{"id":470153,"date":"2025-06-05T00:00:00","date_gmt":"2025-06-05T00:00:00","guid":{"rendered":"https:\/\/adn.monetizemail.com\/?p=470153"},"modified":"2025-06-05T22:08:41","modified_gmt":"2025-06-05T22:08:41","slug":"montenegro-strengthens-cyber-capabilities-alongside-allies-at-immediate-response-25","status":"publish","type":"post","link":"https:\/\/adn.monetizemail.com\/?p=470153","title":{"rendered":"Montenegro strengthens cyber capabilities alongside allies at Immediate Response 25"},"content":{"rendered":"
\n
\n
\n
\n <\/p>\n

<\/a>
\n <\/span>
\n <\/span>

\n
\n
\n Service members from the Maine National Guard, Vermont National Guard, Armed Forces of Montenegro, and the Army of the Republic of North Macedonia pose for a group photo before beginning a cyber training exercise during Immediate Response 25 at Golubovci Air Base, Montenegro, June 2, 2025. The cyber exercise was developed and facilitated as a combined effort between the Maine National Guard and the Armed Forces of Montenegro through the State Partnership Program (SPP). The Vermont National Guard and the Army of the Republic of Macedonia, SPP partners since 1993, also participated in the exercise. This collaboration aims to build cyber defense capabilities and strengthen regional military cooperation. Demonstrating global deterrence and the U.S. Army\u2019s ability to rapidly deploy U.S.-based combat power in Europe and the Arctic region alongside Allies and partners, DEFENDER 25 brings U.S. troops together with forces from 29 Allied and partner nations to build readiness through large-scale combat training from May 11-June 24, 2025. DEFENDER 25 increases the lethality of the NATO alliance through large-scale tactical training maneuvers and long-range fires, builds unit readiness in a complex joint, multinational environment and leverages host nation capabilities to increase the U.S. Army\u2019s operational reach. During three large-scale combat training exercises\u2014Swift Response, Immediate Response, and Saber Guardian\u2014Ally and partner forces integrate and expand multi-domain operations capability, demonstrating combined command and control structures and readiness to respond to crisis and conflict. (U.S. Army photo by 2nd Lt. Paige Bodine)
\n (Photo Credit: 2nd Lt. Paige Bodine)<\/span>
\n <\/span>
\n VIEW ORIGINAL<\/a>
\n <\/span>
\n <\/figcaption><\/figure>\n<\/p><\/div>\n

PODGORICA, Montenegro\u2014Nearly three years after a sweeping cyberattack disrupted Montenegro\u2019s government networks, the country has taken a powerful step forward in strengthening its digital defenses. As part of Immediate Response 25, Montenegro hosted its largest and most complex cyber defense exercise to date.<\/p>\n

The 2022 attack lasted more than 20 days. It disrupted government platforms and exposed vulnerabilities across banking, water, and power systems. Among the first responders were cyber units from the Maine National Guard, part of a long-standing partnership through the Department of Defense\u2019s State Partnership Program. Many of those same service members have now returned to Montenegro, this time under very different circumstances.<\/p>\n

Instead of responding to an emergency as they did in 2022, they worked side by side with the Vermont National Guard, the Armed Forces of Montenegro, and the Army of the Republic of North Macedonia in a joint multinational exercise designed to simulate a full-spectrum cyber assault. Over 10 days, participants navigated complex challenges modeled on real-world threats, including ransomware deployment and infrastructure disruption. While technical teams defended networks against an advanced persistent threat, a simultaneous tabletop exercise brought together senior leaders from Montenegro\u2019s government, academia, and private cyber industry as well as international partners for strategic decision-making and crisis response.<\/p>\n

Lt. Col. Kerry Boese of the Maine Army National Guard assisted in planning the tabletop exercise, helping bridge gaps between the military, government, industry, and academia.<\/p>\n

“The tabletop exercise focused on a whole-of-government approach to pre-coordinate a response in case something ever happens,” Boese said. “It reinforces our collaboration with NATO allies and shows that we can work together, meet NATO objectives, and build a unified response to cyberattacks.”<\/p>\n

From the start, Montenegro\u2019s planning team set out to make the exercise truly multi-national in scope. Ms. Tijana Turkovic, head of planning, development, and cooperation for cybersecurity in Montenegro\u2019s Ministry of Defense, played a key role in designing the tabletop component.<\/p>\n

“We wanted to use our 2022 experience as a foundation,” Turkovic said. “The goal was to connect technical incidents with strategic-level decision-making and coordinate a national-level response that includes ministries, the private sector, and our state partners.”<\/p>\n

For the first time, cyber operators from the Republic of North Macedonia embedded directly within combined Montenegrin and U.S. cyber defense teams. Working together in these multinational teams, they took on threat hunting, log analysis, and incident response tasks, gaining valuable hands-on experience in network defense.<\/p>\n

Senior Master Sgt. Zachary Poulin, from the Maine Air National Guard who deployed to Montenegro during the 2022 crisis, served as the exercise controller for the tactical portion. Behind the scenes, Poulin\u2019s team directed the evolving scenario and ensured all training objectives were met.<\/p>\n

“In this exercise, there are good guys and bad guys. We\u2019re the puppeteers behind the scenes,” Poulin said. “We design a believable scenario and make sure every team is hitting their targets.”<\/p>\n

Poulin noted that the simulated attacks were modeled closely on ransomware techniques used during Montenegro\u2019s actual cyberattack. In addition, it allowed Montenegro to have an opportunity to show its capability to lead in the cyber domain.<\/p>\n

“This is giving Montenegro the opportunity to host and manage a live cyber exercise,” he said. “And they\u2019ve done an amazing job for their first time, with great collaboration from North Macedonia.”<\/p>\n

The role of adversary was led by 2nd Lt. Ivan Bajceta of the Montenegrin Armed Forces, who designed and launched threats based on recent global incidents.<\/p>\n

“At first, the response from the defenders was chaotic,” Bajceta said. “But as time went on, they were more ready to respond. It\u2019s been amazing to see their growth and communication improve every day.”<\/p>\n

As the exercise commenced, the international cyber defense teams quickly began working to accomplish their mission. Each team had its own leader, one from Montenegro and one from the Republic of North Macedonia. This brought unique challenges and required careful coordination and attention to detail throughout the exercise.<\/p>\n

\u201cWorking at an international level with people around the world is an amazing experience,\u201d said Bajceta. \u201cYou get different perspectives and learn how to grow with other teams. But in cyber, there are no shortcuts. One mistake can ruin everything.”<\/p>\n

That global collaboration and attention to detail were central themes throughout the exercise, echoed by leaders at every level.<\/p>\n

Maj. Isak Mrkaic, the exercise director from Montenegro, said the event was an opportunity not only to improve his country\u2019s capabilities but also to elevate cooperation across borders.<\/p>\n

\u201cIn the beginning, we had three goals,\u201d Mrkaic said. \u201cFirst, to show that the Montenegrin Armed Forces can conduct an allied cyber exercise. Second, to conduct tactical training and apply our knowledge. And third, to take a whole-of-government approach with stakeholders and national partners.\u201d<\/p>\n

What began as a modest concept quickly expanded. By the time the event launched, it had grown into a 10-day operation involving more than 120 participants from four countries, spanning tactical, operational, and strategic levels.<\/p>\n

“This is the largest cyber exercise ever conducted by our Armed Forces and Ministry of Defense,” Mrkaic said. “It\u2019s a big step forward in how we work with partner nations.”<\/p>\n

Beyond its technical success, the exercise also marked a leap forward in integrating artificial intelligence as a tool for training in cyber defense. Junior analysts used large language models to process alerts from tools like Security Onion and Splunk, interpret malicious code and receive real-time guidance on attacker behavior. The AI acted as a digital advisor, accelerating analysis and giving even the least experienced team members the ability to make informed decisions quickly.<\/p>\n

“The cyber domain is here, and systems are under perpetual attack,” said Poulin. “Exercises like this, tied to major units and partner nations, are a perfect stepping stone. The 2022 attack was devastating, but it showed us the complexity of Montenegro\u2019s system and how we can connect and support one another.”<\/p>\n

In a world where cyberattacks increasingly blur the line between civilian and military targets, the events in Montenegro underscore a new reality. National security is no longer confined to physical borders or conventional threats. On today\u2019s battlefields, where attacks in the cyber domain can result in kinetic effects, connectivity is both a strength and a vulnerability. Countering this vulnerability may lie in the ability to act quickly, collaborate across nations, and trust both partners and technology.<\/p>\n","protected":false},"excerpt":{"rendered":"

Service members from the Maine National Guard, Vermont National Guard, Armed Forces of Montenegro, and the Army of the Republic of North Macedonia pose for a group photo before beginning a cyber training exercise during Immediate Response 25 at Golubovci Air Base, Montenegro, June 2, 2025. The cyber exercise was developed and facilitated as a […]<\/p>\n","protected":false},"author":2,"featured_media":470155,"comment_status":"close","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-470153","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/posts\/470153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=470153"}],"version-history":[{"count":2,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/posts\/470153\/revisions"}],"predecessor-version":[{"id":470156,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/posts\/470153\/revisions\/470156"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=\/wp\/v2\/media\/470155"}],"wp:attachment":[{"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=470153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=470153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adn.monetizemail.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=470153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}