UKRAINE & RUSSIA: Panic engineering works because civil defense apps sit in the palm of every citizen’s hand.

Someone breached both countries’ air raid alert systems Sunday night and pushed false nuclear attack warnings to mobile phones.

Neither Kyiv nor Moscow will say who did it, which means neither wants to escalate or admit how vulnerable their infrastructure is.

The next hack could trigger real evacuations, friendly fire, or a missile launch based on bad data.

◆ Why it matters

Civil defense apps are supposed to save lives during air raids. Now they are a weapon. Whoever broke into both Ukrainian and Russian alert systems simultaneously either has serious state backing or exploited identical security holes on both sides. The silence from Kyiv and Moscow suggests each is weighing whether attribution helps or hurts, and whether the breach is deeper than a single notification push.

Source: BBC World