Incident Response

41 Countries Taking Part in NATO’s Locked Shields 2025 Cyber Defense Exercise

The NATO Cooperative Cyber Defence Centre of Excellence in Estonia is hosting the Locked Shields 2025 cyber defense exercise.

NATO Locked Shields 2025

The NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) in Tallinn, Estonia, is hosting this week the Locked Shields 2025 cyber defense exercise.

Described as one of the world’s most complex cybersecurity exercises, Locked Shields 2025 has gathered nearly 4,000 experts representing 41 NATO ally and partner nations. The number of participants is roughly the same as in the previous year.

The goal of Locked Shields is to test and improve the preparedness of national cybersecurity teams in defending national systems and critical infrastructure, including telecommunications networks and military infrastructure, through a realistic simulation.

At Locked Shields 2025, 17 blue teams have been tasked with defending 8,000 virtual systems (hosted on a cyber range operated by CR14 Foundation) against thousands of sophisticated attacks. 

This year’s cyber defense exercise also brings challenges related to quantum computing and AI.

Participants must not only fend off cyberattacks, but also deal with disinformation, political pressure, and infrastructure issues. They have been tasked with navigating legal aspects and strategic communications in high-pressure scenarios. 

Advertisement. Scroll to continue reading.

“The world is witnessing a clear rise in cyberattacks against critical infrastructure,” said Mart Noorma, director of the NATO CCDCOE. “We see it daily in Ukraine, where energy grids and communications systems are targeted, but also globally, from ransomware attacks on hospitals to disruptions in public services.” 

“Locked Shields prepares nations to defend not only their networks but the essential services their societies depend on. As cyber threats grow more complex and the lines between peace and conflict blur, Locked Shields stands as a reminder that resilience is not built in isolation — it is forged through shared challenges, trusted cooperation, and relentless training,” Noorma added.

Related: AI Won’t Take This Job: Microsoft Says Human Ingenuity Crucial to Red-Teaming

Related: CISA Red Team Exercise Finds Critical Vulnerabilities in Federal Civilian Agency

Related: CISA Conducts First AI Cyber Incident Response Exercise

Related Content

Training & Awareness

Locked Shields has grown significantly over the past 16 years, with only four nations participating in the first edition.

Compliance

The devices have been added to the NATO Information Assurance Product Catalogue (NIAPC).

Training & Awareness

SimSpace provides realistic cyber ranges where organizations can test attack preparedness and validate defenses.

Cybercrime

Codenamed Eastwood, the operation targeted the so-called NoName057(16) group, which was identified as being behind a series of DDoS attacks on municipalities and organizations...

Data Breaches

Microsoft flags a new Kremlin hacking team buying stolen usernames and passwords from infostealer markets for use in cyberespionage attacks. 

Cloud Security

VMware patches flaws that expose users to data leakage, command execution and denial-of-service attacks. No temporary workarounds available. 

Incident Response

The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries.

Cyberwarfare

NATO will establish a new cyber center to better protect against increasingly sophisticated cyber threats.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version