances have made it much easier to generate realistic deepfake pornography, allowing users with little technical skill to create explicit fake images and videos. AI tools such as Grok reportedly allow users to generate manipulated images of real people before restrictions were introduced. Additionally, there is a real-world impact on victims, including psychological distress and reputational harm, even when the images are entirely fake. The new law requires platforms to remove reported non-consensual intimate content within 48 hours and holds both creators and platforms accountable. While arrests are an important legal step, stronger action is still needed as AI-generated abuse becomes more widespread. Sources: Cybernews. US makes first two arrests after men caught spreading viral deepfake pornography. [online] Published 22 May 2026. Available at: https://cybernews.com/ai-news/first-men-arrested-deepfake-porn/ (cybernews.com) Top Of Page AI-Generated Influence Operations on YouTube An investigation by Alliance4Europe and Doublethink Lab examined a coordinated network of at least 29 YouTube accounts that published more than 7,300 AI-generated geopolitical videos between March and December 2025. The operation relied on automated production tools, including the InVideo platform, AI-generated narration, synthetic thumbnails, stock footage, and templated formats, allowing channels to publish content at a very high frequency. The investigation identified two closely related account clusters targeting different audiences while promoting recurring geopolitical narratives. Some videos included false claims, such as reports of naval clashes between the Philippines and Malaysia that were later denied by both navies. The content was also amplified beyond YouTube through Facebook and external blogs, extending its reach across platforms. Additionally, the paper showed clear signs of coordinated and automated behaviour, although no direct link to a specific state actor has been established. This type of AI-enabled content laundering presents a systemic challenge for online platforms because it can manipulate recommendation systems and evade traditional moderation methods by reproducing similar content with small variations. Removing individual accounts is not sufficient, and broader platform-level measures are recommended, such as detecting semantically similar content and coordinated posting patterns. Sources: Alliance4Europe. The Infinite Slop Machine. [online] Published May 2026. Available at: https://alliance4europe.eu/wp-content/uploads/2026/05/The-Infinite-Slop-Machine.pdf Top Of Page [General Reports] Suspected Inauthentic Facebook Activity in Malaysian Media Discussions A study by three Malaysian researchers examined Facebook discussions on Malaysian media pages during the diplomatic tensions between China and Japan following remarks by Japanese Prime Minister Sanae Takaichi about Taiwan. Focusing on comments posted between November and December 2025, the researchers identified at least 30 accounts showing signs of potentially inauthentic behaviour across the Facebook pages of Oriental Daily and The Star. These accounts appeared during periods of intense discussion about Japan–China relations, and many later became inactive or disappeared, making further verification difficult. The study identified several recurring characteristics among the accounts, including recent creation dates, limited personal posting history, unusual profile details, and the use of stock, AI-generated, or celebrity profile images. Some accounts used similar Malaysian-Chinese slang styles in usernames and showed high-frequency engagement in politically sensitive discussions. Repetitive anti-Japanese narratives were observed across multiple posts, although they did not establish proof of coordinated behaviour. The report emphasized patterns rather than firm conclusions. Many of the accounts later became inactive or disappeared, which limited verification but added to researchers’ concerns about unusual account behavior. However, noting that the findings do not provide conclusive evidence of organized activity. Source: Doublethink Lab. Tracking suspicious Facebook accounts after Takaichi’s Taiwan remarks. [online] Published on Medium. Available at: https://medium.com/doublethinklab/tracking-suspicious-facebook-accounts-after-takaichis-taiwan-remarks-c1265553cded Top Of Page Concerns Over U.S. Election Security Ahead of the 2026 Midterms According to a report by The Conversation, as the 2026 U.S. midterm elections approach, concerns are growing about whether key federal election security programs are fully operational. The Election Security Group, a joint effort led by the National Security Agency and U.S. Cyber Command, had not yet been publicly activated as of mid-May 2026. At the same time, the Trump administration’s 2025 decision to defund the Elections Infrastructure Information Sharing and Analysis Center reduced coordination and threat-sharing support for local election officials. The report reviewed how concerns about foreign election interference grew after Russian operations during the 2016 election, including social media campaigns linked to the Internet Research Agency and cyberattacks targeting political organizations and state election systems. In response, the U.S. government created several election security initiatives, including the Election Security Group, which later expanded its focus beyond Russia to include threats from countries such as China, Iran, and North Korea. These programs aim to detect cyber threats, share intelligence, and respond quickly to false claims or online influence operations targeting elections. The current election cycle may face additional risks from AI-generated content, cyberattacks, and reduced coordination between federal agencies and local officials. Without fully functioning election security programs, state and local authorities may have fewer resources to respond to emerging threats during the 2026 elections. Source: The Conversation. For the first time in a decade, the next election could be less secure than the one preceding it. [online] Published 20 May 2026. Available at: https://theconversation.com/for-the-first-time-in-a-decade-the-next-election-could-be-less-secure-than-the-one-preceding-it-282107 (ctpost.com) Top Of Page False Claims Following the San Diego Mosque Shooting NewsGuard’s Reality Check examined baseless claims spread on social media following the deadly shooting at The Islamic Center of San Diego, where two teenagers killed three people before taking their own lives. Shortly after the attack, several anti-Islam commentators, including Laura Loomer, falsely claimed the shooting was a “false flag” staged to generate sympathy for Muslim Americans. These claims were widely shared online despite no evidence being presented to support them. However. authorities identified the suspects as two teenagers with no reported ties to Islam. Available evidence, including a manifesto reviewed by investigators and social media activity linked to the suspects, points instead to possible white supremacist motives. It was noted that similar unfounded theories have followed other high-profile shootings, illustrating how misinformation can spread rapidly and shape public discussion even when official investigations contradict them. Source: NewsGuard Reality Check. “San Diego mosque shooting” another false narrative spreads online. [online] Available at: https://www.newsguardrealitycheck.com/p/san-diego-mosque-shooting-another Top Of Page Disinformation as a Tool of Repression in Indonesia An Amnesty International report discovered how coordinated disinformation campaigns in Indonesia have been used to silence critics, intimidate civil society, and justify violence against human rights defenders under President Prabowo Subianto. A central case is the acid attack on human rights defender Andrie Yunus, which was preceded by sustained online disinformation portraying him as a “foreign agent.” These false narratives were spread through coordinated social media campaigns involving accounts linked to military and state-aligned actors, aiming to discredit his activism and undermine public trust in civil society organizations. A broader pattern was identified, in which “foreign agent” accusations are deliberately used as a disinformation strategy to frame dissent, protests, and independent journalism as externally orchestrated threats to national stability. Amnesty found evidence of deceptive coordination across social media platforms, with synchronized posting of identical false content designed to mislead audiences, delegitimize critics, and create an environment where intimidation and violence become easier to justify. According to the findings, this disinformation has contributed to Indonesia’s growing authoritarian trend by suppressing civic space and discouraging public criticism. The report also criticized major platforms such as Meta, TikTok, YouTube, and X for failing to effectively limit the spread of harmful false narratives, allowing coordinated disinformation to go viral and amplify threats to human rights and democratic freedoms. Source: Amnesty International. “Building Up Imaginary Enemies”: Misinformation, Disinformation and ‘Foreign Agent’ Allegations in President Prabowo’s Indonesia. [online] Published 19 May 2026. Available at: https://www.amnesty.org.au/wp-content/uploads/2026/05/Amnesty-Building-Up-Imaginary-Enemies.pdf (amnesty.org) Top Of Page [Appendix - Frameworks to Counter Disinformation] Countering Online Misinformation in Science Education According to a publication by The Conversation, science teachers can no longer separate science from politics and social issues, especially as misinformation and conspiracy-driven content spread online. Topics such as climate change, vaccines, and artificial intelligence are increasingly debated in classrooms, influenced by social media and broader political tensions. Avoiding these discussions may leave students less prepared to evaluate conflicting claims and understand how scientific knowledge is produced. The authors highlighted the importance of teaching the history of science to help students understand that science has always been shaped by social, political, and cultural factors. Examples such as eugenics, the exclusion of women from scientific recognition, and the treatment of Indigenous knowledge systems show how science can be connected to power and inequality. Additionally, some actors intentionally spread distrust and confusion around science, making it harder for the public to distinguish reliable research from misleading claims. Therefore, examining these historical contexts can help students better understand why some communities may distrust scientific institutions today. Teachers play an important role in helping students critically evaluate information, recognize the social dimensions of science, and participate in democratic discussions. Source: The Conversation. How teaching the history of science can help equip students to face polarized times. [online] Published 20 May 2026. Available at: https://theconversation.com/how-teaching-the-history-of-science-can-help-equip-students-to-face-polarized-times-280332 (educationnewscanada.com) Top Of Page Detecting AI-Generated False Contents An investigation published by GPTZero introduced its Hallucination Check tool, designed to detect “vibe citing”: fabricated or inaccurate references created through large language model hallucinations. GPTZero has developed an automated system to scan public reports from major institutions, arguing that this problem has become widespread across research, consulting, and academic publishing. The company stated that the findings presented are part of a broader ongoing investigation, with additional cases expected to be published to reveal the scale of the issue. As one of its findings, the article examined a 2025 cybersecurity report by Ernst & Young Canada, where Hallucination Check allegedly detected multiple fabricated citations, contradictory statistics, and signs of AI-generated content. The analysis found several examples of contradictory data and fabricated sources. In one case, a false citation appeared to have been copied from a low-quality fintech blog and then presented as evidence in a major consulting report. The article warned that false citations can have wider consequences beyond a single report. Once published online, inaccurate claims may be repeated in media coverage, cited in future research, and incorporated into AI search tools, creating a cycle of information contamination. This phenomenon weakens public trust in research and highlights the growing need for stronger verification processes to prevent AI-generated disinformation from entering professional and academic knowledge systems. Source: GPTZero. Investigation: Hallucinations in Ernst & Young Report on Loyalty Fraud. [online] Published 14 May 2026. Available at: https://gptzero.me/investigations/ey (gptzero.me) Top Of Page RFI Launches Armenian-Language Service to Strengthen Verified Reporting Radio France Internationale (RFI) announced it has launched its eighteenth language service with the opening of an Armenian-language newsroom in Paris. The new digital-only service, staffed by eight journalists, will produce content in Eastern Armenian and focus on reaching younger audiences through social media platforms such as Instagram, Facebook, and TikTok. Its main goal is to provide news coverage through innovative formats while verifying information and reporting directly from Armenia. The launch comes at a significant time as Armenia prepares for the upcoming legislative elections. According to the newsroom’s editors, the elections are already being targeted by false and misleading narratives linked to regional political tensions. In response, fact-checking will play a central role in the service’s work, with the team aiming to provide reliable reporting and help audiences better identify false information in a fragile media environment. By producing exclusively in Eastern Armenian, RFI aims to speak directly to citizens of the Republic of Armenia while also engaging wider Armenian-speaking audiences. Source: Radio France Internationale (RFI). RFI launches Armenian-language desk targeting youth and disinformation. [online] Published 25 May 2026. Available at: https://www.rfi.fr/en/international/20260525-rfi-launches-armenian-language-desk-targeting-youth-and-disinformation Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 11th to the 17th of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Kremlin Indoctrination in the Russian Education System Russian Influence Amid Georgian Patriarch Election The War in Ukraine Russian Disinformation About the Deportation of Ukrainian Children Pro-Russian Disinformation Targeting Ukraine and the EU Russian Network Warfare in Ukraine [AI Related Articles] AI Disinformation Growth in Australia AI-Driven Misinformation in the UK Election Politics Halupedia AI-Generated Misinformation New Pentagon-Linked Media Network [Cyfluence Attack] AI-Backed Cyber Threats and Influence [General Reports] Disinformation Around the Hantavirus Outbreak Conspiracy Theories Around Attempts on Donald Trump’s Life The Rise of Citizen Journalism and Its Effects on The Information Landscape AI-Generated Election Content in India Taiwan Security Bureau Records 60 Percent Surge in Inauthentic Social Accounts East Asian Disinformation Campaigns Foreshadow Future Global Threats [Appendix - Frameworks to Counter Disinformation] NewsGuard’s Tool to Check and Evaluate Chatbots False Information FTC Targets AI-Generated Intimate Disinformation and Deepfake Abuse [CRC Glossary] [ Report Highlights] As published by The Jamestown Foundation, the election of Metropolitan Shio (Mujiri) as the new head of the Georgian Orthodox Church has sparked intense controversy, with critics accusing the ruling Georgian Dream party and pro-Kremlin networks of influencing the process. A Small Wars Journal analysis evaluates Russia's integrated cognitive and network warfare model across four domains, finding a persistent gap between strategic intent and battlefield execution. AEI's China-Taiwan Update documents a 60 percent increase in inauthentic social media accounts identified by Taiwan's National Security Bureau, as Beijing increasingly outsources influence operations to IT contractors relying on AI-generated content to scale cognitive warfare campaigns. A new report from Google Threat Intelligence Group warned that cybercriminals and state-backed actors are increasingly using artificial intelligence to strengthen cyberattacks and automate malicious operations. The Belfer Center report argues that disinformation campaigns in Taiwan and South Korea demonstrate how state and non-state actors exploit digital platforms, political polarization, and foreign influence operations to manipulate democratic societies and shape public opinion. The FTC’s Take It Down Act guidance requires online platforms to rapidly remove AI-generated and nonconsensual intimate content and adopt measures to prevent its amplification and redistribution. [ Report Summary] According to a report by EU vs. Disinfo, the Kremlin has expanded propaganda throughout the Russian education system to shape children into loyal supporters of the state and the war in Ukraine. As published by The Jamestown Foundation, the election of Metropolitan Shio (Mujiri) as the new head of the Georgian Orthodox Church has sparked intense controversy, with critics accusing the ruling Georgian Dream party and pro-Kremlin networks of influencing the process. According to an article by EU vs. Disinfo, Russia has faced growing international accusations over the forced deportation and transfer of Ukrainian children since the invasion of Ukraine. According to a report by EEAS, during the winter of 2025 - 2026, Russia intensified disinformation campaigns aimed at weakening Ukrainian morale and damaging support for Ukraine within the European Union. A Small Wars Journal analysis evaluates Russia's integrated cognitive and network warfare model across four domains, finding a persistent gap between strategic intent and battlefield execution. As stated in a report by ASPI, a growing number of Australians believe the online information environment is becoming unreliable and manipulative, with disinformation now seen as a major national security concern. As published by CyberNews, false online claims recently spread that George Boyd, a newly elected councilor from the UK’s Reform UK party, was not a real person but an AI-generated identity. As published by CyberNews, Halupedia is an experimental website that creates endless fictional encyclopedia articles generated entirely by AI. A recent investigation by former researchers involved in the 2022 “Unheard Voice” report examined a newer generation of Pentagon-linked media websites operating in multiple languages across the Middle East, Latin America, Eastern Europe, and Asia. AEI's China-Taiwan Update documents a 60 percent increase in inauthentic social media accounts identified by Taiwan's National Security Bureau, as Beijing increasingly outsources influence operations to IT contractors relying on AI-generated content to scale cognitive warfare campaigns. A new report from Google Threat Intelligence Group warned that cybercriminals and state-backed actors are increasingly using artificial intelligence to strengthen cyberattacks and automate malicious operations. As revealed in a Wired article, following the hantavirus outbreak aboard the MV Hondius cruise ship, social media was quickly flooded with conspiracy theories and misinformation. A recent poll by NewsGuard and YouGov found that a significant number of Americans believe conspiracy theories claiming that assassination attempts against Donald Trump were staged. An article by The Hill argued that public trust in traditional media has sharply declined, with a 2025 Gallup poll showing only 28% of Americans trust mainstream news for accurate reporting, largely as a result of their perceived bias and selective reporting. A study published by ISSN explored how AI-generated political content affected first-time voters during India’s 2024 General Elections, with a particular focus on the state of Rajasthan. The Belfer Center report argues that disinformation campaigns in Taiwan and South Korea demonstrate how state and non-state actors exploit digital platforms, political polarization, and foreign influence operations to manipulate democratic societies and shape public opinion. NewsGuard announced it has upgraded its browser extension to work directly inside AI chatbots such as OpenAI’s ChatGPT and Google Gemini, allowing users to see reliability scores for the sources cited in AI-generated answers. The FTC’s Take It Down Act guidance requires online platforms to rapidly remove AI-generated and nonconsensual intimate content and adopt measures to prevent its amplification and redistribution. [State Actors] Russia Kremlin Indoctrination in the Russian Education System According to a report by EU vs. Disinfo, the Kremlin has expanded propaganda throughout the Russian education system to shape children into loyal supporters of the state and the war in Ukraine. Russian schools now combine patriotic rituals, military-style activities, and rewritten textbooks that promote the Kremlin’s version of history and justify the invasion of Ukraine. Authorities are also tightening ideological control in occupied Ukrainian territories, where thousands of children are being educated under Russian narratives designed to erase Ukrainian identity. An important example of this campaign is the mandatory class "Conversations about Important Things", introduced in 2022 and focused on patriotism and militarization. The program includes propaganda themes such as glorifying Russian victories, promoting "digital sovereignty", and presenting war participants as heroes. The Oscar-winning documentary Mr. Nobody Against Putin exposed these practices, showing pro-war indoctrination and visits from Wagner mercenaries before being banned in Russia in 2026. Beginning in 2026 and 2027, the Kremlin plans to deepen this influence by targeting even younger children with new classes such as "Good Games", "My Family", and "Spiritual and Moral Culture". While presented as lessons about family values and morality, these programs promote nationalist messaging, loyalty to the state, and traditional Russian values. Critics argue that the Kremlin is using schools to normalize propaganda from early childhood. Source: EUvsDisinfo. From preschool to adolescence: expanding ideological control in Russian schools. [online] Published 12 May 2026. Available at: https://euvsdisinfo.eu/from-preschool-to-adolescence-expanding-ideological-control-in-russian-schools/ Top Of Page Russian Influence Amid Georgian Patriarch Election As published by The Jamestown Foundation, the election of Metropolitan Shio (Mujiri) as the new head of the Georgian Orthodox Church has sparked intense controversy, with critics accusing the ruling Georgian Dream party and pro-Kremlin networks of influencing the process. Allegations of pressure on bishops, coordinated pro-Shio media campaigns, and the presence of pro-Russian figures at the church council fueled claims that the election lacked transparency and independence. These concerns deepened political polarization in Georgia and raised fears that the Church could become more vulnerable to Russian influence. Information manipulation played a major role throughout the election period. Pro-government media and coordinated social media accounts promoted Shio as the “natural” successor, while opposition groups and clergy accused authorities of running a hidden campaign to secure his victory. Concerns about Russian influence were amplified by Shio’s theological education in Moscow, his reported ties to the pro-Russian businessman Levan Vasadze, and the rapid congratulations from Russian Orthodox Patriarch Kirill. At the same time, government officials dismissed accusations of interference as politically motivated attacks and "black propaganda". Critics fear the Kremlin may use religious institutions and disinformation networks to preserve influence in Georgia and weaken pro-European sentiment. Although there is no direct evidence proving Shio holds pro-Russian views, the opaque election process and competing narratives have damaged public trust and intensified divisions within both Georgian society and the Church itself. Source: Jamestown Foundation. Georgian Patriarch Election Fuels Kremlin Interference Claims. [online] Published 13 May 2026. Available at: https://jamestown.org/georgian-patriarch-election-fuels-kremlin-interference-claims/ (jamestown.org) Top Of Page The War in Ukraine Russian Disinformation About the Deportation of Ukrainian Children According to an article by EU vs. Disinfo, Russia has faced growing international accusations over the forced deportation and transfer of Ukrainian children since the invasion of Ukraine. While international organisations, investigators, and human rights groups describe these actions as war crimes and crimes against humanity, the Kremlin has launched a large-scale disinformation campaign to present them as humanitarian "rescues" or evacuations. Russian officials and state media repeatedly claim that children were saved from war zones, while denying allegations of kidnapping, forced assimilation, and unlawful deportation. The campaign even claims that these children are "naturally Russian" and belong within Russia’s cultural sphere. The Kremlin spreads these narratives through official statements, state-controlled media, and pro-Russian online networks. Different messages are tailored for different audiences - Russian citizens hear stories of heroic evacuations, while international audiences are told that Russia is protecting vulnerable children. At the same time, Russia attempts to discredit institutions such as the International Criminal Court by calling investigations politically motivated. Evidence gathered by international bodies, however, shows that many children were transferred without parental consent, separated from their families, and placed in Russian camps, schools, or adoptive families where Ukrainian identity is suppressed, and Russian patriotism is promoted. An article by Stop Fake even revealed that Russia has been accused of obstructing repatriation while promoting misleading claims that family reunification is simple and ongoing. Many parents were forced to search for their children independently, often relying on volunteers and charities because Russian authorities concealed the children’s location. Sources: EUvsDisinfo. How Russia lies about the stolen Ukrainian children. [online] Published 11 May 2026. Available at: https://euvsdisinfo.eu/how-russia-lies-about-the-stolen-ukrainian-children/ (stopfake.org) StopFake. Fake: Russia did not engage in the “forced transfer” of Ukrainian children, but “evacuated” them. [online] Published 13 May 2026. Available at: https://www.stopfake.org/ru/fejk-polpredstva-rossii-v-es-rossiya-ne-zanimalas-prinuditelnym-peremeshheniem-ukrainskih-detej-a-evakuirovala-ih/ (StopFake) Top Of Page Pro-Russian Disinformation Targeting Ukraine and the EU According to a report by EEAS, during the winter of 2025 - 2026, Russia intensified disinformation campaigns aimed at weakening Ukrainian morale and damaging support for Ukraine within the European Union. As Russian attacks caused severe energy shortages and humanitarian difficulties in Ukraine, pro-Kremlin networks on Telegram, Facebook, and regional news sites spread manipulative narratives designed to exploit fear, exhaustion, and uncertainty. These campaigns portrayed Ukraine as a burden on EU countries and framed European integration as dangerous for Ukrainian society. The report found that Russian and pro-Russian actors promoted false claims about Ukrainian refugees, EU corruption, and declining European support for Ukraine. Disinformation narratives accused the EU of supporting forced mobilization, planning discriminatory actions against Ukrainians, etc. Some campaigns used gender-related disinformation, while other messages attempted to damage relations between Ukraine and Poland by spreading rumors about visas and historical conflicts. Researchers also documented fake stories about financial aid, property confiscation, and crimes allegedly committed by Ukrainian refugees. In occupied territories, propagandists created "mirror" narratives that copied Russia’s own practices while falsely blaming Ukraine or the EU. Source: European External Action Service (EEAS). Quarterly monitoring report on pro-Russian disinformation targeting EU–Ukraine relations (December 2025 – February 2026). [online] Published 7 May 2026. Available at: https://www.eeas.europa.eu/delegations/ukraine/quarterly-monitoring-report-pro-russian-disinformation-targeting-eu%E2%80%93ukraine-relations-december-2025_en (eeas.europa.eu) Top Of Page Russian Network Warfare in Ukraine An analysis published by Small Wars Journal states that Russian network warfare strategy, rooted in Soviet-era doctrines of reflexive control and strategic deception (maskirovka), seeks to disrupt the confidentiality, integrity, and availability of adversary systems across four integrated operational domains: computer network operations, AI-enabled information operations, electronic warfare, and space-based capabilities, with the Ukraine conflict serving as the primary live laboratory for testing and refining this integrated doctrine. An analysis published by Small Wars Journal states that despite initial technical successes such as the Viasat satellite communication attack in the opening hours of the invasion, Moscow significantly underestimated commercial resilience, including SpaceX's Starlink network, and Ukraine's adaptive defense, revealing a persistent and structurally significant gap between Russia's ambitious network-centric design and its actual operational execution in the field. Source: Small Wars Journal. Assessing Russian Network Warfare Through the Lens of the Ukraine Conflict. [online] Published 12 May 2026. Available at: https://smallwarsjournal.com/2026/05/12/assessing-russian-network-warfare/ (smallwarsjournal.com) Top Of Page [AI Related Articles] AI Disinformation Growth in Australia As stated in a report by ASPI, a growing number of Australians believe the online information environment is becoming unreliable and manipulative, with disinformation now seen as a major national security concern. Research by economist Joseph Stiglitz and Maxim Ventura-Bolet argued that online markets naturally reward disinformation because sensational and emotional content generates more engagement and user attention than accurate reporting. Social media platforms and AI systems have changed how people consume information. Instead of visiting original news sources, users increasingly rely on social media feeds or AI-generated summaries. This weakens traditional journalism by reducing revenue for professional news organizations, while platforms profit from keeping users engaged for as long as possible. According to the study, algorithms favor provocative and polarizing content, regardless of whether it is true, creating an environment where disinformation spreads faster and more widely than verified information. The report warned that AI could accelerate this downward spiral by quickly producing large volumes of low-quality or misleading content, relying on unreliable data sources. As audiences become more polarized, they seek information that confirms their existing beliefs and further damages trustworthy journalism. Market forces alone will not solve the problem and call for stronger government regulation, such as platform accountability, measures against coordinated disinformation campaigns, and protections for quality news producers. Source: The Strategist (Australian Strategic Policy Institute). How AI rots the information environment: a Nobel economist has modelled it. [online] Published 12 May 2026. Available at: https://www.aspistrategist.org.au/how-ai-rots-the-information-environment-a-nobel-economist-has-modelled-it/ Top Of Page AI-Driven Misinformation in the UK Election Politics As published by CyberNews, false online claims recently spread that George Boyd, a newly elected councilor from the UK’s Reform UK party, was not a real person but an AI-generated identity. The rumors were fueled by social media users and amplified by the AI chatbot Grok, which suggested that Boyd’s campaign photo was "very likely" AI-generated because of its overly polished appearance. These claims quickly became an example of how AI tools and online speculation can contribute to disinformation during elections. In reality, Boyd is a real person who successfully won a local election in Norfolk, England. Journalists from the BBC confirmed his identity directly through interviews. The confusion began because AI had been used to create a countryside background for his campaign image, while the original photo itself was genuine. Party officials explained that the edited image was intended only to improve the design of campaign materials, not to create a fake candidate. Sources: Cybernews. “I am not AI:” elected Reform UK councilor denies rumor spread by Grok. [online] Published 13 May 2026. Available at: https://cybernews.com/ai-news/ai-elected-reform-uk-councilor-grok/ (cybernews.com) Top Of Page Halupedia AI-Generated Misinformation As published by CyberNews, Halupedia is an experimental website that creates endless fictional encyclopedia articles generated entirely by AI. Inspired by Wikipedia, the platform produces convincing but completely fabricated entries the moment users click on a topic. The articles imitate the style of academic writing, making the false information appear credible and realistic. The platform demonstrates how AI hallucinations can create fake historical events, institutions, and references that sound believable despite having no basis in reality. One example mentioned is the “Great Pigeon Census of 1887,” an invented, detailed but entirely fictional event. Because the format closely resembles trusted sources like Wikipedia, users may instinctively believe the content, even when it is inaccurate or misleading. Critics also pointed to problems with offensive and prejudicial content appearing on the site, highlighting the difficulty of moderating AI-generated material. Sources: Cybernews. Halupedia: Wikipedia fights AI hallucinations with its own AI. [online] Published 14 May 2026. Available at: https://cybernews.com/ai-news/halupedia-wikipedia-ai-hallucination/ (cybernews.com) Top Of Page New Pentagon-Linked Media Network A recent investigation by former researchers involved in the 2022 “Unheard Voice” report examined a newer generation of Pentagon-linked media websites operating in multiple languages across the Middle East, Latin America, Eastern Europe, and Asia. Earlier operations relied heavily on fake personas, coordinated social media activity, and AI-generated profile images. According to the latest report, the newer network appears to use a different approach, relying more on paid advertising and outlet-branded content distributed through platforms such as X and Meta. The report identified several connected websites, including Arabic, Farsi, Russian, Spanish, and English-language outlets covering topics such as regional security, China’s role in Latin America, Iran, Ukraine, and space policy. Researchers found links between the sites through shared technical infrastructure, advertising activity, and design similarities connected to earlier U.S. military-funded media projects. While many articles were based on real events and verifiable sources, the investigation argued that the editorial focus consistently emphasized themes such as corruption, foreign influence, organized crime, and geopolitical rivalry. The analysis also explored how audiences reacted to the content online. Some users questioned the framing of articles or asked AI tools like Grok to verify claims. Researchers noted that many discussions focused on whether individual claims were accurate, while broader questions about sponsorship, editorial selection, and audience targeting were harder to identify through standard fact-checking methods. Sources: Lawfare. Fewer Bots, More Ads: The Pentagon’s Evolving Online Influence Campaigns. [online] Published 13 May 2026. Available at :https://www.lawfaremedia.org/article/fewer-bots--more-ads--the-pentagon-s-evolving-online-influence-campaigns (lawfaremedia.org) Top Of Page [Cyfluence Attack] AI-Backed Cyber Threats and Influence A new report from Google Threat Intelligence Group warned that cybercriminals and state-backed actors are increasingly using artificial intelligence to strengthen cyberattacks and automate malicious operations. Tools such as the AI-powered malware "PROMPTSPY" can independently analyze systems, generate commands, and manipulate victim devices in real time. Cybercriminals are also using AI-generated "decoy logic" and code obfuscation to hide malicious activity and evade security detection. Researchers identified what they believe is the first AI-assisted zero-day exploit, designed to bypass security protections and potentially support large-scale attacks. The report also found that threat actors linked to China, North Korea, and Russia are actively using AI for vulnerability research, malware development, and cyber espionage. A major concern indeed is the growing role of AI in influence operations. Pro-Russian campaigns such as "Operation Overload" use AI-generated media, including deepfakes and synthetic content, to create false narratives and manipulate public opinion. AI allows threat actors to produce fake videos and voices and coordinated propaganda at a large scale, making disinformation campaigns faster, cheaper, and more difficult to identify. Researchers warn that AI is becoming both a powerful weapon for attackers and a critical challenge for global cybersecurity and information integrity. Sources: Google Cloud Blog (Google Threat Intelligence Group). Adversaries leverage AI for vulnerability exploitation, augmented operations, and initial access. [online] Published May 2026. Available at: https://cloud.google.com/blog/topics/threat-intelligence/ai-vulnerability-exploitation-initial-access (tildes.net) Top Of Page [General Reports] Disinformation Around the Hantavirus Outbreak As revealed in a Wired article, following the hantavirus outbreak aboard the MV Hondius cruise ship, social media was quickly flooded with conspiracy theories and misinformation. Some online influencers and conspiracy theorists compared the outbreak to the Covid-19 pandemic, falsely claiming it was part of a global control agenda or caused by Covid-19 vaccines. Others promoted unproven treatments such as ivermectin, often using fear surrounding the outbreak to market emergency medical kits and alternative health products. Health disinformation spread rapidly through platforms such as X, Facebook, Instagram, and TikTok, amplified by prominent anti-vaccine activists, wellness influencers, and political figures. False claims included accusations that pharmaceutical companies intentionally created the virus for profit and baseless theories linking the outbreak to Israel through antisemitic narratives. Some theories even suggested that the outbreak was caused by 6G technology, according to an article by NewsGuard. Experts noted that many of these conspiracy theories reused the same patterns and networks that became widespread during the COVID-19 pandemic, even when the claims directly contradicted one another. Public health experts warn that social media now functions as a fast-moving disinformation ecosystem where misleading narratives can spread before evidence-based medical information reaches the public. Organizations such as the World Health Organization responded by clarifying that there is no scientific evidence supporting claims that ivermectin treats hantavirus or that Covid vaccines cause the disease. Source: WIRED. Hantavirus conspiracy theories are already spreading online. [online] Published 12 May 2026. Available at: https://www.wired.com/story/hantavirus-conspiracy-theories-are-already-spreading-online/ (wired.com) Top Of Page Conspiracy Theories Around Attempts on Donald Trump’s Life A recent poll by NewsGuard and YouGov found that a significant number of Americans believe conspiracy theories claiming that assassination attempts against Donald Trump were staged (for further information, see W19 May Cyfluence Report). According to the survey, 30 percent of respondents believed at least one of the three incidents was fake, while only 38 percent believed all three were genuine. Investigators found no evidence that any of the attacks were staged, and authorities stated that the alleged attackers acted independently without links to Trump or his administration. The false narratives spread rapidly across social media after each incident. Conspiracy theorists claimed that Trump used "blood pills", staged shootings for political gain, or created distractions from political controversies. Many of the same accounts that promoted these theories after the 2024 Pennsylvania rally shooting also spread similar claims following later incidents. Researchers found that social media platforms helped amplify the narratives, allowing misinformation to continue circulating long after the events occurred. The poll also revealed strong political and generational divisions in belief in these conspiracy theories. Democrats and younger Americans were more likely to believe the events were staged compared to Republicans and older groups. Source: NewsGuard. 30 percent of Americans think at least one Trump assassination attempt was staged. [online] Available at: https://www.newsguardrealitycheck.com/p/30-percent-of-americans-think-at-least-one-trump-assassination-attempt-was-staged Top Of Page The Rise of Citizen Journalism and Its Effects on The Information Landscape An article by The Hill argued that public trust in traditional media has sharply declined, with a 2025 Gallup poll showing only 28% of Americans trust mainstream news for accurate reporting, largely as a result of their perceived bias and selective reporting. The article linked this distrust to what it described as media-driven “panic” during events like the COVID-19 pandemic and other major political controversies. In this environment, "citizen journalism" has emerged as an alternative source of information, using examples of independent creators who publish viral investigations on social media. These cases are presented as evidence that individuals outside traditional media can expose fraud or hold institutions accountable. At the same time, legacy outlets are criticized for allegedly misreporting or downplaying major events, therefore contributing to public skepticism. The piece also reflected broader debates about disinformation in the modern media landscape. While it praised independent reporting for increasing transparency, critics argue that the same ecosystem can spread misinformation quickly without editorial oversight. It highlighted competing narratives about trust, suggesting a shift from centralized journalism toward decentralized, digital-first reporting, where both verified information and misleading claims circulate more easily, and audiences must decide what to believe. Source: The Hill. Citizen journalism rise restores trust in media. [online] Available at: https://thehill.com/opinion/campaign/5873753-citizen-journalism-rise-trust/ (archive.ph) Top Of Page AI-Generated Election Content in India A study published by ISSN explored how AI-generated political content affected first-time voters during India’s 2024 General Elections, with a particular focus on the state of Rajasthan. Researchers examined the spread of deep fakes and AI-assisted political messaging on platforms such as WhatsApp and Facebook, especially in semi-urban and rural communities where digital and political awareness are still developing. According to the study, AI-driven online communication has changed the electoral environment faster than regulatory systems can respond. First-time voters were especially vulnerable to misleading political narratives because of low digital literacy and heavy reliance on social media. These factors strongly influenced political awareness, trust in institutions, and voting behaviour among young voters. Using case studies, policy analysis, and regional media discussions, the paper examined how AI-generated content shaped local political experiences during the elections. To protect democratic participation in the digital age, researchers recommended introducing clearer laws on AI use during elections, improving electoral oversight, expanding fact-checking systems in local languages, and developing community-based digital literacy programs. The paper particularly emphasizes the importance of grassroots education in helping voters critically evaluate online political content. Source: Lyceum India. Electoral Misinformation. by Dimple Oza. [online] Available at: https://repository.lyceumindia.in/wp-content/uploads/Electoral-Misinformation.-by-Dimple-Oza.pdf Top Of Page Taiwan Security Bureau Records 60 Percent Surge in Inauthentic Social Accounts A report published by American Enterprise Institute states that Taiwan's National Security Bureau has recorded a 60 percent increase in inauthentic social media accounts between 2024 and 2025 and tracked over 2 million instances of disinformation within the same period, a 74 percent increase since 2023, as Beijing increasingly outsources its influence operations to Chinese IT and marketing companies that rely on automation and AI-generated content to scale cognitive warfare campaigns targeting Taiwanese audiences. The report also states that Beijing's four core strategic goals for Taiwan influence operations, exacerbating internal divisions, weakening Taiwanese will to resist, influencing allied willingness to support Taiwan, and winning international support for Chinese standards, are being pursued through a sophisticated multi-domain framework blending economic incentives, AI-generated social media content, and coordinated cognitive pressure at a scale that increasingly challenges Taiwan's detection and response infrastructure. Source: American Enterprise Institute (AEI). China–Taiwan Update: May 15, 2026. [online] Published 15 May 2026. Available at: https://www.aei.org/articles/china-taiwan-update-may-15-2026/ Top Of Page East Asian Disinformation Campaigns Foreshadow Future Global Threats The Belfer Center report analyzes how disinformation has become an increasingly sophisticated instrument of political influence in Taiwan and South Korea, offering lessons for future threats to democratic systems. The report highlights that both state and non-state actors exploit digital platforms to disseminate false or misleading information, manipulate public opinion, and deepen social and political divisions. Taiwan’s experience demonstrates how foreign interference campaigns leverage evolving communication channels and culturally tailored narratives to influence elections and public discourse, while South Korea illustrates how domestic political environments can normalize rumors, speculation, and misinformation as recurring elements of political competition. The study warns that lowered technological and logistical barriers now enable a broader range of actors to conduct influence operations on a scale. The report emphasizes that disinformation campaigns rely on coordinated amplification across social media ecosystems, exploitation of societal polarization, and manipulation of trust in institutions and media. It identifies foreign influence operations, election-related disinformation, and digitally amplified misinformation as central threats to democratic resilience. The analysis further stresses that no single sector can effectively counter these campaigns alone: governments face civil-liberty constraints, technology companies lack sufficient incentives to aggressively moderate harmful content, and civil society organizations often lack scale and access. As a result, the report advocates for cross-sector coordination involving governments, technology platforms, researchers, journalists, and civil society actors to improve transparency, strengthen public awareness, enhance detection capabilities, and build resilience against hostile information manipulation campaigns. Source: Crowley, B. J., Corcoran, C., and Johnson, R. Disinformation Threat Watch. [online] Belfer Center for Science and International Affairs, Harvard Kennedy School. Published May 2019. Available at: https://www.belfercenter.org/publication/disinformation-threat-watch (belfercenter.org) Top Of Page [Appendix - Frameworks to Counter Disinformation] NewsGuard’s Tool to Check and Evaluate Chatbots False Information NewsGuard announced it has upgraded its browser extension to work directly inside AI chatbots such as OpenAI’s ChatGPT and Google Gemini, allowing users to see reliability scores for the sources cited in AI-generated answers. The tool shows whether a source is trustworthy or linked to disinformation, propaganda, or false reporting. For example, if a chatbot cites the Russian state media outlet TASS, NewsGuard displays a warning and its low trust score, helping users recognize potentially misleading information. The update responds to growing concerns that AI chatbots can unintentionally spread disinformation by relying on unreliable websites and low-quality content farms. According to NewsGuard’s research, leading AI chatbots repeated false or misleading claims nearly 29% of the time when asked about controversial topics, including narratives linked to Russian, Chinese, and Iranian influence operations. Researchers found that users often cannot distinguish between credible journalism and manipulated or false content because chatbots present all sources equally. NewsGuard argued that transparency about sources is essential as AI tools become a major way people access news and information. Its system uses journalist-reviewed ratings and detailed "Nutrition Labels" to explain why a source may be unreliable, including cases involving health misinformation, election falsehoods, or state propaganda. The goal is to help users better identify disinformation and critically evaluate the information provided by AI systems. Source: NewsGuard. NewsGuard’s reliability ratings now appear in ChatGPT and Gemini responses, displaying the trustworthiness of AI chatbots’ news sources. [online] Published May 2026. Available at: https://www.newsguardtech.com/press/newsguards-reliability-ratings-now-appear-in-chatgpt-and-gemini-responses-displaying-the-trustworthiness-of-ai-chatbots-news-sources/ Top Of Page FTC Targets AI-Generated Intimate Disinformation and Deepfake Abuse The Federal Trade Commission (FTC) stakeholder letter regarding the Take It Down Act (TIDA) outlines new compliance obligations for online platforms in response to the growing spread of nonconsensual intimate imagery, including AI-generated “digital forgeries” and manipulated media. The document frames such content as a significant online harm facilitated by social media, messaging services, image-sharing platforms, and other user-generated content environments. It emphasizes that digitally altered or AI-generated intimate content can be rapidly disseminated across platforms, contributing to harmful information manipulation and reputational damage. The FTC identifies online platforms as key actors responsible for mitigating the spread of this content through mandatory notice-and-removal systems and proactive detection measures. The letter details several countermeasures intended to limit the amplification and recirculation of manipulated or nonconsensual content. Platforms are required to establish accessible reporting mechanisms, remove reported material and identical copies within 48 hours, and implement technologies such as hashing to prevent reuploads. The guidance also encourages coordination with organizations such as the National Center for Missing and Exploited Children and StopNCII.org to improve cross-platform detection and suppression efforts. The FTC warns that failure to comply with these requirements may result in substantial civil penalties, underscoring a broader regulatory effort to address AI-enabled abuse, deceptive digital content, and the viral spread of harmful manipulated media online. Source: Federal Trade Commission (FTC). The Take It Down Act – Template Letter. [online] Published May 2026. Available at: https://www.ftc.gov/system/files/ftc_gov/pdf/TIDA-Stakeholder-Letter.pdf (ftc.gov) Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

In this article, Jason Potel examines how AI-powered chatbots are being weaponized for influence operations by exploiting emotional dependency and loneliness. Unlike early bots that simply amplified pre-written content, today's large language models can build prolonged parasocial relationships with users, cultivating trust before nudging them toward desired political views. Recent studies show these tactics are remarkably effective: AI chatbots shifted voter attitudes by up to 10 percentage points in the 2025 Polish and Canadian elections, outperforming traditional campaign advertising. Compounding the threat, autonomous AI agent swarms have demonstrated the ability to coordinate propaganda campaigns without any human direction. Potel identifies loneliness as the primary vulnerability driving susceptibility to these operations, alongside personality traits like agreeableness and pre-existing beliefs in immaterial systems. State-aligned models like China's DeepSeek and companion apps like Xiaoice illustrate how governments are already embedding ideological constraints directly into AI that millions interact with daily. The article concludes with a call for sustained academic and policy attention as AI grows from a blunt amplification tool into a self-directing engine capable of running influence operations end-to-end. Author: Jason Potel [Download PDF Here]

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 04th to the 10th of May 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] Russia Russian Disinformation Targets Europe Russian Victory Day Parade Unmasks the Truth Behind the Propaganda Argentina Detained Suspected Russian Operative Linked to Disinformation Network The War in Ukraine Russian Propaganda Attacks Kyiv’s Outreach to National Minority’s in Russia Kremlin Disinformation About Strikes in Ukraine Pro-Russian Disinformation Monitoring Iran IRGC Influence Networks in Latin America Iran's Digital Manipulation During the War [AI Related Articles] Anthropic’s Chatbot Influenced by Russian and Iranian Propaganda AI Image Detection Tools Mislead Users and Empower Fake News [Cyfluence Attack] BO Team Cyber Threats and Possible Connection to Hacktivism [General Reports] NewsGuard’s Index Proves Surge in Americans’ Vulnerability to Misinformation Online Misinformation and Hate Speech in Jordan Antisemitic Conspiracies Spread Through Social Media Algorithms Trump’s Assassination Attempt Creates Waves of Misinformation in the Media Natural Disasters Disinformation Networks Foreign Manipulation Takes Advantage of the Alberta Separatist Debate The Evolution of South African Media and Its Effect on Society Jailbroken AI Models Fuel Disinformation and Malicious Operations [Appendix - Frameworks to Counter Disinformation] South Korea Battles Surge In AI-Driven Election Disinformation eYou as a European Alternative to X With AI Fact-Checking Poland Launches a New Initiative Against Disinformation [CRC Glossary] [ Report Highlights] According to a report by The Jamestown Foundation, Ukraine’s recent decision to expand outreach to non-Russian national minorities within the Russian Federation has become a new target for manipulation. A recent NewsGuard audit found that Anthropic’s AI chatbot Claude has become more vulnerable to disinformation campaigns, showing a significant increase in repeating false claims sourced from Russian and Iranian state-affiliated media. A two-year study by ISD Jordan found that misinformation and online hate speech are deeply interconnected within Jordan’s digital environment. Research by ISD showed that algorithm-driven disinformation and harmful recommendation systems on TikTok and Rumble are exposing UK minors to antisemitic content, often without users actively searching for it. A publication by VSW Bundesverband describes how Jailbroken AI systems are enabling hostile actors to automate disinformation, bypass safety controls, and support cyber and physical attack planning at scale. As published by TVP World, Poland’s state-owned media organizations launched a joint fact-checking initiative to combat the growing spread of disinformation. [ Report Summary] As published by EEAS, between December 2025 and February 2026, pro-Russian disinformation campaigns intensified alongside Russia’s attacks on Ukraine’s energy infrastructure, which caused severe winter blackouts and hardship. As revealed in an EU vs. Disinfo report, the Kremlin’s decision to significantly scale back the 2026 Victory Day parade highlights a growing gap between Russia’s propaganda narratives and operational reality. As reported by The Record, Argentine authorities have detained Russian citizen Dmitrii Novikov and ordered his expulsion over allegations that he was involved in a Kremlin-linked disinformation network operating across Latin America, Europe, and the United States. According to a report by The Jamestown Foundation, Ukraine’s recent decision to expand outreach to non-Russian national minorities within the Russian Federation has become a new target for manipulation. As stated in a Stop Fake report, a recent claim by the Russian Ministry of Defense that it had avoided striking central Kyiv "for humanitarian reasons" is a clear example of disinformation aimed at distorting the reality of Russia’s military actions. According to an article by EU vs. Disinfo, recent pro-Kremlin disinformation campaigns have focused on portraying Europe as economically unstable, authoritarian, and morally corrupt. According to a report by Resecurity, the destabilization of Venezuela following Nicolás Maduro’s reported arrest in January 2026 has significantly disrupted Iranian-linked operational networks in Latin America. According to an article by The Hill, Iran has increasingly used disinformation and digital influence tactics as part of its response to the United States. A recent NewsGuard audit found that Anthropic’s AI chatbot Claude has become more vulnerable to disinformation campaigns, showing a significant increase in repeating false claims sourced from Russian and Iranian state-affiliated media. A recent article by NewsGuard highlighted a growing disinformation risk linked to AI image detection tools, as several leading systems frequently misidentify real images as AI-generated. NewsGuard’s latest Reality Gap Index showed a sharp rise in Americans’ susceptibility to online disinformation, with 43 percent of respondents believing at least one major false claim circulating during the first quarter of 2026. As published by Secure List, research uncovered signs of possible collaboration between BO Team and the hacktivist group "Head Mare" through shared infrastructure and overlapping activity. A two-year study by ISD Jordan found that misinformation and online hate speech are deeply interconnected within Jordan’s digital environment. As published by Wired, recent online discussions surrounding alleged assassination attempts against President Donald Trump have become a major example of disinformation spreading across all communities. Research by ISD showed that algorithm-driven disinformation and harmful recommendation systems on TikTok and Rumble are exposing UK minors to antisemitic content, often without users actively searching for it. Graphika’s publication revealed that natural disasters have become prime opportunities for misinformation actors to exploit public attention and spread false narratives. According to a report by DisinfoWatch, foreign actors are increasingly exploiting the Alberta separatist debate to spread disinformation, deepen internal divisions, and undermine trust in Canada’s democratic institutions. A publication by VSW Bundesverband describes how Jailbroken AI systems are enabling hostile actors to automate disinformation, bypass safety controls, and support cyber and physical attack planning at scale. According to an article by The Conversation, South African television reflects the country’s broader political and social struggles, particularly in the way information has been controlled and sometimes distorted. According to an article by CyberNews, a new European social media platform called eYou aims to position itself as an alternative to X by offering AI-powered fact-checking in real time and emphasizing digital sovereignty. As published by TVP World, Poland’s state-owned media organizations launched a joint fact-checking initiative to combat the growing spread of disinformation. An article by France 24 shows how South Korea is intensifying efforts to counter AI-generated election disinformation as deepfakes, conspiracy narratives, and manipulated political content rapidly spread across digital platforms. [State Actors] Russia Russian Disinformation Targets Europe According to an article by EU vs. Disinfo, recent pro-Kremlin disinformation campaigns have focused on portraying Europe as economically unstable, authoritarian, and morally corrupt. In the lead-up to Victory Day on 09th of May, foreign information manipulation and interference (FIMI) outlets spread false narratives claiming that Europe is "reviving Nazism", facing possible food rationing, and using new digital tools to spy on citizens. A central tactic has been the distortion of real events and official statements. For example, comments by the European Central Bank about possible fuel market disruptions were falsely reframed as warnings of food rationing across Europe. Similarly, the EU’s new age verification app, developed to protect minors online, was falsely presented as a mass surveillance tool. Another recurring theme is the false accusation that Europe is reviving Nazism, a long-standing Kremlin narrative used to justify hostility toward the West and delegitimize support for Ukraine. By repeatedly labeling political opponents as "Nazis", Russian propaganda attempts to manipulate historical memory and frame Russia as a defender against fascism. Source: EUvsDisinfo. Fake European crises and real Russian failures. [online] Available at: https://euvsdisinfo.eu/fake-european-crises-and-real-russian-failures/ Top Of Page Russian Victory Day Parade Unmasks the Truth Behind the Propaganda As revealed in an EU vs. Disinfo report, the Kremlin’s decision to significantly scale back the 2026 Victory Day parade, including the absence of tanks and heavy military equipment, highlights a growing gap between Russia’s propaganda narratives and operational reality. Officially justified by "security concerns" and alleged threats from Ukraine, the reduced parade contrasts sharply with pro-Kremlin disinformation claims that Russia’s war in Ukraine is "proceeding according to plan". The event, traditionally used to project military strength and national resilience, now exposes the limits of this narrative. Victory Day parades have long been a central tool of Russian information manipulation. For years, they have been used to reinforce false narratives of Russia’s military superiority and moral legitimacy. These spectacles have transformed historical memory into propaganda and replaced the message of preventing future war with militarized symbolism designed to normalize confrontation. The shrinking scale of the 2026 parade undermines this disinformation strategy. It reflects the pressure of military setbacks, internal security concerns, and Russia’s difficulty maintaining the image of invincibility it has carefully constructed. As the Kremlin continues to rely on symbolic displays and historical revisionism, the reduced parade serves as evidence that the reality of the war increasingly contradicts the propaganda narrative presented to both Russian citizens and international audiences. Source: EUvsDisinfo. The parade that shrank Russia’s Victory Day under pressure. [online] Available at: https://euvsdisinfo.eu/the-parade-that-shrank-russias-victory-day-under-pressure/ Top Of Page Argentina Detained Suspected Russian Operative Linked to Disinformation Network As reported by The Record, Argentine authorities have detained Russian citizen Dmitrii Novikov and ordered his expulsion over allegations that he was involved in a Kremlin-linked disinformation network operating across Latin America, Europe, and the United States. According to Argentina’s Ministry of National Security, Novikov was connected to "La Compañía", also known as Project Lakhta, an influence operation allegedly coordinated by Russian intelligence services and previously associated with Yevgeny Prigozhin. Officials accused Novikov of entering Argentina under false pretenses and participating in efforts to influence domestic affairs through propaganda, political intelligence gathering, and coordinated social media campaigns. The investigation reportedly uncovered collaboration between La Compañía and local actors aimed at discrediting the Argentine government. Authorities also linked Novikov to earlier allegations in the Dominican Republic, where he was accused of managing cyber influence operations funded through cryptocurrency. Russia denied any involvement and dismissed the accusations as anti-Russian claims unsupported by evidence. Source: Recorded Future News. Argentina to expel Dmitrii Novikov. [online] Published 6 May 2026. Available at: https://therecord.media/argentina-to-expel-dmitrii-novikov Top Of Page The War in Ukraine Russian Propaganda Attacks Kyiv’s Outreach to National Minority’s in Russia According to a report by The Jamestown Foundation, Ukraine’s recent decision to expand outreach to non-Russian national minorities within the Russian Federation has become a new target for manipulation. While Kyiv presents this policy as support for minority rights and resistance to Russian imperialism, pro-Kremlin narratives are likely to portray it as an attempt to destabilize Russia and provoke state collapse. These narratives aim to distort Ukraine’s diplomatic and political initiatives by framing them as aggressive subversion rather than strategic engagement with oppressed communities. A key disinformation risk lies in the Kremlin’s likely use of this development to reinforce claims that Ukraine and its Western partners seek the "destruction" of Russia, depicting external actors as orchestrating chaos inside Russia. By exaggerating Ukraine’s cooperation with ethnic activists and military volunteers, Russian information campaigns justify further repression and rally domestic support. Disinformation surrounding Ukraine’s outreach efforts is likely to focus on fear, division, and false claims of foreign interference, while obscuring the underlying political realities of ethnic repression and regional discontent inside the Russian Federation. Source: Jamestown Foundation. Kyiv to Expand Its Outreach to National Minorities within Russia. [online] Published 7 May 2026. Available at: https://jamestown.org/kyiv-to-expand-its-outreach-to-national-minorities-within-russia/ Top Of Page Kremlin Disinformation About Strikes in Ukraine As stated in a Stop Fake report, a recent claim by the Russian Ministry of Defense that it had avoided striking central Kyiv "for humanitarian reasons" is a clear example of disinformation aimed at distorting the reality of Russia’s military actions. This narrative has been widely amplified through Russian state media and Telegram channels to create a false image of restraint, despite extensive evidence of repeated strikes on civilian areas throughout the war. In reality, Russian forces have repeatedly targeted central Kyiv and civilian infrastructure since the beginning of the full-scale invasion. Documented attacks include missile strikes on residential districts in October 2022, the destruction of parts of the Okhmatdet Children’s Hospital in July 2024, and deadly attacks on homes, schools, and kindergartens in 2025. The continued escalation of missile and drone strikes, including incidents near Kyiv’s city center in 2026, directly contradicts any claim of "humanitarian abstinence". Source: StopFake. Fake: Russia refrained from strikes on the center of Kyiv for humanitarian reasons — Russian Ministry of Defense. [online] Available at: https://www.stopfake.org/ru/fejk-rossiya-vozderzhivalas-ot-udarov-po-tsentru-kieva-po-gumanitarnym-soobrazheniyam-minoborony-rf/ Top Of Page Pro-Russian Disinformation Monitoring As published by EEAS, between December 2025 and February 2026, pro-Russian disinformation campaigns intensified alongside Russia’s attacks on Ukraine’s energy infrastructure, which caused severe winter blackouts and hardship. Coordinated networks across Telegram, Facebook, and news sites used emotional manipulation and fear to influence public opinion, portraying Ukraine as a burden to the EU and framing European integration as harmful. These campaigns aimed to weaken morale and shift blame for the war away from Russia. As part of these events, propagandists promoted claims of "EU fatigue", accused the EU of corruption and weakness, and attempted to damage trust in European support for Ukraine. Disinformation also targeted Ukrainian refugees with contradictory stories, depicting them both as mistreated victims and as threats to European societies, while false claims were used to undermine relations between Ukraine and key partners such as Poland. Another major pattern was the deliberate use of manipulative and fabricated content, including gender-based disinformation and "mirrored" narratives that project Russia’s actions onto Ukraine. Source: European External Action Service (EEAS). DARE Compilation Q1 2026 (English). [online] Available at: https://www.eeas.europa.eu/sites/default/files/2026/documents/DARE_Compilation_Q1_2026_ENG.pdf Top Of Page Iran IRGC Influence Networks in Latin America According to a report by Resecurity, the destabilization of Venezuela following Nicolás Maduro’s reported arrest in January 2026 has significantly disrupted Iranian-linked operational networks in Latin America, forcing IRGC and Hezbollah-affiliated actors to shift activities toward Colombia and Ecuador. These networks continue to rely on criminal partnerships involving drug trafficking, money laundering, and logistical cooperation with local cartels and armed groups. While regional authorities have intensified arrests, sanctions, and counterterrorism cooperation, Iranian-linked structures remain adaptive and capable of reorganizing across new operational environments. As part of this activity, Iranian state-backed media platforms, cultural centers, proxy communication channels, and encrypted social media networks are reportedly used to recruit sympathizers and manipulate local political discourse. Under the cover of cultural diplomacy and religious outreach, these networks allegedly promote ideological messaging and create influence ecosystems designed to support broader strategic objectives while obscuring operational intent. Despite operational setbacks, Iranian-linked actors are increasingly shifting toward digital influence and information warfare, which makes counter-disinformation efforts as critical as traditional counterterrorism measures. Strengthened cyber intelligence, regional coordination, and proactive monitoring of online influence networks are essential to limit Iran’s ability to exploit instability across Latin America. Source: Resecurity. Iranian Proxy Networks in Latin America Post-Maduro: IRGC. [online] Published 5 May 2026. Available at: https://www.resecurity.com/blog/article/iranian-proxy-networks-in-latin-america-post-maduro-irgc Top Of Page Iran's Digital Manipulation During the War According to an article by The Hill, Iran has increasingly used disinformation and digital influence tactics as part of its response to the United States, turning social media into a central battleground during the ongoing conflict over the last months. Through sarcastic messaging, AI-generated videos, and other tailored content, Iranian-linked accounts have sought to flood the information environment with material designed to undermine U.S. credibility and weaken support for President Trump. Experts describe these efforts as a form of "sharp power", the deliberate use of communication platforms to destabilize opponents by exploiting their own media systems and narratives. Iranian digital campaigns have mirrored and reversed earlier U.S. social media messaging, repurposing American political imagery, internet humor, and viral formats to create counter-narratives. A recent analysis by CSIS added that Iranian disinformation campaigns framed the conflict as a corrupt and costly war serving elite interests, using manipulated content to amplify concerns about economic hardship, political corruption, military sacrifice, etc. These narratives were often boosted by verified accounts and amplified by aligned Russian and Chinese messaging ecosystems. The analysis stressed that democratic societies must adapt to this evolving information battlefield by responding faster and more effectively to digital disinformation. The central warning is that in modern warfare, controlling the information environment is as critical as military operations, and credibility has become a decisive strategic asset. Source: The Hill. Iran’s social media war. [online] Available at: https://thehill.com/newsletters/technology/5863155-irans-social-media-war/ Top Of Page [AI Related Articles] Anthropic’s Chatbot Influenced by Russian and Iranian Propaganda A recent NewsGuard audit found that Anthropic’s AI chatbot Claude has become more vulnerable to disinformation campaigns, showing a significant increase in repeating false claims sourced from Russian and Iranian state-affiliated media. Claude repeated pro-Kremlin falsehoods in 15 percent of responses to typical user prompts, a sharp rise from previous audits, and for the first time cited Russian state-controlled outlets such as RT and sites linked to the Pravda disinformation network. The chatbot also cited Iranian state-affiliated media when responding to false claims related to the U.S.-Iran conflict. The findings highlighted how coordinated disinformation ecosystems exploit the structure of web-based AI systems. Networks such as Pravda, which reportedly published millions of articles amplifying Kremlin falsehoods, can flood search results and increase the likelihood that AI models treat repeated propaganda as credible information. This creates a serious amplification risk, where chatbots not only repeat false narratives but also direct users toward deceptive sources, exposing them to further misinformation. Similar patterns were observed in Iranian state-controlled media, where false economic and geopolitical claims were repeated without sufficient verification of sources. Experts attribute this trend to different reasons, such as limited transparency in how AI systems prioritize sources, possible performance adjustments affecting response quality, and the growing manipulation of online information spaces by state-backed influence operations. The audit underscored a critical challenge for AI platforms: without stronger source validation and safeguards, chatbots risk becoming accidental distributors of disinformation, reinforcing hostile information campaigns. Source: NewsGuard. Anthropic’s AI Chatbot Is Leaning More on Russian and Iranian Propaganda Sources, NewsGuard Audit Finds. [online] Published 4 May 2026. Available at: https://www.newsguardtech.com/special-reports/anthropic-ai-chatbot-claude-russia-iran-propaganda/ Top Of Page AI Image Detection Tools Mislead Users and Empower Fake News A recent article by NewsGuard highlighted a growing disinformation risk linked to AI image detection tools, as several leading systems frequently misidentify real images as AI-generated. In tests involving authentic photos from the 2026 U.S.–Iran conflict, some tools incorrectly labeled genuine images as fake, with one tool producing false positives 40 percent of the time. The findings showed how unreliable detection results can fuel disinformation campaigns. In one notable case, social media users cited an AI detector’s incorrect classification to falsely claim that an authentic video of Israeli Prime Minister Benjamin Netanyahu was fabricated, using this to support false rumors about his death. The audit also revealed major inconsistencies between tools, with different systems often giving contradictory assessments of the same image. This lack of industry standards makes it easier for disinformation actors to cite results that support false claims selectively. Therefore, AI detection tools should not be treated as definitive proof of authenticity or manipulation but should be combined with human verification and source analysis to counter visual disinformation effectively. Sources: NewsGuard. Leading AI image detection tools mislead online users, often declaring authentic content fake. [online] Available at: https://www.newsguardtech.com/special-reports/leading-ai-image-detection-tools-mislead-online-users-often-declaring-authentic-content-fake/ Top Of Page [Cyfluence Attack] BO Team Cyber Threats and Possible Connection to Hacktivism As published by Secure List, in the first quarter of 2026, the BO Team cyber group shifted its attacks from healthcare organizations to manufacturing, telecommunications, and oil and gas sectors, while continuing to justify its actions through political messages shared on Telegram. This messaging reflects a disinformation strategy, as it presents the group’s operations as politically motivated activism while hiding their real objectives, which increasingly point toward covert cyberespionage rather than public disruption. Nevertheless, the investigation also uncovered signs of possible collaboration between BO Team and the hacktivist group "Head Mare" through shared infrastructure and overlapping activity, which suggests that BO Team may be part of a broader coordinated cyber threat network. Sources: Securelist (Kaspersky). BoTeam campaign, ZeroNetKit, Headmare. [online] Available at: https://securelist.ru/tr/boteam-campaign-zeronetkit-headmare/115429/ Top Of Page [General Reports] NewsGuard’s Index Proves Surge in Americans’ Vulnerability to Misinformation NewsGuard’s latest Reality Gap Index showed a sharp rise in Americans’ susceptibility to online disinformation, with 43 percent of respondents believing at least one major false claim circulating during the first quarter of 2026, which makes nearly double the 22 percent recorded in December 2025, and with only seven percent of respondents correctly identifying all three tested claims as false. The findings suggested a significant deterioration in the public's ability to identify false narratives, while uncertainty about online information also increased. The most successful false narratives involved politically and emotionally charged topics, including a false claim accusing CNN of fabricating Iranian ceasefire statements or an AI-manipulated image of an Iranian missile. The CNN-related falsehood proved especially effective, generating over 35 million views and misleading nearly a quarter of respondents. The report highlighted the increasing role of AI-generated and AI-edited content in modern disinformation campaigns. Although respondents performed somewhat better at identifying the manipulated missile image as false, widespread uncertainty shows that synthetic media continues to challenge public verification skills. Source: NewsGuard. Q1 2026 Reality Gap Index Report. [online] Available at: https://www.newsguardtech.com/wp-content/uploads/2026/05/Q1-2026-Reality-Gap-Index-Report-1.pdf Top Of Page Online Misinformation and Hate Speech in Jordan A two-year study by ISD Jordan found that misinformation and online hate speech are deeply interconnected within Jordan’s digital environment. Events such as the Gaza conflict and instability in Syria triggered significant spikes in sectarian, nationalist, and gender-based abuse across social media platforms. The research showed that disinformation often creates the conditions for hate speech to spread by fueling fear, polarization, and identity-based tensions. The report identified three dominant forms of harmful content: misogynistic abuse targeting women in public life, sectarian hate directed mainly at Shia communities and other minorities, and exclusionary nationalist discourse that deepens social divisions. These narratives are frequently reinforced by coordinated harassment campaigns and manipulated through regional information flows. Arabizi, which is Arabic written in Latin characters and numbers, is often used to evade platform moderation systems, exposing major gaps in Arabic-language content detection and enabling harmful disinformation to circulate with limited oversight. Jordan’s online disinformation challenges cannot be treated as purely domestic, as regional narratives and external influence regularly shape local discourse. To change the situation, the report called for stronger digital governance, clearer legal definitions, greater transparency in Arabic-language moderation, and digital literacy programs focused on how disinformation spreads through algorithms and online echo chambers. Source: Institute for Strategic Dialogue (ISD). Mapping Digital Hate: Jordan. [online] Available at: https://www.isdglobal.org/wp-content/uploads/2026/04/Mapping-digital-hate_Jordan.pdf Top Of Page Antisemitic Conspiracies Spread Through Social Media Algorithms Research by ISD showed that algorithm-driven disinformation and harmful recommendation systems on TikTok and Rumble are exposing UK minors to antisemitic content, often without users actively searching for it. TikTok’s recommendation algorithm gradually pushes young users from lifestyle-related content toward conspiracy theories and politically charged antisemitic narratives. Rumble presents a more direct threat, exposing users immediately to overt hate speech and violent conspiracy content through its "Editor’s Picks" feature. algorithms amplify disinformation by connecting mainstream topics, such as lifestyle content or discussions around the Israel-Palestine conflict, to extremist narratives. Interactive features, including comments, stickers, and sounds, further accelerate the spread of harmful misinformation by linking seemingly benign posts to coded antisemitic messaging. Additionally, the findings highlighted major failures in platform moderation and content detection, particularly in identifying coded hate speech and preventing algorithmic escalation. It showed that reactive content removal is insufficient, calling instead for stronger regulation, algorithmic transparency, and proactive safeguards under the UK Online Safety Act. Source: Institute for Strategic Dialogue (ISD). Amplifying Antisemitism: How Recommender Algorithms Serve Harmful Content to Children. [online] Available at: https://www.isdglobal.org/wp-content/uploads/2026/05/Amplifying-Antisemitism_How-Recommender-Algorithms-Serve-Harmful-Content-to-Children.pdf Top Of Page Trump’s Assassination Attempt Creates Waves of Misinformation in the Media As published by Wired, recent online discussions surrounding alleged assassination attempts against President Donald Trump (for further information, see W18 April Cyfluence Report) have become a major example of disinformation spreading across both left-wing and right-wing communities. Following the White House Correspondents’ Dinner incident, social media was quickly flooded with unsupported claims that the attack was staged. These narratives then expanded to include the 2024 Butler, Pennsylvania, assassination attempt, with influencers and commentators promoting conspiracy theories despite the lack of credible evidence. The disinformation relies on the selective interpretation of incomplete information, misleading video clips, and speculative claims presented as proof. Viral posts pointed to Trump’s public reactions, the positioning of photographers, security procedures, and limited public details about the attackers as supposed evidence of orchestration. However, available reporting, witness accounts, and official investigations contradict these claims, showing that many of the so-called "anomalies" are either misrepresented or taken out of context. Source: WIRED. There is no evidence the Trump assassination attempts were staged. People still believe they were. [online] Available at: https://www.wired.com/story/there-is-no-evidence-the-trump-assassination-attempts-were-staged-people-still-believe-they-were/ Top Of Page Natural Disasters Disinformation Networks Graphika’s founder's appearance on "60 Minutes" on the 26th of April was published in Graphika this week, revealing that natural disasters have become prime opportunities for misinformation actors to exploit public attention and spread false narratives. Because such crises focus widespread public attention on a single event, extremist groups use these moments to push misleading content and amplify distrust in official institutions. These campaigns often present distorted or alternative explanations designed to exploit fear and uncertainty during emergencies. Foreign influence networks, including white nationalist networks, have increasingly used disaster zones to promote themselves through highly visible aid efforts while spreading conspiracy theories that undermine trust in government agencies such as FEMA. By portraying themselves as more effective than official responders, they seek to recruit supporters and legitimize their agendas. Foreign state-linked actors have also weaponized disaster-related disinformation. Chinese influence networks, for example, have used U.S. natural disasters to promote narratives of American government failure while portraying China’s crisis response as superior. Source: Graphika. What We Told 60 Minutes: What Happens Online When Natural Disaster Strikes. [online] Available at: https://graphika.com/posts/what-we-told-60-minutes-what-happens-online-when-natural-disaster-strikes Top Of Page Foreign Manipulation Takes Advantage of the Alberta Separatist Debate According to a report by DisinfoWatch, foreign actors are increasingly exploiting the Alberta separatist debate to spread disinformation, deepen internal divisions, and undermine trust in Canada’s democratic institutions. While Alberta’s political and economic grievances are legitimate topics for democratic debate, external influence campaigns seek to distort these concerns by portraying separation as inevitable or widely supported. This manipulation threatens Canada’s "cognitive sovereignty": the public’s ability to make political decisions free from foreign interference. The report identified three main disinformation sources: covert Russian influence operations, overt amplification by U.S. political figures and influencers, and AI-generated "slopaganda". Russian-linked media networks have repeatedly promoted narratives depicting Alberta as exploited and primed for separation, while U.S.-based influencers have amplified annexation and instability narratives to massive online audiences. At the same time, AI-generated political content can imitate authentic Canadian commentary and make coordinated manipulation harder to detect. The greatest concern is that these disinformation efforts exploit existing public distrust and information gaps, particularly during sensitive political moments such as petition verification, referendum campaigns, or post-vote disputes. The report emphasized that strengthening media literacy, improving rapid-response systems, and supporting independent journalism are essential to countering foreign manipulation before such narratives take hold. Source: DisinfoWatch. Foreign interference targeting Canada and Alberta. [online] Available at: https://disinfowatch.org/foreign-interference-targeting-canada-and-alberta/ Top Of Page The Evolution of South African Media and Its Effect on Society According to an article by The Conversation, South African television reflects the country’s broader political and social struggles, particularly in the way information has been controlled and sometimes distorted. Introduced only in 1976 after years of government resistance, television was initially used by the apartheid regime as a tool of propaganda and exclusion. By limiting access and carefully controlling content, the state used broadcasting to reinforce disinformation, preserve racial segregation, and isolate South Africans from global narratives and alternative perspectives. With the arrival of democracy in 1994, television underwent a major transformation. The broadcasting system shifted from a state-controlled monopoly to a more diverse and competitive media environment, with the SABC redefined as a public broadcaster meant to inform, educate, and represent all communities. This period marked an effort to replace propaganda with inclusive storytelling and nation-building. However, later years saw renewed challenges, including political interference, financial mismanagement, and forms of institutional manipulation that threatened editorial independence and raised concerns about the spread of biased or misleading information. Today, South African television operates in a digital era shaped by streaming platforms and algorithm-driven media. While these platforms offer opportunities to globalize local stories and amplify marginalized voices, they also create new risks of disinformation through commercial influence and unequal control over narratives. The history of South African television highlights the continuing struggle to ensure the media remains a source of accurate representation rather than distortion. Therefore, the fight against disinformation is central to the country’s democratic future. Source: The Conversation. Propaganda machine to public good: A brief history of 50 years of TV in South Africa. [online] Available at: https://theconversation.com/propaganda-machine-to-public-good-a-brief-history-of-50-years-of-tv-in-south-africa-280085 Top Of Page Jailbroken AI Models Fuel Disinformation and Malicious Operations A publication by VSW Bundesverband describes how jailbroken AI models are being exploited by hostile actors to support disinformation operations, cyber activities, and potential physical attacks. By bypassing built-in safeguards, these manipulated systems can generate harmful content that would normally be restricted, including propaganda narratives, malicious guidance, and operational planning materials. The report highlights growing concerns that such capabilities are increasingly accessible to state-linked groups and extremist networks seeking to amplify influence campaigns and destabilizing activities. According to the article, the primary tactic involves “jailbreaking” AI systems through specially crafted prompts designed to override safety controls and content restrictions. Once compromised, the models can be used to automate the creation of persuasive false narratives, coordinate deceptive online messaging, and assist in producing detailed instructions for malicious operations. The article emphasizes that these techniques lower the technical barrier for conducting influence and disruption campaigns at scale. The actors referenced in the article include state-affiliated entities, cybercriminal groups, and other malicious organizations seeking strategic advantages through AI-enabled manipulation. The report frames the issue as part of a broader information security challenge in which generative AI tools are increasingly weaponized for hostile influence operations, disinformation dissemination, and coordinated destabilization efforts. Source: Verein für Sicherheitspolitik (VSW) Bundesverband. Studie: Desinformation. [online] Available at: https://www.vsw-bundesverband.de/wp-content/uploads/Studie-Desinformation.pdf Top Of Page [Appendix - Frameworks to Counter Disinformation] South Korea Battles Surge In AI-Driven Election Disinformation A France24 article examines how South Korea is confronting the rapid expansion of AI-driven disinformation ahead of national and local elections, as increasingly sophisticated generative AI tools enable the production of highly convincing fabricated content. South Korean election authorities and digital forensic teams have identified a sharp rise in manipulated media, including fake television reports, AI-generated political propaganda songs, and fabricated videos targeting political candidates. The report highlights that false AI-generated election content increased dramatically between the 2024 general election and the subsequent presidential campaign, reflecting the accelerating use of generative AI in influence operations. Election officials described the challenge as a constant “whack-a-mole” struggle, with disinformation spreading rapidly across social media platforms, chatrooms, and politically aligned online communities. The article further details how conspiracy narratives surrounding election fraud and vote-rigging have amplified distrust in democratic institutions, including claims promoted by supporters of former president Yoon Suk Yeol. Authorities have responded with strengthened legislation introduced in 2023, allowing the removal of deceptive AI-generated election content and imposing severe penalties on repeat offenders. Detection efforts combine AI-based forensic software with human review to identify manipulated imagery and media. The report emphasizes that hostile information tactics increasingly exploit emotionally persuasive AI-generated narratives, deepfake content, and coordinated amplification across digital platforms, while online harassment and intimidation campaigns against election workers further contribute to the destabilization of the information environment. Source: France 24. AI disinfo tests South Korean laws ahead of local elections. [online] Available at: https://www.france24.com/en/live-news/20260507-ai-disinfo-tests-south-korean-laws-ahead-of-local-elections Top Of Page eYou as a European Alternative to X With AI Fact-Checking According to an article by CyberNews, a new European social media platform called eYou aims to position itself as an alternative to X by offering AI-powered fact-checking in real time. Founded by French entrepreneur Grégoire Vigroux and his partner Jasseem Allybokus, the platform was developed after surveys showed widespread concern about fake news and algorithm-driven echo chambers on social media. eYou use multiple large language models simultaneously to reduce bias and improve fact-checking accuracy, while also dividing its feed into followed accounts, discovery content, and a curated news section powered by sources such as Agence France-Presse. The platform also places strong emphasis on European data sovereignty. According to the company, all user data is stored in Belgium under GDPR protections to reduce dependence on American and Chinese technology platforms. Unlike many social networks, eYou currently operates without advertising and presents itself as a more user-centric and responsible alternative focused on reducing misinformation rather than maximizing engagement. As of now, most users are based in Romania, where the company operates, although the platform is also seeing growing interest from users in the United States. Source: Cybernews. Eyou social media. [online] Available at: https://www.cybernews.com/tech/eyou-social-media/ Top Of Page Poland Launches a New Initiative Against Disinformation As published by TVP World, Poland’s state-owned media organizations launched a joint fact-checking initiative called "Sprawdzam to" ("I’m checking this") to combat the growing spread of disinformation. The project, created by Telewizja Polska, the Polish Press Agency, and Polish Radio, will operate through a new online platform that will publish fact-checks, investigative reports, and analysis of how false information is created and spread. The initiative aims to strengthen public access to verified information and improve awareness of media manipulation. The launch comes amid increasing concerns over foreign disinformation campaigns targeting Poland’s information space. Polish officials have linked many of these operations to Russia and Belarus, describing them as part of hybrid warfare designed to create confusion, weaken public trust, and destabilize the country. According to officials, false narratives have accompanied incidents such as Russian drone incursions into Polish airspace and acts of railway sabotage, with online campaigns attempting to shift blame onto Ukraine or NATO. Source: TVP World. After the drones came the trolls, now Poland is fighting back online. [online] Published 7 May 2026. Available at: https://tvpworld.com/93126173/drones-sabotage-and-trolls-polands-new-front-line-is-fact-checking Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

Cyfluence Research Center (CRC) has identified an emerging, state-aligned influence network targeting English-language discourse about the South China Sea. The campaign combines Chinese institutional actors, credentialed researchers, and inauthentic social media amplifiers to shape international perceptions in favor of the PRC. The network operates through a 3-layered model that includes think tanks, researchers, and inauthentic X accounts that promote dominant narratives framing China as a responsible regional actor while targeting other nations’ presence as destabilizing forces. Key Takeaways CRC researchers identified an emerging coordinated influence network targeting English language discourse on the South China Sea, combining Chinese stateaffiliated institutions, researchers, and inauthentic amplification assets. The network operates through a hybrid model of legitimacy and amplification, where credible actors provide authoritative framing while pseudonymous accounts expand reach and simulate organic engagement. Behavioral indicators demonstrate a deliberate coordination effort, supported by a high volume (~35%) of inauthentic or bot-like activity. The observed cluster is assessed to be in early establishment stages and aligns with known Chinese efforts to achieve long-term narrative dominance. Author: The CRC Team [Download PDF Here]

[Introduction] Cyber-based hostile influence campaigns are aimed at influencing target audiences by promoting information and/or disinformation over the internet, sometimes combined with cyber-attacks which enhance their effect (hence force Cyfluence, as opposed to cyber-attacks that aim to steal information, extort money, etc.) Such hostile influence campaigns and operations can be considered an epistemological branch of Information Operations (IO) or Information Warfare (IW). Typically, and as customary during the last decade, the information is spread throughout various internet platforms, which are the different elements of the hostile influence campaign, and as such, connectivity and repetitiveness of content between several elements are the main core characteristics of influence campaigns. Hostile influence campaigns, much like Cyber-attacks, have also become a tool for rival nations and corporations to damage reputation or achieve various business, political or ideological goals. Much like in the cyber security arena, PR professionals and government agencies are responding to negative publicity and disinformation shared over the news and social media. We use the term cyber based hostile influence campaigns, as we include in this definition also cyber-attacks aimed at influencing (such as hack and leak during election time), while we exclude of this term other types of more traditional kinds of influence such as diplomatic, economic, military etc. During the 20th to the 26th of April 2026, we observed, collected and analyzed endpoints of information related to cyber based hostile influence campaigns (including Cyfluence attacks). The following report is a summary of what we regard as the main events. Some of the mentioned campaigns have to do with social media and news outlets solemnly, while others leverage cyber-attack capabilities. [Contents] [Introduction] [Report Highlights] [Report Summary] [State Actors] X Investigation Into Disinformation and Misconduct On X Russia The Narrative of Russian Colonialism Russian Propaganda as a Weapon and Its Impact on Belief and Behavior The EU Lists Two Entities for Information Manipulation Activities China Chinese Influence Operation Targets Tibetan Elections Iran Pro-Iran Sources Reframed U.S. Strike Video as Two Different Iranian Victories Antisemitic Narratives Surge Following the Iran Conflict Iran’s Generated Misinformation Strategy During War Iran Uses Viral AI Propaganda to Distract Western Audiences [AI Related Articles] Deepfakes Targeting U.S. Officials AI-Generated Influencer Spreads Political Disinformation Jailbroken AI Enables Disinformation and Attack Planning [General Reports] Orbán’s Hungary Defeat Showed Disinformation is Not a Political Magic Trick The Role of Meme Culture in Shaping War Perception and Understanding Trump Pope Rift Sparked Viral False Claims [Appendix - Frameworks to Counter Disinformation] EU Campaign to Counter Climate Disinformation EU Mission to Strengthen Armenia’s Resilience EU Calls for Initiative to Tackle Evolving Disinformation Threats EU Tackles Disinformation Through New Media Program Biometric Verification to Counter AI-Driven Disinformation and Fraud [CRC Glossary] [ Report Highlights] An article by The Psychological Defense Agency argued that Russia has long functioned as a colonial empire, but that misleading narratives have obscured its history. The European Union announced it has imposed sanctions on two entities: Euromore and Pravfond, for their role in spreading disinformation as part of Russia’s hybrid strategy. As published by DFR Lab, a China-linked influence network known as Spamouflage has been spreading disinformation ahead of the April 26 elections for the Central Tibetan Administration. As published by ISD, following the 28th of February strikes by the United States and Israel on Iran, online antisemitic content rose sharply, increasing by 68% within a week. As revealed in a CyberNews article, a medical student used AI tools, including Gemini, to create a fake online persona named Emily Hart, demonstrating how deepfakes can be monetized. Based on an analysis by Tech Policy Press, Hungary’s April 2026 parliamentary election offered a clear reminder that disinformation is not a decisive political force on its own. As published by NewsGuard's Reality Check, Tensions between Donald Trump and Pope Leo XIV have fueled a wave of viral misinformation on social media, with multiple false claims gaining significant traction online. The European Union announced that its Delegation to Türkiye has launched a new initiative to combat disinformation through a television programme called Ambassadors of Truth, produced in collaboration with CNN Türk. [ Report Summary] According to a report by The Hill, French prosecutors have summoned Elon Musk and former X CEO Linda Yaccarino for questioning over alleged misconduct linked to X. An article by The Psychological Defense Agency argued that Russia has long functioned as a colonial empire, but that misleading narratives have obscured its history. A study by the Ukrainian NGO LingvaLexa, conducted with support from the Office of the Prosecutor General of Ukraine, found that Kremlin propaganda plays a direct and measurable role in shaping the beliefs and behavior of Russian soldiers. The European Union announced it has imposed sanctions on two entities: Euromore and Pravfond, for their role in spreading disinformation as part of Russia’s hybrid strategy. As published by DFR Lab, a China-linked influence network known as Spamouflage has been spreading disinformation ahead of the April 26 elections for the Central Tibetan Administration. As reported by NewsGuard's Reality Check, Pro-Iran social media accounts have circulated a video of a burning ship in the Strait of Hormuz, falsely presenting it as evidence of Iranian military success. An article from Le Monde states that Iranian state-linked actors deploy AI-generated, highly shareable propaganda content to manipulate narratives, amplify anti-Western messaging, and divert attention from domestic issues. As published by ISD, following the 28th of February strikes by the United States and Israel on Iran, online antisemitic content rose sharply, increasing by 68% within a week. According to an article by ISD, since the start of the Iran war, official Iranian accounts on X have shifted from formal messaging to provocative, meme-driven content designed to maximize engagement. A recent analysis by CyberNews found 156 deepfake incidents involving U.S. government officials over two years. As revealed in a CyberNews article, a medical student used AI tools, including Gemini, to create a fake online persona named Emily Hart, demonstrating how deepfakes can be monetized. Based on an analysis by Tech Policy Press, Hungary’s April 2026 parliamentary election offered a clear reminder that disinformation is not a decisive political force on its own. According to an article by Wired, modern conflicts are increasingly mediated through memes and meme-like content that simplify, decontextualize, and emotionally amplify war narratives, often creating a widespread illusion of understanding without deeper knowledge. As published by NewsGuard's Reality Check, Tensions between Donald Trump and Pope Leo XIV have fueled a wave of viral misinformation on social media, with multiple false claims gaining significant traction online. According to a short publication by The European Commission, it has launched the #ClimateFactsMatter campaign to address the growing spread of climate disinformation across the EU. An article published by Politico highlights that jailbroken AI models allow state-linked and malicious actors to bypass safeguards, enabling the spread of disinformation and the generation of detailed plans for cyber and physical attacks. The EEAS European External Action Service announced that the European Union has launched a new civilian mission in Armenia, known as EUPM Armenia, aimed at strengthening the country’s resilience against complex threats. The European Commission announced it has launched a new funding call under its European Democracy Shield strategy to strengthen research on information integrity. The European Union announced that its Delegation to Türkiye has launched a new initiative to combat disinformation through a television programme called Ambassadors of Truth, produced in collaboration with CNN Türk. According to a report by CyberNews, as AI-generated content becomes harder to distinguish from reality, concerns over disinformation and fraud are growing. [Social Media] X Investigation Into Disinformation and Misconduct On X According to a report by The Hill, French prosecutors have summoned Elon Musk and former X CEO Linda Yaccarino for questioning over alleged misconduct linked to X. Central to the investigation are claims that X facilitated the spread of illegal and harmful content, including child sexual abuse material and AI-generated deepfakes. Authorities emphasized that these interviews aim to assess compliance with French law and determine whether platform leadership adequately addressed these risks. A major focus of the case is disinformation generated by Grok. The chatbot reportedly produced false and harmful content, including Holocaust denial narratives and explicit nonconsensual deepfakes. Although Grok later corrected some outputs, the incident raised serious concerns about how AI systems can amplify disinformation on a scale. French officials are also investigating whether X’s algorithms contributed to biased or distorted information flows, further undermining public trust. Prosecutors additionally suspect that the controversy surrounding Grok’s disinformation may have been deliberately amplified to influence market value ahead of a planned corporate listing involving Musk’s companies. Meanwhile, U.S. authorities currently decline to assist the French probe. Source: Associated Press. French prosecutors summon Elon Musk over allegations of child abuse images and deepfakes on X. [online] Published 20 April 2026. Available at: https://thehill.com/homenews/ap/ap-technology/france-elon-musk-x-social-media/?email=467cb6399cb7df64551775e431052b43a775c749&emaila=12a6d4d069cd56cfddaa391c24eb7042&emailb=054528e7403871c79f668e49dd3c44b1ec00c7f611bf9388f76bb2324d6ca5f3&utm_source=Sailthru&utm_medium=email&utm_campaign=04.20.26%20Tech Top Of Page [State Actors] Russia The Narrative of Russian Colonialism An article by The Psychological Defense Agency argued that Russia has long functioned as a colonial empire, but that misleading narratives have obscured its history. Unlike other European empires, Russian expansion has often been framed as defensive or civilizing rather than imperial. Such narratives act as a form of disinformation, masking patterns of domination and shaping global misunderstanding of both past and present conflicts, including the war in Ukraine. Propaganda and distorted historical claims have been used to justify Russian actions. These include portraying conquest as beneficial, denying colonial practices, and spreading narratives that Russia is uniquely “anti-colonial.” The article points to modern examples like state-aligned media and online content that present occupation as positive while ignoring violence, repression, and cultural erasure. It concluded that such disinformation has severe consequences - it delays recognition of imperial behavior, weakens international responses, and enables continued aggression. Source: Psychological Defence Agency. The Last European Colonial Empire. [online] Published 2026. Available at: https://mpf.se/download/18.732eef4e19d7078d81ab8/1775717958942/The-last-european-colonial-empire.pdf Top Of Page Russian Propaganda as a Weapon and Its Impact on Belief and Behavior A study by the Ukrainian NGO LingvaLexa, conducted with support from the Office of the Prosecutor General of Ukraine, found that Kremlin propaganda plays a direct and measurable role in shaping the beliefs and behavior of Russian soldiers. Based on surveys of over 1,000 prisoners of war, the research showed that a large majority accepted at least some state narratives, with many viewing the invasion of Ukraine as justified. Those who believed propaganda more strongly were significantly more likely to support the war, dehumanize Ukrainians, resist surrender, and express willingness to fight again, indicating that propaganda is not just background noise, but a key driver of combat motivation. The study also highlighted the central role of anti-Western narratives, which frame the war as a defensive struggle against NATO and a broader "decadent" West. These narratives were widely believed among surveyed soldiers and proved just as influential as other propaganda themes in shaping attitudes and behavior. The findings suggested that propaganda should be understood as a core instrument of modern warfare, one that facilitates mobilization, sustains aggression, and influences battlefield decisions. The report called for stronger international recognition of propaganda as a tool of aggression, including potential legal accountability not only for political leaders but also for those involved in creating and disseminating such narratives. Source: The Ukrainian NGO LingvaLexa. Words that Kill: How Russian Propaganda Shapes Mobilizarion and Combat Motivation. [online] Google Drive. Available at: https://drive.google.com/file/d/1NEQFv4YCQ0boNq6EbIeIDeqyUTwn3U6n/view Top Of Page The EU Lists Two Entities for Information Manipulation Activities The European Union announced it has imposed sanctions on two entities: Euromore and Pravfond, for their role in spreading disinformation as part of Russia’s hybrid strategy. Euromore functions as an unofficial media relay, amplifying and legitimizing pro-Kremlin narratives aimed at European audiences, including content that questions the legitimacy of EU institutions and justifies Russia’s war against Ukraine. Pravfond, funded by the Russian state, contributes to disinformation through legal and analytical materials that reinforce key propaganda claims. These include false narratives such as the "Nazification of Ukraine”, "Russophobia”, and alleged persecution of Russian-speaking populations in neighboring countries. Together, these efforts are designed to manipulate public perception and weaken trust in democratic institutions. At the same time, as reported by EU VS Disinfo, pro-Kremlin disinformation continues to recycle familiar narratives. These include portraying Ukraine as a "terrorist state" allegedly supported by NATO, reviving long-debunked conspiracy theories about Western "biolabs", and spreading false claims about secret NATO infrastructure. Disinformation surrounding the Bucha massacre has also evolved, from outright denial to more complex conspiracy theories aimed at deflecting responsibility for documented war crimes. Source: European External Action Service (EEAS). Russian hybrid threats: EU lists two entities over information manipulation activities. [online] Published 22 April 2026. Available at: https://www.eeas.europa.eu/delegations/ukraine/russian-hybrid-threats-eu-lists-two-entities-over-information-manipulation-activities_en EUvsDisinfo. Disinformation Review: EU sanctions and the Kremlin’s recycled narratives. [online] Available at: https://euvsdisinfo.eu/disinformation-review-eu-sanctions-and-the-kremlins-recycled-narratives/ Top Of Page China Chinese Influence Operation Targets Tibetan Elections As published by DFR Lab, a China-linked influence network known as Spamouflage has been spreading disinformation ahead of the April 26 elections for the Central Tibetan Administration. This activity is part of a broader pattern of Chinese information manipulation targeting multiple countries and issues, including Taiwan, the United States, and Japan. Using dozens of fake Facebook and Instagram profiles, the operation promotes misleading narratives aimed at undermining trust in the Tibetan democratic process. These include personal attacks against leader Penpa Tsering, claims that the elections are manipulated, and portrayals of the government as corrupt or dominated by religious elites. The campaign relies on coordinated, inauthentic behavior, including mass-sharing posts within its own network to simulate credibility. It also amplifies real controversies by inserting false or exaggerated claims, attempting to deepen divisions within the Tibetan community. AI-generated images and recycled narratives are used to make the disinformation appear more convincing, although most posts receive little genuine engagement. Despite becoming more technologically sophisticated, the operation has largely failed to gain significant organic traction. Source: Digital Forensic Research Lab (DFRLab). China-linked Spamouflage targets Tibetan parliament-in-exile elections. [online] Published 24 April 2026. Available at: https://dfrlab.org/2026/04/24/china-linked-spamouflage-targets-tibetan-parliament-in-exile-elections/ Top Of Page Iran Pro-Iran Sources Reframed U.S. Strike Video as Two Different Iranian Victories As reported by NewsGuard's Reality Check, Pro-Iran social media accounts have circulated a video of a burning ship in the Strait of Hormuz, falsely presenting it as evidence of Iranian military success. Initially, the footage was shared as proof that Iran had sunk a U.S. vessel near Bandar Abbas. Days later, the same video was reused to claim that Iranian forces had severely damaged Indian-flagged ships. In reality, the video showed a U.S. strike on an Iranian warship, identified through visual analysis as the IRIS Haj Qasem, with no credible evidence supporting either of the viral claims. The misinformation emerged amid escalating tensions following the collapse of U.S.-Iran peace talks and a subsequent maritime blockade ordered by Donald Trump. Since the war began in late February 2026, reports indicated that over 155 Iranian naval vessels have been destroyed by U.S. and Israeli operations. While Iran did intercept two Indian-flagged ships, verified reports showed only minor damage, with no injuries or major losses. Source: NewsGuard. One video, two conflicting false narratives. [online] Available at: https://www.newsguardrealitycheck.com/p/one-video-two-conflicting-false-narratives Top Of Page Antisemitic Narratives Surge Following the Iran Conflict As published by ISD, following the 28th of February strikes by the United States and Israel on Iran, online antisemitic content rose sharply, increasing by 68% within a week. Much of this surge was driven by disinformation and conspiracy theories, particularly claims that the war was a “false flag” orchestrated by Jewish elites or that Western governments are controlled by a hidden Jewish power structure. These narratives, widely shared across platforms, reframed the conflict through misleading and harmful lenses that amplified distrust and hostility. Disinformation also spread through distorted criticism of Israel, where legitimate political debate was often mixed with antisemitic tropes. Online content frequently blames Jewish communities worldwide for the actions of the Israeli state or uses Holocaust-related distortions to push false narratives. At the same time, direct hate speech and slurs increased significantly, creating a more aggressive and hostile digital environment shaped by viral misinformation and conspiracy-driven rhetoric. This wave of disinformation had real-world consequences, coinciding with a rise in antisemitic attacks across several countries. Source: Institute for Strategic Dialogue (ISD). The impact of the war with Iran on antisemitic discourse. [online] Published 22 April 2026. Available at: https://www.isdglobal.org/digital-dispatch/the-impact-of-the-war-with-iran-on-antisemitic-discourse/ Top Of Page Iran’s Generated Misinformation Strategy During War According to an article by ISD, since the start of the Iran war, official Iranian accounts on X have shifted from formal messaging to provocative, meme-driven content designed to maximize engagement. This includes AI-generated and misleading visuals targeting figures like Donald Trump and references to conspiracy-linked individuals such as Jeffrey Epstein. While often framed as humor, this content blends satire with disinformation, distorting political narratives and trivializing serious geopolitical issues. The strategy has proven highly effective in spreading these narratives, generating hundreds of millions of views and dramatically increasing likes, shares, and comments. By using viral, platform-native formats, Iranian state actors have expanded their reach and made disinformation more accessible, especially to online audiences less engaged with traditional political messaging. This approach has also helped reshape perceptions of Iran, portraying it as a relatable or even sympathetic “underdog” rather than focusing on its controversial policies or human rights record. Source: Institute for Strategic Dialogue (ISD). Iran’s diplomats launch a meme war. [online] Published 23 April 2026. Available at: https://www.isdglobal.org/digital-dispatch/irans-diplomats-launch-a-meme-war/ Top Of Page Iran Uses Viral AI Propaganda to Distract Western Audiences An article from Le Monde describes a coordinated Iranian propaganda campaign that leverages advanced generative AI and pop-culture aesthetics to conduct influence operations targeting Western audiences. Regime-linked actors, particularly a studio identified as Explosive Media, produce high-quality animated videos, often using Lego-style visuals, that mock U.S. and Israeli leaders and promote anti-Western narratives. These materials are disseminated across major social media platforms (X, Facebook, Instagram, TikTok), achieving large-scale reach through viral distribution, with hundreds of millions of views. The campaign combines technical sophistication with humor, satire, and emotionally engaging content to increase acceptability and shareability, particularly among politically disengaged or neutral audiences. Tactically, the operation relies on narrative manipulation, co-opting existing anti-establishment sentiment and embedding ideological messaging within entertaining formats to obscure propagandistic intent. It employs distortion and omission, including downplaying or denying state violence and reframing geopolitical dynamics to divide adversaries, such as portraying the United States as subordinate to Israel. The campaign also exploits amplification dynamics, as media coverage and public attention in the West further extend its reach, inadvertently reinforcing its impact. Analysts warn that this strategy diverts attention from domestic repression in Iran and functions as a broader disinformation effort aimed at weakening democratic discourse by shaping perceptions and redirecting focus away from human rights issues. Source: Le Monde. How Tehran’s propaganda lures the West into distraction. [online] Published 25 April 2026. Available at: https://www.lemonde.fr/en/les-decodeurs/article/2026/04/25/how-tehran-s-propaganda-lures-the-west-into-distraction_6752815_8.html Top Of Page [AI Related Articles] Deepfakes Targeting U.S. Officials A recent analysis by CyberNews found 156 deepfake incidents involving U.S. government officials over two years. Most cases focus on a small group of high-profile figures, especially Donald Trump, who alone accounts for 58% of all incidents. Notably, some of these deepfakes are self-generated or shared by individuals, blurring the line between deliberate disinformation and political messaging. Other frequent targets include Marco Rubio, JD Vance, and Alexandria Ocasio-Cortez. While the raw numbers suggest Republicans are targeted more often, this is largely due to Trump’s dominance in the dataset; excluding him, deepfake incidents are relatively balanced between political parties. Generally, Deepfake-driven disinformation tends to focus on widely recognizable leaders rather than on the broader political system, as familiar figures are more likely to attract attention and influence public opinion. Source: Cybernews. Trump, Rubio and Vance are the most deepfaked U.S. government officials in office today. [online] Published 23 April 2026. Available at: https://cybernews.com/ai-news/most-deepfaked-us-government-officials/ Top Of Page AI-Generated Influencer Spreads Political Disinformation As revealed in a CyberNews article, a medical student used AI tools, including Gemini, to create a fake online persona named Emily Hart, demonstrating how deep fakes can be monetized. By targeting a specific political audience of older, conservative, pro-Trump users, the creator crafted posts promoting divisive and misleading narratives on issues like immigration, religion, and politics, often aligned with supporters of Donald Trump. The strategy relied on AI-generated images and tailored messaging designed to appear authentic and emotionally engaging. This approach quickly gained traction, with some posts reaching millions of views and attracting thousands of followers, many of whom paid for exclusive content. Although the accounts were eventually suspended, the operation shows how easily individuals can use AI to create convincing fake identities that spread misleading content on a large scale. Sources: Cybernews. Indian man is behind MAGA’s AI-generated sweetheart Emily Hart. [online] Published 25 April 2026. Available at: https://cybernews.com/ai-news/emily-hart-maga/ Top Of Page Jailbroken AI Enables Disinformation and Attack Planning An article published by Politico highlights the growing exploitation of artificial intelligence by malicious actors, demonstrating how AI systems, when stripped of built-in safeguards, can be weaponized to support harmful and potentially violent activities. Researchers from the National Counterterrorism Innovation, Technology and Education Center (NCITE) showed U.S. lawmakers that “jailbroken” or “abliterated” AI models, with disabled safety mechanisms, can generate detailed instructions for terrorism, cyberattacks, and criminal acts. These models, unlike safeguarded “censored” systems, provide step-by-step guidance for executing attacks, illustrating how easily adversaries can manipulate AI tools to bypass restrictions. Tactics used include prompt engineering techniques, such as disguising harmful queries in complex or academic language, to evade detection systems and extract prohibited information. The article also identifies state-linked actors and cyber threat groups as key participants in leveraging AI for disinformation and offensive operations. Russia-linked groups have reportedly used AI models to disseminate disinformation online, while Beijing-backed hackers attempted to automate cyberattacks using advanced language models. The accessibility of off-the-shelf AI tools further lowers the barrier for such activities, increasing the risk of widespread misuse. Overall, the article underscores a rapidly evolving threat landscape in which both state and non-state actors exploit vulnerabilities in AI systems to conduct influence operations, spread disinformation, and enable harmful real-world actions, raising significant concerns about the adequacy of current safeguards and regulatory responses. Sources: Politico. AI chatbots can be jailbroken, alarming lawmakers and exposing safety gaps. [online] Published 22 April 2026. Available at: https://www.politico.com/news/2026/04/22/ai-chatbots-jailbreak-safety-00887869 Top Of Page [General Reports] Orbán’s Hungary Defeat Showed Disinformation is Not a Political Magic Trick Based on an analysis by Tech Policy Press, Hungary’s April 2026 parliamentary election offered a clear reminder that disinformation is not a decisive political force on its own. In the election, Viktor Orbán and his Fidesz party lost to newcomer Péter Magyar, despite a campaign marked by extensive pro-government disinformation. While Fidesz spread coordinated false claims, such as manipulated videos alleging plans to reintroduce conscription, this did not prevent a decisive opposition victory. The findings reinforced that the purpose of factchecking is not to sway election outcomes, but to provide voters with reliable information and tools to assess claims independently. The campaign also highlighted the limits of other commonly cited influences. Russian-linked disinformation efforts appeared weak and largely ineffective compared to domestic propaganda networks. At the same time, AI-generated political content was widely used by both sides, often to provoke emotional responses rather than to convincingly deceive. Meanwhile, the EU-driven ban on political advertising by platforms such as Meta and Google significantly reduced the volume of online propaganda and may have benefited the opposition, which achieved stronger organic engagement. Source: Fülöp, Z. and Teczár, S. Orbán’s Hungary defeat shows disinformation is not a political magic trick. [online] Tech Policy Press. Published 20 April 2026. Available at: https://www.techpolicy.press/orbns-hungary-defeat-shows-disinformation-is-not-a-political-magic-trick/ (techpolicy.press) Top Of Page The Role of Meme Culture in Shaping War Perception and Understanding According to an article by Wired, Recent conflicts involving the United States, Iran, Israel, and Lebanon have spread widely on social media, not only through news but through memes. These ranged from jokes about conscription and viral songs to dark humor about missile strikes and wartime life. While humor has long been a way to cope with fear and uncertainty, social media has transformed it into a fast-moving, global phenomenon. Memes are designed to be simple, relatable, and highly shareable, often stripping away context in favor of engagement. Governments are increasingly adopting meme-like formats to shape narratives, blending real footage with cinematic edits, gaming references, or AI-generated visuals. This content spreads easily because it mirrors the language of online culture, making propaganda more accessible and emotionally engaging. However, this environment creates an "illusion of understanding", where constant exposure to simplified content makes people feel informed without deep knowledge. Source: WIRED. War memes are turning conflict into content. [online] Published 20 April 2026. Available at: https://www.wired.com/story/war-memes-turn-conflict-into-content/ Top Of Page Trump Pope Rift Sparked Viral False Claims As published by NewsGuard's Reality Check, Tensions between Donald Trump and Pope Leo XIV have fueled the spread of 3 viral false claims related to the Catholic Church, garnering 1.5 million views on the social media platform X alone. The claims began spreading on the 12th of April 2026, following public criticism exchanged between the two figures. Both pro- and anti-Trump users circulated claims that the pope donated to Kamala Harris’s campaign, a fabricated quote attributed to Cardinal Timothy Dolan supporting Trump, and a fake post suggesting Trump threatened the Vatican with secret "files". None of these claims is supported by evidence. Source: NewsGuard. Trump-Pope rift sparks viral false claims. [online] Published 24 April 2026. Available at: https://www.newsguardrealitycheck.com/p/trump-pope-rift-sparks-viral-false Top Of Page [Appendix - Frameworks to Counter Disinformation] EU Campaign to Counter Climate Disinformation According to a short publication by The European Commission, it has launched the #ClimateFactsMatter campaign to address the growing spread of climate disinformation across the EU. Led by its climate department, the initiative provides multilingual resources: videos, infographics, and guides, to help citizens recognize misleading content and better understand climate issues and policies. The campaign focuses on exposing how disinformation distorts public understanding of climate change, often by spreading false or misleading claims that undermine trust in scientific facts and delay action. It offers practical tools for identifying manipulation techniques and encourages critical thinking about the sources and intent behind climate-related information. Source: European Commission, Directorate-General for Climate Action. #ClimateFactsMatter: Countering climate disinformation in the EU. [online] Published April 2026. Available at: https://climate.ec.europa.eu/eu-action/climate-disinformation/climatefactsmatter-countering-climate-disinformation-eu_en (climate.ec.europa.eu) Top Of Page EU Mission to Strengthen Armenia’s Resilience The EEAS European External Action Service announced that the European Union has launched a new civilian mission in Armenia, known as EUPM Armenia, aimed at strengthening the country’s resilience against complex threats. Operating under the Common Security and Defence Policy, the mission will provide strategic and operational support to Armenian institutions in addressing challenges such as foreign information manipulation and interference (FIMI), cyberattacks, and illicit financial activities. It will focus on capacity building across government bodies and promote a coordinated, whole-of-government approach to crisis management and national security. The mission, requested by Armenian authorities, will initially run for two years and be headquartered in Armenia. It complements the existing EU Mission in Armenia, which focuses on observation and confidence-building in conflict-affected areas. Source: European External Action Service (EEAS). Armenia: EU establishes a new civilian mission to contribute to strengthening the country’s resilience. [online] Published 21 April 2026. Available at: https://www.eeas.europa.eu/delegations/armenia/armenia-eu-establishes-new-civilian-mission-contribute-strengthening-country%E2%80%99s-resilience_en (consilium.europa.eu) Top Of Page EU Calls for Initiative to Tackle Evolving Disinformation Threats The European Commission announced it has launched a new funding call under its European Democracy Shield strategy to strengthen research on information integrity. The initiative responds to the rapid rise of disinformation and manipulation tactics online, including the use of AI-generated content, fake websites, influencer misuse, and the exploitation of algorithms to amplify misleading or divisive narratives. The proposal emphasized that by distorting information environments, influencers can affect elections, policy debates, and individual choices, making it essential to better understand how such manipulation operates and spreads. To counter this, the EU plans to invest in research infrastructure and collaboration across sectors such as academia, civil society, and technology to improve the ability to detect, analyze, and respond to disinformation. Source: European Commission. New open call for proposals under the Digital Europe Programme. [online] Published 21 April 2026. Available at: https://digital-strategy.ec.europa.eu/en/news/new-open-call-proposals-under-digital-europe-programme Top Of Page EU Tackles Disinformation Through New Media Program The European Union announced that its Delegation to Türkiye has launched a new initiative to combat disinformation through a television programme called Ambassadors of Truth, produced in collaboration with CNN Türk. The show aims to educate audiences about how disinformation operates, why it spreads, especially during crises, and how individuals can better recognize and resist misleading content. Hosted by Nezih Orhon, the programme brings together experts from academia, media, and fact-checking organizations to examine key disinformation challenges. Topics include the risks of AI-generated content, health misinformation, foreign influence campaigns, and the vulnerabilities of children and families in the digital space. It also highlights how false or manipulated information can undermine trust and decision-making. Beyond raising awareness, the initiative focuses on practical solutions, offering viewers tools to verify information and navigate online media more critically. Source: European External Action Service (EEAS). Delegation of the European Union to Türkiye takes a new step in the fight against disinformation: “Ambassadors of Truth” premieres on CNN Türk. [online] Published 24 April 2026. Available at: https://www.eeas.europa.eu/delegations/t%C3%BCrkiye/ambassadors-truth_en Top Of Page Biometric Verification to Counter AI-Driven Disinformation and Fraud According to a report by CyberNews, as AI-generated content becomes harder to distinguish from reality, concerns over disinformation and fraud are growing. A company co-founded by Sam Altman, Tools for Humanity, is partnering with Match Group and Zoom to introduce biometric identity verification. Their solution, the “Orb”, uses iris scanning to confirm whether users are real humans, aiming to reduce the spread of fake identities and AI-generated personas online. This effort responds to the increasing use of synthetic media and deepfakes in disinformation campaigns and scams. Instead of detecting fake content directly, the system verifies real users and assigns a “proof-of-human” badge to their profiles. While technology promises greater trust and security, it also raises questions about privacy and accessibility. As AI continues to enable large-scale deception, tools like biometric verification highlight the growing need for new defenses against disinformation, even as they introduce new challenges around data protection and user trust. Source: Cybernews. Sam Altman’s iris-scanning company joins forces with Tinder and Zoom to exterminate deepfake scams. [online] Published 23 April 2026. Available at: https://cybernews.com/ai-news/tinder-zoom-human-verification/ Top Of Page [CRC Glossary] The nature and sophistication of the modern Information Environment is projected to continue to escalate in complexity. However, across academic publications, legal frameworks, policy debates, and public communications, the same concepts are often described in different ways, making collaboration, cooperation, and effective action more difficult. To ensure clarity and establish a consistent frame of reference, the CRC is maintaining a standard glossary to reduce ambiguity and promote terminological interoperability. Its scope encompasses foundational concepts, as well as emerging terms relating to Hostile Influence and Cyfluence. As a collaborative project maintained with input from the community of experts, the CRC Glossary is intended to reflect professional consensus. We encourage you to engage with this initiative and welcome contributions via the CRC website. Top Of Page

As cyber and influence operations grow increasingly intertwined, a reductive framing of "cyber-enabled influence" is no longer sufficient. This primer from the Cyfluence Research Center introduces Cyfluence, a conceptual domain that models cyber and influence operations as components of integrated, non-linear kill chains. It examines how these threats manifest in Managed Contested Spaces (MCSs) such as universities, smart cities, and corporate environments, and proposes a new defence framework, Cognitive and Cyber Security Posture Management (C2SPM), that adapts proven cybersecurity principles to the cognitive threat landscape. With the integration of hyper-automation, C2SPM offers near-real-time detection, assessment, and remediation across cognitive, digital, and physical dimensions. [Download PDF Here]