cyber warfare

Cyber warfare is the deliberate use of digital technologies to achieve strategic or tactical objectives traditionally reserved for kinetic military operations. By exploiting vulnerabilities in computers, networks, and embedded systems, state and non‑state actors can disrupt critical infrastructure, exfiltrate intelligence, or degrade an adversary’s decision‑making cycle without firing a single shot. Its uniqueness lies in the speed of propagation, the difficulty of attribution, and the fact that a single line of code can reverberate across borders, reshaping the calculus of national security.

Origins and Historical Background

The first recognized cyber‑enabled conflict dates to the 1998 “Morris Worm,” which, although not state‑sponsored, demonstrated the disruptive potential of self‑replicating code on the nascent Internet. In 2007, Estonia suffered a coordinated Distributed Denial‑of‑Service (DDoS) assault that knocked offline government portals, banking services, and media sites, prompting NATO to invoke Article 5‑related discussions for the first time. The watershed moment arrived in 2010 with the discovery of Stuxnet, a sophisticated worm jointly attributed to the United States and Israel; it silently reprogrammed Siemens PLCs at Iran’s Natanz enrichment plant, physically destroying roughly 1,000 centrifuges while remaining undetected for months. Subsequent incidents—Russia’s 2015–2016 attacks on Ukraine’s power grid and the 2017 NotPetya malware, which inflicted an estimated $10 billion in global losses—cemented cyber warfare as a permanent element of modern conflict.

How It Works: Mechanisms and Tools

Cyber offensives typically begin with the acquisition of zero‑day exploits—software vulnerabilities unknown to vendors—followed by the development of tailored payloads such as ransomware, wipers, or espionage‑grade trojans. Supply‑chain infiltration, exemplified by the 2020 SolarWinds breach that compromised the Orion update platform for more than 18,000 organizations, allows adversaries to insert malicious code upstream, reaching targets that would otherwise be insulated. Once deployed, malware can manipulate industrial control systems, exfiltrate classified data, or launch coordinated DDoS floods that overwhelm bandwidth, while command‑and‑control servers—often hidden behind anonymising services—coordinate the attack’s timing and scope. Attribution remains a technical and diplomatic challenge because code can be obfuscated, routed through proxy networks, and disguised as civilian hacking activity.

International Legal and Policy Framework

The United Nations Group of Governmental Experts (GGE) on Developments in the Field of Information and Telecommunications in the Context of International Security first articulated a normative baseline in its 2009 report, later refined in 2015 to define “use of ICTs to cause harm” as a violation of the UN Charter when it amounts to a use of force. The Tallinn Manual on the International Law Applicable to Cyber Warfare (2013) and its successor, Tallinn Manual 2.0 (2017), codified how existing principles of jus ad bellum and jus in bello extend to cyberspace, introducing the concept of a “cyber armed attack” that could trigger collective self‑defence. NATO formally recognised cyberspace as an operational domain in 2016, committing allies to defend against attacks that threaten the alliance’s core security. The United States released its Cyber Strategy in 2018, emphasizing “defend forward” and the establishment of a dedicated Cyber Command (USCYBERCOM) with a budget exceeding $15 billion in FY 2024. India’s National Cyber Security Policy (2013, updated 2022) introduced a “cyber deterrence” doctrine, authorising the Armed Forces to conduct offensive cyber operations under the aegis of the Integrated Defence Staff.

Current Status and Strategic Significance

By 2023, the global cost of cybercrime and cyber‑enabled disruption surpassed $10.5 trillion annually, according to a McAfee report, while the number of state‑attributed incidents rose 50 percent year‑on‑year since 2020. Russia’s 2022 campaign against Ukrainian energy networks, which knocked out power for over 200,000 citizens, demonstrated that cyber attacks can produce physical casualties and humanitarian crises. In 2024, amid heightened Israel‑Iran tensions, the United States disclosed a series of covert cyber operations aimed at degrading Iran’s ballistic‑missile command and control, illustrating how cyber tools now complement conventional deterrence postures. The convergence of cyber capabilities with nuclear doctrine—evident in Israel’s recent strategic review—underscores that cyber warfare is no longer an auxiliary threat but a central pillar influencing escalation ladders, crisis stability, and the very definition of armed conflict in the digital age.