MODERN CYBER THREATS TO CRITICAL INFRASTRUCTURE IN UKRAINE AND THE WORLD

Critical infrastructure is the basis for the stable functioning of the state and society, but its dependence on digital technologies makes it vulnerable to cyber threats. In 2024, more than 3 million information security events were recorded, of which 28,000 were classified as critical, requiring in-depth analysis and development of new approaches to risk management. This article examines the current cyber threats to critical infrastructure, including cyber espionage, embezzlement, information and psychological operations, and attacks on industrial systems. Based on the analysis, the main types of attacks are identified: ransomware, DDoS attacks, social engineering and zero-day exploits. Particular attention is paid to the energy, transport, finance and digital infrastructure sectors, which are the most vulnerable to attacks. The article also contains an analysis of international experience and standards, such as the ENISA Threat Landscape and the NIS2 directive, which demonstrate effective cybersecurity practices. Analysis of international experience shows that effective cyber defence requires a multi-level approach. This includes real-time network monitoring, automated vulnerabil