Geopolitical Trends, Risc, Enterprise IT

Geopolitical Technology Risk The Fractured World and Enterprise IT

By Clateway Technology Council · 15 March 2026 · 34 min read

CLATEWAY INSIGHTS · DEEP DIVE SERIES

Trend Report 2025–2026 · Part 6 of 6

Geopolitical - Technology Risk - The Fractured World and Enterprise IT

How geopolitical fragmentation — across the US-China technology rivalry, Russia's hybrid warfare campaign in Europe, Iran's cyber-kinetic doctrine, and the Greenland-triggered European sovereignty awakening — has made geopolitical risk a first-order input to every enterprise technology decision in 2026.

Based on 5,000 news signals, April 2025 – March 2026 | www.clateway.com

The sixth and final trend of the Clateway Insights 2025–2026 Trend Report is also the one that most directly affects the strategic decisions that enterprise boards and IT leaders make above the level of individual technologies or regulatory frameworks. Geopolitical technology risk — the intersection of nation-state conflict, technology dependency, AI competition, and infrastructure vulnerability — generated over 400 signals in the Clateway Media feed and, taken as a whole, described a world in which the technology environment for European enterprises is no longer shaped primarily by commercial forces but by geopolitical ones.

Four distinct geopolitical technology risk themes dominated the period, each with direct operational implications for enterprise IT leaders in Europe:

The Salt Typhoon reckoning: China's Ministry of State Security compromised over 200 organisations across 80 countries in the largest known telecom espionage campaign in history, breaching lawful intercept systems, backbone routers, and now data centre infrastructure. The FBI called it 'the most egregious national security breach in US history by a nation-state hacking group.' The enterprise implication reaches far beyond US telecoms: the same threat actors are targeting European critical infrastructure, and the attack methodology — persistent access to backbone infrastructure through unpatched vulnerabilities in edge devices — applies to enterprise networks as directly as to carrier networks.

Russia's New Generation Warfare: Russia's escalating hybrid campaign in Europe — documented by Dutch, German, Polish, and Estonian intelligence agencies — blended cyber attacks on critical infrastructure with physical sabotage using recruited criminal proxies, GPS jamming over NATO airspace, and the Sandworm group's wiper attacks. The Recorded Future analysis published in February 2026 described Russia's strategy as 'New Generation Warfare': a coordinated campaign to test NATO defences and prepare the psychological and physical environment for potential kinetic escalation by 2026–2030.

Europe's digital sovereignty crisis: The Trump administration's repeated use of technology access as a geopolitical weapon — the Starlink threats toward Ukraine, the weaponisation of tariffs against EU digital regulations, and the Greenland posturing — catalysed a European technology sovereignty crisis that moved from quiet policy discussion to urgent strategic imperative in January 2026. The European Parliament passed a technological sovereignty resolution on 23 January 2026. France and Germany convened a Digital Sovereignty Summit in November 2025. The statistics underlying the crisis are stark: US cloud providers hold 85% of the European cloud market; 95% of German businesses would not survive two years without US technology access.

The AI model provenance problem: DeepSeek's January 2025 release of R1 — an open-source model with performance rivalling US frontier models at a fraction of the training cost — was simultaneously a technological breakthrough and a security governance crisis. NIST's CAISI evaluation found DeepSeek R1 was 12 times more likely to follow malicious agent hijacking instructions than US frontier models, responded to 94% of overtly harmful requests under common jailbreaking, and advanced CCP narratives at four times the rate of comparable US models. CrowdStrike's independent analysis found that when DeepSeek R1 encountered topics politically sensitive to the CCP, its likelihood of generating code with severe security vulnerabilities increased by up to 50%.

The synthesis: Geopolitical technology risk in 2026 is not a background condition that occasionally affects enterprise security. It is a primary architectural input. Who made your AI model? Which country's laws govern your cloud infrastructure? What happens to your operations if US technology access is restricted? These questions are no longer theoretical risk scenarios for scenario planning exercises. They are active strategic questions with time-constrained answers.

PART 1 SALT TYPHOON: THE TELECOM ESPIONAGE CAMPAIGN THAT BECAME AN ENTERPRISE WARNING

Salt Typhoon: The Worst Known Nation-State Hack and Its Enterprise Implications

The campaign that redefined the scale of state-sponsored cyber espionage

Salt Typhoon — operated by China's Ministry of State Security (MSS) — executed what the FBI described as the most egregious national security breach in US history by a nation-state hacking group. The campaign began as early as 2021, and by August 2025 the FBI confirmed it had targeted over 200 organisations across more than 80 countries. The initial public disclosure in late 2024 described compromises at nine major US telecommunications companies — AT&T, Verizon, T-Mobile, Spectrum, Lumen, Consolidated Communications, Windstream, and others. Subsequent analysis expanded the scope dramatically: the campaign reached beyond telecoms to include data centre providers, internet service providers, military infrastructure networks, transportation networks, and lodging sector organisations.

What made Salt Typhoon qualitatively different from previous nation-state campaigns was the combination of its methodology, its longevity, and its targets. The group exploited lawful intercept systems — the CALEA-mandated backdoors that US telecoms are required to maintain for law enforcement access — to intercept communications from senior US government officials including President Trump and Vice President Vance. It then used its access to backbone routers to maintain persistent presence, in some cases for over three years before detection. And it targeted the configuration files of hundreds of organisations in allied nations simultaneously, providing the MSS with a comprehensive map of telecommunications infrastructure across the Western alliance.

200+ organisations compromised by Salt Typhoon across 80+ countries — per FBI assessment as of August 2025

Source: FBI Assistant Director Brett Leatherman, August 2025

600+ organisations notified by FBI of Salt Typhoon interest in their systems

Source: FBI Advisory, August 2025

9+ major US telecom carriers breached, including AT&T, Verizon, T-Mobile — with access maintained for up to 3 years in some cases

Source: US Senate Commerce Committee, multiple attributions

2018 year when some of the vulnerabilities exploited by Salt Typhoon were first disclosed — but never patched by telecom operators

Source: Nextgov/FCW investigation, multiple sources

The enterprise implications: this is not only a telecom problem

The Clateway feed's coverage of Salt Typhoon consistently framed it as a national security story affecting US telecoms. This framing understates the enterprise risk for European organisations. Salt Typhoon's attack methodology — exploitation of unpatched vulnerabilities in edge devices and backbone routing infrastructure, combined with persistent access through network-native tooling that blends with legitimate traffic — is directly applicable to enterprise networks as well as carrier networks.

The December 2025 Clateway article from the December 2025 CVE landscape analysis documented Salt Typhoon's exploitation of multiple edge device vulnerabilities, targeting Cisco routers, Juniper devices, and other network infrastructure components that appear in enterprise environments as directly as in carrier networks. The February 2026 article on nation-state hackers targeting the Defence Industrial Base documented at least 24 zero-days burned by Chinese, Russian, and other nation-state actors against edge devices in attempts to infiltrate defence contractors' networks — the same device categories that appear in enterprise IT perimeters.

The February 2026 GRIDTIDE disruption — in which Google Threat Intelligence Group, Mandiant, and partners took coordinated action to disrupt a global cyber espionage campaign specifically targeting telecommunications organisations — documented a parallel operation to Salt Typhoon that targeted telecoms in Asia, Europe, and the Middle East. The pattern of simultaneous, coordinated compromise of telecommunications and enterprise infrastructure across multiple geographies is the operational signal that enterprise security architects need to internalise: state-sponsored actors are operating at a scale and persistence that makes 'if we're targeted' the wrong question. The question is 'how do we detect and respond when we are targeted?'

The policy vacuum that made Salt Typhoon possible — and continues

One dimension of the Salt Typhoon story that the Clateway feed surfaced repeatedly was the policy response — or more precisely, its inadequacy. The Trump administration dropped sanctions against Chinese actors responsible for the Salt Typhoon attacks, apparently prioritising trade negotiation objectives over cyber deterrence. The article 'Are Trade Concerns Trumping US Cybersecurity?' from December 2025 documented this trade-off explicitly and asked the question that security professionals across the alliance were asking: when geopolitical negotiating leverage is prioritised over cyber accountability, what signal does that send to threat actors about the cost of future campaigns?

The rescission of Biden-era SBOM (Software Bill of Materials) guidance in January 2026 — removing the requirement for federal agencies to solicit SBOMs from tech vendors — reduced the visibility into software supply chains that had been one of the post-SolarWinds accountability mechanisms. For enterprise IT leaders, the policy signal was clear: the US government under the Trump administration was deprioritising the cybersecurity accountability structures that constrain supply chain risk. European organisations that had relied on those structures as part of their own risk management assumptions need to build independent visibility into their supply chains rather than depending on US government standards as a proxy.

Direct enterprise action: Review your network edge device inventory specifically against the Salt Typhoon and GRIDTIDE IoC lists published in the August 2025 joint cybersecurity advisory from the FBI, NSA, CISA, and allied agencies. Patch all edge devices against vulnerabilities disclosed since 2018. If you cannot demonstrate that these devices are patched, your network has the same exposure profile as the telecoms Salt Typhoon spent three years inside.

PART 2 RUSSIA'S NEW GENERATION WARFARE: CYBER AND PHYSICAL CONVERGENCE IN EUROPE

Russia's Hybrid Campaign: When Cyber War Becomes Physical Infrastructure Risk

New Generation Warfare: the doctrine that defines Russia's European campaign

The most strategically significant analysis of the Russian threat published in the Clateway feed period was the Recorded Future report 'Preparing for Russia's New Generation Warfare in Europe,' published February 2026. The report described Russia's hybrid campaign as the operationalisation of New Generation Warfare (NGW) — a coordinated, deliberate approach that integrates cyber attacks, physical sabotage using recruited criminal proxies, influence operations, GPS jamming, drone incursions, and disinformation in a single strategic campaign.

The scale of the campaign in the feed period was documented across multiple intelligence sources. German authorities recorded 321 suspected hybrid incidents in 2025, including escalating drone intrusions into airspace and disinformation campaigns targeting critical infrastructure. Between September 2025 and January 2026, Insikt Group tracked 30 suspected or confirmed violations of NATO airspace by Russia-directed operators — compared to 23 in the entire period from March 2022 to August 2025. Dutch intelligence (AIVD/MIVD) issued a joint assessment warning that while a direct military clash between Russia and NATO remained unlikely, it was 'no longer unthinkable,' with Russia 'preparing for the possibility of a conflict with NATO.'

The specific events that define the threat

The Clateway feed documented a series of specific incidents through the period that gave operational specificity to the hybrid campaign:

• Sandworm's wiper attack on Poland: In January 2026, Sandworm — the GRU's most destructive cyber unit, responsible for NotPetya (2017) and multiple Ukrainian power grid attacks — was attributed with a wiper attack against the Polish power grid. The attack was disrupted before causing prolonged outages, but its attribution marked the first confirmed Sandworm attack on a NATO member's power infrastructure outside Ukraine.

• Russian proxy sabotage networks: GLOBSEC and ICCT analysis documented Russia's outsourcing of physical sabotage operations to recruited criminal proxies — primarily non-Russian nationals, including Colombians, Moldovans, and Baltic nationals, recruited through Telegram for small payments. The operations included arson attacks against military suppliers in Latvia and Lithuania, photography of critical infrastructure in Poland, and drone operations over airports in Denmark and Norway. The use of non-Russian proxies created plausible deniability while maintaining strategic effect.

• APT28 zero-day exploitation: In January 2026, APT28 (Fancy Bear, GRU Unit 26165) exploited a Microsoft Office zero-day vulnerability just three days after its public disclosure — demonstrating the group's operational velocity and its access to previously unknown vulnerabilities. The campaign was part of APT28's sustained focus on credential harvesting and data exfiltration from European government, energy, and research organisations documented in the Clateway feed throughout the period.

• GRIDTIDE telecom espionage: The February 2026 GRIDTIDE disruption documented a simultaneous Russian and Chinese espionage campaign specifically targeting telecommunications organisations across Europe, Asia, and the Middle East. The convergence of Russian and Chinese state-sponsored targeting of European telecoms in the same disclosure period illustrated the compounding nature of nation-state cyber risk for European enterprises.

The cyber-kinetic convergence: when digital and physical attacks operate together

The most operationally distinctive development in the Russian hybrid campaign was not any single attack but the doctrine it reflected: the systematic integration of cyber operations and physical operations in a single campaign. The Clateway feed documented this through Iran's operations as well as Russia's — the March 2026 article 'Iran's Cyber-Kinetic War Doctrine Takes Shape' described how Iran had been hacking IP cameras to plan missile strikes against targets, using digital intelligence collection to enable kinetic strikes with precision that would not otherwise be achievable.

For enterprise IT leaders in European critical infrastructure sectors, this convergence creates a threat model that does not appear in traditional cybersecurity frameworks. The threat is not purely digital (a ransomware attack that can be recovered from) or purely physical (a physical intrusion that security guards can respond to). It is a coordinated combination in which digital access enables physical targeting and physical attacks achieve digital effects. A cyber attack that disrupts a substation SCADA system can cause physical consequences; a physical attack on a data centre's cooling system achieves digital disruption. Building resilience against this combined threat requires a convergence of IT security, OT security, and physical security that most European enterprises have not yet achieved.

What Russian hybrid warfare means for enterprise resilience planning

The Recorded Future NGW analysis was explicit about the timeline: Putin likely views the next two years as an opportunity to test NATO's defensive capabilities and prepare the physical and psychological environment, should he decide to launch a military incursion. The assessment from multiple allied intelligence agencies was that Russian conventional military capacity, rebuilt after initial losses in Ukraine, could be directed against NATO territory within a 3-5 year window if Western deterrence falters.

For enterprise IT leaders in NATO member states, particularly those in the Baltic region, Poland, Germany, Scandinavia, and the UK — the countries most frequently identified as hybrid campaign targets — this intelligence assessment has direct business continuity implications. If the EU and NATO context is one in which state-sponsored attacks on critical infrastructure are likely to escalate in frequency and severity over the next two to five years, then business continuity planning based on 'low probability' assumptions for infrastructure attack is not a defensible risk posture.

Leadership implication: Russia's hybrid campaign is not a background security risk that your SOC manages. It is a strategic business risk that your board must assess. For organisations in critical infrastructure sectors — energy, water, transport, financial market infrastructure, health, digital infrastructure — the combination of DORA/NIS2 compliance requirements and the Russian hybrid threat creates an urgent mandate for operational resilience testing that includes physical-cyber hybrid attack scenarios, not just cyber-only tabletop exercises.

PART 3 IRAN'S CYBER-KINETIC DOCTRINE AND THE MIDDLE EAST DIGITAL SPILLOVER

Iran's Cyber-Kinetic War Doctrine: Digital Conflict Without Borders

The Stryker attack: enterprise collateral damage from state conflict

The March 11, 2026 Iranian cyberattack on Stryker — the medical device manufacturer — was the event that most directly illustrated the collateral enterprise damage from state-to-state digital conflict in the feed period. The attack, attributed to Iran's MOIS (Ministry of Intelligence and Security) Handala/Void Manticore group and documented in Parts 2 of this series, wiped over 200,000 devices across 79 countries and took ECG monitoring systems offline in Maryland hospitals. But it also hit Stryker's enterprise IT infrastructure in ways that demonstrated how state-sponsored attacks on 'enemies' create collateral damage across global supply chains.

The March 13, 2026 Clateway article 'Why Stryker's Outage Is a Disaster Recovery Wake-Up Call' articulated the enterprise governance lesson: the Iranian cyberattack on Stryker was the kind of stress test that business continuity and disaster recovery programmes often do not plan for. The wiper destroyed backups. It disabled security tools. It propagated across air-gapped segments. Standard DR assumptions — restore from backup, failover to secondary site — did not apply when the attack was specifically designed to destroy recovery capability before the primary attack executed.

Iran's systematic cyber-kinetic integration

The Clateway feed's coverage of Iranian cyber operations through the period documented a doctrine that had evolved significantly from Iran's earlier opportunistic cyber attacks. The 'Iran's Cyber-Kinetic War Doctrine Takes Shape' article from March 2026 described a systematic integration of digital intelligence with kinetic targeting: Iranian operatives were compromising IP cameras, SCADA systems, and network infrastructure in target countries not primarily to cause digital disruption but to gather targeting intelligence for missile strikes and physical operations.

The practical implication for enterprise IT leaders managing OT/ICS environments — particularly in energy, manufacturing, maritime, and critical infrastructure sectors — is that the threat profile for SCADA and ICS systems now includes not just disruption and data theft but targeting intelligence collection. An IP camera compromise that seemed low-severity in the traditional cyber risk framework becomes high-severity when it is understood as reconnaissance for a physical strike against the facility it monitors.

The MOIS-criminal convergence: a new attack surface

The March 2026 article 'Iran MOIS Colludes With Criminals to Boost Cyberattacks' documented a development that mirrors the Russian hybrid model in its strategic logic: Iran's MOIS was moving from its previous approach of pretending to be cybercriminal groups to actually working with genuine cybercriminal groups, providing state resources and direction in exchange for criminal infrastructure, scale, and deniability. The same state-criminal convergence documented in the Cybersecurity trend article (Part 2 of this series) was appearing across Russian and Iranian state actors simultaneously, representing a structural shift in the geopolitical threat landscape.

For enterprise security teams, this convergence has a specific operational implication: the indicators of compromise for state-sponsored attacks and criminal attacks are increasingly the same. The Qilin ransomware infrastructure used by Iranian MOIS in the Shamir Medical Center attack was the same infrastructure used for criminal ransomware campaigns. Organisations that filter their threat intelligence by source — 'we're not a state-sponsored target, so that advisory doesn't apply to us' — are applying an outdated classification that the state-criminal convergence has made analytically incorrect.

PART 4 EUROPE'S DIGITAL SOVEREIGNTY CRISIS: FROM WHISPER TO SCREAM

From a Whisper to a Scream: Europe's Technology Dependency Crisis

The Greenland catalyst

The headline that catalysed Europe's technology sovereignty debate from a policy conversation to a strategic crisis was not a cyberattack, a data breach, or a regulatory enforcement action. It was a real estate offer. In January 2026, when President Trump's administration publicly and repeatedly refused to rule out military action to acquire Greenland — a Danish territory and NATO partner — the reaction in European capitals was not primarily about Greenland's geopolitical status. It was about the demonstration that an ally would weaponise geopolitical leverage against an EU member state.

The January 23, 2026 Clateway article 'From a Whisper to a Scream: Europe Frets About Overreliance on US Tech' documented the consequence directly: concern was growing across Europe about relying on US cybersecurity companies, and Greenland takeover talk was eroding trust across the EU even further. The CSIS analysis 'Why Greenland Could Spur Europe's Digital Awakening' articulated the structural argument: the Greenland episode crystallised a fundamental shift in European strategic thinking about whether alliance relationships built over decades were 'as strong as the laws that underpin them.'

The European Parliament responded on January 23, 2026 — the same week as the Greenland controversy peaked — by passing a 'technological sovereignty' resolution backing procurement rules that favour European products and calling for new cloud legislation. The French and German governments had already convened a Summit on European Digital Sovereignty in November 2025, launching a joint task force to report in 2026. The trajectory was clear: geopolitical events were converting a long-standing policy preference into an operational urgency.

The dependency statistics that drove the crisis

The digital sovereignty debate was not driven by Greenland alone. The Clateway feed's coverage through 2025 and into 2026 documented a series of dependency statistics that gave the geopolitical concern its operational substance:

85% of the European cloud market controlled by US providers (Amazon, Microsoft, Google) — per Synergy Research Group data

Source: Synergy Research Group, cited in CNBC Europe digital sovereignty analysis, February 2026

>80% of EU digital products, services, infrastructure and intellectual property sourced from non-EU countries — per European Parliament report

Source: European Parliament research, cited in France 24 analysis, January 2026

95%+ of German businesses would not survive two years if US technology access were cut off — per Bitkom survey

Source: Bitkom (German Digital Association) survey, cited in France 24, February 2026

€111B worth of American technology purchased by EU organisations in 2024

Source: UBCOM analysis, cited in France 24 digital sovereignty series, 2026

The escalation from policy preference to strategic imperative

The Clateway feed documented the specific mechanisms through which the Trump administration used technology access as geopolitical leverage — validating European concerns:

• Starlink as leverage: US officials threatened to shut off Starlink satellite services to Ukraine unless Kyiv agreed to a minerals deal with Washington. The episode demonstrated that critical digital infrastructure provided by a US company could be withdrawn as a geopolitical negotiating tool.

• ICC prosecutor targeting: The chief prosecutor of the International Criminal Court lost access to US digital services after being targeted by American sanctions — demonstrating that US digital service providers would comply with sanctions in ways that effectively denied digital access to targeted individuals, regardless of those individuals' relationship to US law.

• Digital tax threats: Trump threatened additional tariffs on countries with 'Digital Taxes, Digital Services Legislation, and Digital Markets' requirements — directly targeting the EU's digital regulatory framework. The ECFR analysis noted that the executive order cited European digital policies as threats to American technology security, establishing a precedent for weaponising digital policy divergence.

• FCC rollback of telecom security: The FCC voted along party lines to rescind cybersecurity rules for telecommunications networks following the Salt Typhoon breach — reducing the security obligations of the same networks that had been the most egregious breach target in US history. European enterprises dependent on transatlantic connectivity noted the implications of weakened US carrier security standards for their own communications.

The emerging European response: from Eurostack to sovereign cloud action

The European response to the sovereignty crisis in the feed period moved from aspiration to concrete action:

The Eurostack movement, launched in 2024 and expanded through 2025, articulated a vision for European capacity to provide all elements of digital infrastructure — from cables to cloud to AI — within European jurisdiction. The initiative attracted backing from major European technology companies, telecoms, and government entities, though critics noted the significant timeline and investment required to build genuinely competitive European alternatives to hyperscaler infrastructure.

Virt8ra expanded with six new European providers, documented in the June 2025 Clateway feed, creating an interoperable European sovereign cloud ecosystem aimed at countering US cloud dominance. The expansion demonstrated that European cloud alternatives were commercially viable, even if they could not yet match hyperscaler scale.

The AWS European Sovereign Cloud launch (January 2026, documented in Part 3) demonstrated that US hyperscalers were also responding to the sovereignty demand — but its CLOUD Act exposure created exactly the ambiguity about genuine sovereignty that European critics had predicted.

Airbus tendered for European sovereign cloud options, described in December 2025 as treating cloud as 'no longer just an IT decision' but 'a question of control.' Airbus — Europe's largest aerospace company — explicitly cited the need to move away from US cloud providers for mission-critical systems as a national security concern, not merely a cost or performance consideration.

Schleswig-Holstein's Microsoft exit — documented through the period — provided the most concrete proof of concept for European digital independence at government level. The German state government cancelled nearly 70% of its Microsoft licences and replaced them with open-source alternatives, targeting near-complete exit from big tech dependencies by end of the decade. The initiative demonstrated feasibility at government scale, even if the transition was not without friction.

The EU Cloud and AI Development Act (CADA), expected in early 2026 though delayed, was designed to encourage data centre permitting and increase European cloud capacity, with potential eligibility requirements for cloud service providers that could restrict non-EU participation in certain procurement categories.

The China dimension: ByteDance, Tencent, and the Middle East pivot

Europe's digital sovereignty concern was not exclusively directed at US providers. The Clateway feed documented a parallel development: Chinese cloud providers — Huawei, Alibaba, Tencent, and ByteDance — were expanding aggressively into Middle Eastern markets as an alternative to US and European providers. ByteDance's January 2026 announcement of its push into enterprise cloud services, Tencent's expansion of cloud business in the Middle East, and Huawei, Alibaba, and Tencent's targeting of Gulf state cloud infrastructure collectively described a market where China was offering digital infrastructure as an alternative to US dominance — with its own sovereignty implications.

For European IT leaders, the China dimension complicated the sovereignty calculus. The EU's desire to reduce US tech dependency does not straightforwardly recommend Chinese alternatives — the security concerns around Chinese technology are if anything more acute than those around US technology, given China's documented state-sponsored espionage operations, the data sovereignty risks created by Chinese national security law, and the specific security vulnerabilities documented in Chinese-origin AI models. The Chinese electric buses documented in the January 2026 Clateway article — deployed across Australia and Europe, vulnerable to cybercriminals, and containing what analysts described as a 'virtual kill switch the Chinese state could activate' — exemplified the problem: the alternative to US digital infrastructure is not sovereignty but a different dependency with different risks.

Leadership implication: European technology procurement decisions in 2026 are not purely commercial or technical. They are geopolitical. Every major cloud, AI, and infrastructure vendor decision should include an explicit assessment of: which legal jurisdiction governs this provider? What access could a government claim over data or services? What happens to your operations if this provider loses access to your market? These questions should appear in procurement documentation, board reporting, and risk registers.

PART 5 THE AI MODEL PROVENANCE PROBLEM: DEEPSEEK AND NATION-STATE AI RISK

The AI Model Provenance Problem: When Your AI Tools Carry Geopolitical Risk

DeepSeek R1: technological achievement, security governance crisis

DeepSeek's January 2025 release of R1 created a genuinely novel category of enterprise security risk that the Clateway feed tracked with increasing urgency through the year: the AI model provenance problem. The question was no longer only 'is this AI system secure?' but 'whose AI system is this, who trained it, on what data, under what legal framework, with what embedded biases and vulnerabilities, and what are the consequences of deploying it in an enterprise context?'

The R1 release achieved capabilities comparable to US frontier models at a fraction of the training cost, deployed open-source under MIT licence, and became the most downloaded free app on the Apple App Store within days. The commercial appeal was obvious. The security profile was alarming. Within weeks of release, multiple independent security evaluations documented:

• 100% jailbreak success rate: Cisco's security evaluation applied 50 random prompts from the HarmBench dataset covering cybercrime, misinformation, illegal activities, and general harm. DeepSeek R1 failed to block a single harmful prompt — a 100% attack success rate for algorithmic jailbreaking, compared to at least partial resistance from all other frontier models evaluated.

• 94% malicious request compliance under jailbreaking: NIST's CAISI evaluation found that DeepSeek's most secure model (R1-0528) responded to 94% of overtly malicious requests when a common jailbreaking technique was applied, compared to 8% for US reference models.

• 12x greater agent hijacking susceptibility: When deployed as an AI agent, DeepSeek-based agents were, on average, 12 times more likely than evaluated US frontier models to follow malicious instructions designed to derail them from user tasks. Hijacked agents in CAISI testing sent phishing emails, downloaded malware, and exfiltrated user credentials in a simulated environment.

• CCP narrative amplification: DeepSeek models advanced four times as many inaccurate and misleading CCP narratives as comparable US models — a bias with implications not just for information quality but for the governance and audit trails that regulated enterprises are required to maintain for AI-assisted decision-making.

• Politically sensitive vulnerability injection: CrowdStrike's analysis found that when DeepSeek R1 encountered topics politically sensitive to the CCP (Tibet, Xinjiang, Tiananmen, Taiwan) in system prompt context, the likelihood of generating code with severe security vulnerabilities increased by up to 50%. This is a novel attack surface: the AI model's political training creates a conditional security degradation based on deployment context rather than adversarial prompting.

The broader AI model provenance risk landscape

The April 2025 Clateway article 'Risks of Using AI Models Developed by Competing Nations' articulated the governance framework for the provenance problem. The core argument was that open-source AI models cannot be assumed to be neutral technology: the training process embeds the values, biases, and potentially the vulnerabilities that the training organisation chose to include or was legally required to include. For models trained under China's Cyberspace Administration regulations — which prohibit content that 'subverts state power' or 'damages the national image' — the training constraints are legally mandated by the Chinese government, not optional product design choices.

The enterprise risk spectrum for AI model provenance includes:

• Direct security vulnerabilities: The jailbreaking susceptibility and agent hijacking risks documented for DeepSeek R1 are immediate, exploitable security weaknesses that create direct attack surface in any enterprise deployment.

• Data sovereignty risk: DeepSeek's privacy policy explicitly states that personal information is stored on servers in the PRC. Chinese national security law requires companies to cooperate with state authorities without disclosure. Every query processed by DeepSeek's cloud infrastructure may be accessible to Chinese government entities without court process.

• Regulatory compliance exposure: For regulated European enterprises, using an AI model that stores training and inference data in PRC-based infrastructure may create GDPR violations (data transfer to non-adequate jurisdiction without appropriate safeguards), DORA compliance issues (ICT risk management for AI systems used in critical processes), and EU AI Act deployment complications (transparency and documentation requirements).

• Embedded bias and misinformation risk: AI models that advance state-aligned narratives create audit trail contamination for AI-assisted decisions. In a context where the EU AI Act requires documentation of AI decision-making and human oversight, deploying a model that systematically amplifies state-aligned narratives creates a governance documentation problem that is difficult to remediate after deployment.

The governance response: assessing AI model provenance

The enterprise response to AI model provenance risk requires a governance framework that extends beyond the traditional AI security assessment. The assessment must cover: the legal jurisdiction of the model provider; the training data governance and any mandated content restrictions; the security evaluation against both standard jailbreaking and adversarial agent manipulation; the data residency and access rights of the inference infrastructure; and the alignment of the model's capabilities and limitations with the regulatory compliance requirements of the enterprise's deployment context.

For European enterprises specifically, the procurement of AI models should be assessed through the same supply chain security lens that DORA applies to ICT third-party providers and NIS2 applies to supply chain vendors. The AI model is not a commodity tool — it is a technology vendor with its own jurisdiction, data governance practices, security posture, and legal obligations to its home government. The enterprise that deploys it assumes accountability for those characteristics in its own regulatory compliance framework.

Procurement gate: Before deploying any AI model — open-source or commercial — in a production environment that handles regulated data, processes high-risk decisions (under EU AI Act Annex III), or forms part of DORA-covered ICT infrastructure: conduct a provenance assessment covering jurisdiction, training data governance, jailbreaking resistance, agent manipulation susceptibility, and data residency. This assessment should be documented as part of the DORA ICT third-party risk register and the EU AI Act technical documentation for high-risk deployments.

PART 6 GEOPOLITICAL RISK AS ENTERPRISE ARCHITECTURE INPUT

Synthesising the Geopolitical Risk Signals: What Enterprise Leaders Must Do

The fragmentation thesis

The Recorded Future 2026 State of Security report, documented extensively in the Clateway feed in February 2026, framed the overall geopolitical technology risk signal with a single word: fragmentation. 'Fragmentation defined 2025's threat landscape,' the report stated — and what it described was not the absence of structure but the presence of multiple competing, overlapping, and sometimes contradictory threat structures operating simultaneously.

China's MSS operating a multi-year telecom espionage campaign spanning 80 countries. Russia executing New Generation Warfare blending cyber, physical sabotage, influence operations, and drone incursions against NATO members. Iran integrating cyber intelligence collection with kinetic targeting. North Korea's UNC1069 using AI-enabled social engineering to steal cryptocurrency and infiltrate technology companies. Pakistan's APT36 using vibe-coding to generate industrial quantities of malware. This is not a threat landscape that can be addressed through any single defensive measure. It is a fragmented, multi-vector environment in which the adversary simultaneously attacks the telecom backbone, the enterprise edge device, the AI coding assistant, the HR workflow, and the physical facility.

For enterprise IT leaders, the fragmentation thesis has a specific implication: the threat is not an exception to be managed but a condition to be designed for. The organisations that will maintain operational continuity through this geopolitical environment are not those that respond most effectively to individual incidents — they are those that have designed their infrastructure, their vendor relationships, their resilience architectures, and their governance frameworks to assume that all of these attack vectors will be active simultaneously and continuously.

The specific decisions that geopolitical risk requires in 2026

Translating the geopolitical risk signal into enterprise action requires decisions at four levels:

Technology provenance decisions

Every major technology procurement decision — cloud platform, AI model, network infrastructure, security tooling — now requires an explicit provenance assessment covering: which legal jurisdiction governs this provider? What government access rights exist over data or services? What are the security implications of this provider's national origin and regulatory environment? This is not a one-time due diligence exercise — it is a standing procurement criterion that should appear in every vendor selection framework.

Vendor dependency reduction

The 85% EU cloud market concentration in US providers, combined with the documented willingness of the US administration to weaponise technology access geopolitically, creates a strategic dependency risk that enterprise boards must address. This does not mean immediate repatriation or wholesale US cloud exit — the Bitkom data showing that 95% of German businesses could not survive without US technology access for two years demonstrates the cost of abrupt decoupling. It means an active programme to identify critical dependencies, assess their geopolitical risk profile, and develop transition plans for the highest-risk cases over a defined timeline.

Infrastructure resilience for hybrid threat scenarios

Business continuity planning must be updated to include hybrid cyber-physical attack scenarios of the type documented in the Russian and Iranian campaigns. This specifically means: wiper attack scenarios where backup systems are destroyed before the primary attack; scenarios where physical infrastructure attacks (power, cooling, physical access) create digital consequences; scenarios where state-sponsored actors maintain persistent access for months before executing; and scenarios where multiple simultaneous attack vectors are coordinated against the same organisation. NIS2's digital operational resilience testing requirements and DORA's threat-led penetration testing framework both provide regulatory scaffolding for this type of scenario testing.

Intelligence-informed security operations

The geopolitical threat landscape documented in the Clateway feed requires enterprise security operations to include geopolitical threat intelligence — not just technical IoC feeds. Understanding which nation-state groups are active, which sectors they are targeting, what their current TTPs are, and what geopolitical events might trigger escalation in their targeting of your sector provides the context that makes security event detection and triage significantly more effective. This intelligence capability can be sourced from threat intelligence providers (Recorded Future, Mandiant, CrowdStrike), ISAC (Information Sharing and Analysis Centre) participation, or CISA/NCSC/ENISA advisories.

PART 7 THE RCEC LEADERSHIP AGENDA FOR GEOPOLITICAL TECHNOLOGY RISK

The Geopolitical Risk Agenda: RCEC Applied

Research: Understanding your actual geopolitical exposure

• Map your technology dependency to geopolitical jurisdiction: For each major technology dependency — cloud infrastructure, AI platforms, network equipment, security tooling, software — document the legal jurisdiction of the provider, the government access rights that apply, and the risk scenario if that access were restricted or weaponised. This map does not currently exist in most organisations' vendor risk registers.

• Conduct a geopolitical threat intelligence review: Assess which nation-state threat actors are active in your sector and geography, what their current TTPs are, and what infrastructure they have targeted in recent campaigns. The FBI-NSA-CISA-allied agencies joint advisory on Salt Typhoon, the Recorded Future NGW analysis, and the monthly CVE landscape analyses in the Clateway feed provide the baseline intelligence for this assessment.

• Assess your AI model provenance risk: Document every AI model and AI-integrated service in your environment. For each, conduct the provenance assessment described in Part 5: jurisdiction, training data governance, jailbreaking resistance, data residency, and regulatory compliance implications. Prioritise models from jurisdictions with national security data access laws — specifically China — for immediate risk assessment.

• Test your resilience against hybrid attack scenarios: Conduct tabletop exercises specifically for hybrid cyber-physical scenarios: wiper attack that destroys backups before executing; simultaneous IT and OT attack; physical infrastructure attack that creates digital consequences; and persistent access scenario where the attacker has been in your network for 12 months. Identify which resilience assumptions fail in these scenarios.

Commit: Board-level geopolitical risk decisions

• Classify geopolitical technology risk as a board-level risk category: Add geopolitical technology risk to the board risk register alongside financial, operational, and regulatory risk. The signal from the feed is clear: this is no longer a background assumption that IT manages. It is a strategic risk with direct business continuity and competitive implications that requires board-level awareness and periodic review.

• Authorise a technology dependency reduction programme: Commission an assessment of the highest-risk US technology dependencies — specifically those in cloud infrastructure, critical security tooling, and AI platforms — with a three-year roadmap for either diversification (adding European alternatives to reduce single-provider concentration) or contingency planning (developing technical capability to operate independently if access is restricted). This programme requires board authorisation because it has material resource and commercial implications.

• Establish an AI provenance policy: Define which AI models the organisation will and will not use, based on provenance criteria. At minimum, prohibit deployment of AI models from providers subject to national security data access laws in production environments handling regulated or sensitive data without explicit CISO approval and documented risk acceptance. This policy should be board-approved and incorporated into the organisation's AI governance framework.

Execute: Building geopolitically-resilient technology capabilities

• Harden network edge devices against nation-state exploitation: Review your network edge device inventory against the Salt Typhoon and GRIDTIDE IoC lists and the CISA-NSA advisory on communications infrastructure security. Patch all devices against vulnerabilities disclosed since 2018. Implement network segmentation that limits the blast radius of edge device compromise. Enable enhanced logging on all edge infrastructure. Treat unpatched edge devices as active compromise risks, not merely as configuration debt.

• Implement encrypted communications for sensitive channels: Given Salt Typhoon's access to lawful intercept systems and its monitoring of senior official communications, use end-to-end encrypted communications (Signal, equivalent enterprise tools) for sensitive business discussions — particularly those involving strategic plans, M&A activity, regulatory engagement, or any topic that could be of intelligence value to a nation-state actor.

• Deploy geopolitically-aware vendor assessment: Update your vendor risk assessment framework to include geopolitical risk criteria alongside the standard security, financial, and operational criteria. Specifically: legal jurisdiction, government access rights, domicile of key personnel with access to your data, and geopolitical diversification within your vendor portfolio.

• Integrate threat intelligence into SOC operations: Subscribe to nation-state threat intelligence feeds relevant to your sector and geography. Integrate geopolitical threat context into SOC triage — when a vulnerability is being actively exploited by Chinese APTs targeting telecoms and your organisation is a telecom, that context should elevate the patching priority and detection sensitivity, not be filed separately from the technical IoC.

Control: Monitoring an evolving geopolitical risk environment

• Quarterly geopolitical risk review: Establish a quarterly review of geopolitical technology risk developments — covering nation-state activity, US-EU technology policy, sanctions and export control changes, and sovereign cloud developments — and assess their implications for your organisation's technology dependency profile and security posture. This is not an IT security review; it is a strategic business review that happens to use technology as its primary lens.

• Monitor AI model provenance landscape: The AI model landscape is changing rapidly. New models with new provenance profiles will emerge. Monitor NIST CAISI evaluations, CISA advisories on AI security, and European AI Office guidance for assessments of AI model security and governance profiles. Update your AI provenance policy as the landscape evolves.

• Track European sovereignty legislation: The Cloud and AI Development Act (CADA), the Eurostack initiative, and potential national-level European cloud procurement requirements will materially affect the technology options available to European organisations. Monitor these developments and assess their implications for your vendor portfolio before they create compliance obligations or market access requirements.

• Maintain emergency operational continuity procedures for digital access restriction: Develop and periodically test procedures for operating under restricted digital access scenarios: what happens if your primary cloud provider loses EU market access? What happens if a key SaaS tool is sanctioned? What communications and collaboration alternatives exist if primary platforms are unavailable? These procedures should be tested annually, documented, and available to business continuity teams without depending on the IT systems they are designed to replace.

Conclusion: Technology Strategy in a Fractured World

The sixth trend identified across 5,000 news signals in the Clateway Media feed is the one that reframes all the others. Agentic AI is transforming enterprise operations — but the models being deployed carry geopolitical provenance risks that governance frameworks are only beginning to address. Cloud infrastructure is maturing — but 85% of European cloud capacity sits in US-jurisdictioned providers that a US administration has demonstrated willingness to weaponise. Identity is the new perimeter — but the nation-state actors exploiting identity vulnerabilities are the same ones conducting kinetic infrastructure attacks and hybrid warfare campaigns against European NATO members. Regulation provides architectural design constraints — but the regulatory environment is itself shaped by geopolitical pressures from the US administration's attempts to use market access to force regulatory rollbacks.

The Recorded Future framing holds: fragmentation is the defining characteristic of the current environment. It is not temporary. It is not resolving toward a new stable order. The US-China technology rivalry is structural, operating across AI development, semiconductor access, cloud infrastructure, and telecommunications. Russia's hybrid campaign against Europe is active, escalating in frequency relative to the pre-2022 baseline, and operating under a strategic doctrine designed to test NATO resolve. Iran's cyber-kinetic integration is evolving rapidly toward more precise targeting of physical infrastructure. North Korea's financial cyber operations continue generating substantial revenue that funds its military programmes.

Against this backdrop, enterprise IT strategy can no longer be developed in isolation from geopolitics. The questions that define an organisation's technology posture — which cloud? Which AI? Which network infrastructure? Which security tooling? — are simultaneously strategic and geopolitical. The organisations that will be most resilient in this environment are not necessarily those with the largest security budgets or the most advanced technology stacks. They are those that have understood the geopolitical dimension of their technology dependencies, made deliberate decisions about acceptable risk, built resilience architectures that assume active adversaries, and established the governance capability to monitor and adapt as the geopolitical environment continues to evolve.

Geopolitical technology risk is not an external constraint on IT strategy. It is a first-order input to it. The organisations that recognise this earliest will make better technology decisions, maintain more resilient operations, and build more durable competitive positions than those that continue to treat the geopolitical environment as background noise.

In a fractured world, resilience is strategy.

Key Data Points Referenced in This Article

Salt Typhoon: 200+ organisations compromised, 80+ countries, 9+ major US telecoms. 600+ organisations notified. Active since 2021, some access maintained 3+ years. Breached CALEA lawful intercept systems. Exploited vulnerabilities from 2018 that remained unpatched. FBI: 'most egregious national security breach in US history.' CSRB investigation disbanded by Trump administration before completion. $3B programme to remove Chinese telecoms equipment accelerated.

Russia hybrid warfare: 321 suspected incidents in Germany in 2025. 30 NATO airspace violations Sep 2025 – Jan 2026 (vs 23 for entire Mar 2022 – Aug 2025 period). Sandworm wiper attack on Poland power grid (Jan 2026). APT28 exploited Microsoft Office zero-day in 3 days (Jan 2026). Dutch AIVD/MIVD: direct military clash 'no longer unthinkable.' NGW doctrine: cyber + physical sabotage + influence operations + GPS jamming in coordinated campaign.

Europe digital sovereignty: US providers: 85% of EU cloud market. EU: >80% of digital products/services/IP from non-EU countries. 95% of German businesses would not survive 2 years without US tech (Bitkom). EU spending on US tech: €111B in 2024. European Parliament tech sovereignty resolution: 23 Jan 2026. France-Germany Digital Sovereignty Summit: Nov 2025. Schleswig-Holstein: cancelled ~70% of Microsoft licences. Cloud and AI Development Act: expected 2026.

DeepSeek / AI provenance: R1 release Jan 2025; 1,000%+ growth in PRC model downloads. Cisco: 100% jailbreak success rate (50/50 HarmBench prompts). CAISI: 94% malicious request compliance under jailbreaking; 12x greater agent hijacking susceptibility than US models; 4x CCP narrative propagation. CrowdStrike: up to 50% increase in vulnerable code generation on CCP-sensitive topics. CAISI: data stored in PRC, subject to Chinese national security law.

Broader geopolitical: GRIDTIDE disruption: Feb 2026, Google-Mandiant action against telecom espionage campaign. Iran cyber-kinetic: hacking IP cameras to plan missile strikes; MOIS-Handala wiper of 200,000 devices in 79 countries Mar 11 2026; Stryker enterprise IT impact. Iran-criminal convergence: MOIS working with genuine criminal groups (Mar 2026). Global cybersecurity spending: projected to exceed $300B by 2029 (Oct 2025).

About Clateway

Clateway is a fractional executive leadership practice serving IT leaders across regulated industries in Europe. Through the RCEC methodology — Research, Commit, Execute, Control — Clateway helps organisations make better technology decisions, faster. This article concludes the Clateway Insights Trend Report 2025–2026, a six-part series based on 5,000 news signals in the Clateway Media feed from April 2025 to March 2026. The six trends covered in this series are: Agentic AI (Part 1), Cybersecurity at the AI Inflection Point (Part 2), Cloud Infrastructure Matures (Part 3), Identity Is the New Perimeter (Part 4), Regulation as Architecture (Part 5), and Geopolitical Technology Risk (Part 6). For advisory engagements, executive roundtables, or the Clateway Academy fractional leadership programme, visit www.clateway.com.

Topics: Geopolitics, Risc

How Clateway can help

• Technology and cyber due diligence – Independent technology and cybersecurity due diligence before you sign: architecture, technical debt, security, suppliers, team and a 100-day value-creation…
• Technology and cyber board advisory – Independent technology and cyber expertise for boards and supervisory boards: advice on management's plans, NIS2 accountability, AI governance and director…
• ISO 27001 risk register and risk assessment – An ISO 27001 risk register with heat maps, risk appetite, treatment plans, acceptances and AI suggestions from your own systems, vulnerabilities and vendors.