ZeroFox Intelligence Assessment - Group of Seven (G7) Summit
|by Alpha Team

Assessment: Group of 7 (G7) Summit
Product Serial: A-2026-06-11a
TLP:CLEAR
Standing Intelligence Requirements
Geopolitical and Physical
For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:
https://cloud.zerofox.com/intelligence/advisories/14956
Link to Download
View the full report here.
Executive Summary
he 2026 G7 summit returns to Évian-les-Bains, France, which hosted the 2003 G8. The threat picture is shaped by the active conflict in Iran and Ukraine, persistent domestic unrest in France, and the venue's unique cross-border geography, with the nearest international airport situated in Switzerland and outside French jurisdiction. France's security services have a strong track record at G7-class events (including its most recent G7 in 2019 and the 2024 Summer Olympics). Therefore, the principal physical risk to the 2026 G7 summit is not the venue itself; rather, it stems from anti-G7 mobilization nearby, lone-actor terrorism, and spillover effects of the Iran conflict. The cyber risk to the summit is almost certainly elevated. Iranian-aligned actors have been targeting G7 members since March, and pro-Russian collectives have been targeting the event since Russia was removed from the group in 2014. Russian-aligned actors have frequently targeted the government, banking, and transportation infrastructures of G7 members in retaliation for their support of Ukraine. Cyberattacks against G7 infrastructure, sponsors, and delegations—including distributed denial-of-service (DDoS), website defacement, credential theft, and event-themed phishing—are very likely. Russian-linked disinformation operations targeting France's information environment are almost certain.
Tags: geo-political, threat actor, security