UKRAINIAN BANKS IN THE CONDITIONS OF MILITARY RISKS, CYBER THREATS, AND UNCERTAINTY

Abstract

The article examines the current cybersecurity challenges facing Ukraine's banking system under wartime conditions and amid the active digitalization of financial services. The main cyber threats to the banking sector are analysed, including phishing attacks, malware, DDoS attacks, compromise of information systems, and risks associated with the use of foreign-origin software. The regulatory and legal framework for cybersecurity in the Ukrainian banking sector is considered, and the role of the National Bank of Ukraine in shaping the financial sector's cyber resilience system is determined. The study analyses the dynamics of cyber incidents in Ukraine during 2020–2025 and identifies a growing trend under martial law conditions. Particular attention is paid to cyber risks in mobile banking and vulnerabilities of mobile financial applications. The methodological basis of the research includes comparative analysis, generalization, systematization, and statistical data analysis. The necessity of strengthening cyber risk management systems, implementing modern information security approaches, particularly the secure-by-design concept, and gradually abandoning software that poses potential threats to the banking infrastructure is substantiated. The practical significance of the obtained results lies in their applicability to banking institutions to enhance cybersecurity and minimize risks during the digital transformation. It is concluded that cybersecurity in the banking sector is an essential component of the state’s financial stability under wartime uncertainty, and that increasing banks' cyber resilience requires a comprehensive combination of technological, organizational, and regulatory measures.