The Hidden Cyber War: How Nations Are Battling in the Digital Shadows

The cyber operations now routine between major powers occupy a category that international law has not yet caught up with. They are not war. They are not peace. They sit in a middle space — persistent, deniable, occasionally destructive — that defense planners increasingly call the 'gray zone.'

The targets are surprising mostly in their breadth. Critical infrastructure remains an obvious one, but recent incidents have included municipal water systems, regional hospital networks, and the supply chains for industrial-control software used across dozens of industries.

Attribution has become better than it was a decade ago. Researchers can often trace activity to specific groups within weeks rather than months. What hasn't improved is the political willingness to act on attribution. Public naming-and-shaming statements rarely deter the underlying behavior.

Defense, meanwhile, has become a problem of supply-chain depth. The most successful intrusions of the past two years did not target the eventual victims directly; they targeted vendors, contractors, and software dependencies several steps removed. Hardening the perimeter is no longer sufficient when the perimeter has been redefined.