The NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) has launched the latest edition of its Crossed Swords exercise in Tallinn, Estonia. This event, which began on Monday, will continue through Friday, focusing on integrating artificial intelligence into cyber operations. The exercise brings together over 250 participants from more than 40 countries, including both NATO allies and partner nations.
Integrating AI in Cyber Operations
This year’s exercise marks a significant step by including AI agents in the training regimen. Participants engage in designing, deploying, and evaluating these AI agents as part of the operational workflow. The exercise is conducted using locally hosted AI systems, supplemented by OpenAI’s Daybreak cyber defense platform. The goal is to train cyber personnel to leverage AI while ensuring human oversight remains central to mission planning.
Coordinating Cyber and Kinetic Actions
A key challenge addressed during the exercise is the synchronization of cyber effects with kinetic military operations. According to Exercise Director Jozef Kostelansky, the precision of timing is crucial, with operations needing to occur in carefully managed sequences. The involvement of AI introduces new complexities, as both sides of the simulation employ AI technologies to enhance their strategies.
The exercise also involves special operations forces, highlighting the multi-domain nature of modern military engagements. Participants from national cyber units and supporting teams focus on refining their tactical abilities and improving command-level coordination between offensive and defensive cyber resources.
Collaboration with Civilian Partners
Crossed Swords 2026 fosters collaboration between military cyber units and civilian organizations. The exercise includes contributions from industry experts, academic institutions, and NGOs to enhance the strategic protection of critical infrastructure. Notable participants include companies like Bitdefender, ESET, and Mandiant, as well as international bodies like the International Committee of the Red Cross (ICRC).
The event traces its origins to a 2014 red teaming workshop and has expanded significantly over the years. Participation has doubled since 2022, reflecting the growing importance of integrated cyber defense training in the face of evolving global threats.
Looking ahead, the CCDCOE continues to enhance its training programs, with the larger Locked Shields exercise involving over 4,000 participants from 41 nations in the same year. The increasing scale and complexity of these exercises underscore NATO’s commitment to strengthening cyber resilience through innovative training methodologies.
