Norwegian organizations were compromised by the Chinese state-sponsored cyber espionage campaign known as Salt Typhoon, according to a recent Norwegian Police Security Service’s (PST) annual threat assessment for 2026.
PST Director General Beate Gangås warned that Norway is “facing its most serious security situation since World War II,” citing mounting pressure from multiple foreign intelligence services.
According to the assessment, Salt Typhoon exploited vulnerable network devices in Norway. The campaign, tracked by US and allied authorities, has previously targeted telecommunications providers and other critical infrastructure abroad.
Gangås said foreign states, particularly China, Russia and Iran, are conducting intelligence operations and using hybrid tactics to undermine Norway’s resilience. PST described China as posing a “substantial” cyber threat, warning that Chinese intelligence services are improving their ability to map Norwegian digital infrastructure and exploit research collaboration for military gain.
While China dominates the cyber threat landscape, PST said Russia remains the principal overall threat to Norway’s security, citing sustained espionage, cyber operations and the risk of sabotage.
“We expect Russian intelligence services to increase their activity in Norway in 2026, with a continued focus on military targets and allied exercises, Norway’s support for Ukraine, and operations in the High North and the Arctic region. Russia is likely to employ a wide range of methods, including influence operations, sabotage, recruitment of human intelligence sources, and intelligence activity on civilian vessels,” the agency said.
Iranian intelligence services were also flagged for potential influence operations and destructive activities.