Cyberwarfare is more dangerous than conventional warfare - and we’re already under attack
Why ignoring cyber threats is a national security disaster
Forget the Hollywood version of cyberattacks - hackers in dark hoodies typing furiously in dimly lit rooms. The real threats don’t come from rogue individuals; they come from nation-states weaponizing code to infiltrate power grids, financial systems, and defense networks. And yet, some governments are actively choosing to ignore certain cyber threats, as Jacob Williams recently highlighted in his critique of tracking policies. The decision to stop tracking Russian cyber operations, for instance, isn’t just a bad policy - it’s a national security failure.
The Invisible War You’re Already Losing
Cyber Threat Intelligence (CTI) is supposed to be the radar system that detects incoming attacks before they strike. It collects, analyzes, and disseminates critical data on enemy tactics, helping nations defend themselves in real time.
But what happens when policymakers deliberately shut off parts of that radar, refusing to acknowledge specific threats? The answer is simple: blind spots. And in cybersecurity, blind spots get people killed.
Williams’ critique of cyber intelligence policies exposes a deeper problem: Governments often prioritize political convenience over national security. Intelligence agencies are told to stop tracking certain adversaries for diplomatic reasons, creating gaps in national defense. The result? A fragmented, ineffective security posture that leaves countries vulnerable to attacks they didn’t see coming.
Why Cyber Threat Intelligence is the New Arms Race
In traditional warfare, intelligence is everything. Nations invest billions in satellites, spies, and reconnaissance aircraft to stay ahead of their enemies. Yet, in cyberspace, intelligence is often an afterthought: Underfunded, undervalued, and, in some cases, outright ignored.
This is a strategic mistake.
CTI is not just about collecting data, it’s about anticipating attacks before they happen. It enables security teams to predict an adversary’s next move, neutralize threats proactively, and even attribute attacks to specific nation-states. Without it, a country is essentially fighting blind in a war it doesn’t even realize it’s losing.
Consider this: A single vulnerability in an energy grid’s control system could allow a foreign adversary to cut off power to millions. A breach in a government contractor’s database could expose top-secret defense projects. And yet, many of these attacks aren’t even investigated properly because intelligence teams are handcuffed by political directives.
The Dangerous Delusion of Selective Threat Tracking
Williams’ frustration with current policies is justified. When governments decide to stop tracking cyber threats from specific countries, they aren’t neutralizing the threat, they’re just choosing ignorance. Cybercriminals and nation-state hackers don’t care about diplomatic niceties; they exploit every opportunity, every gap, every moment of weakness. Even worse: Other adversaries might jump on the badnwagon and run false-flag operations to undermine their detection through CTI.
Pretending that certain threats don’t exist doesn’t make them go away. Instead, it emboldens adversaries, giving them free rein to escalate attacks without fear of consequence. If a nation refuses to acknowledge cyber operations from a certain origin, the origin doesn’t stop hacking - it just hacks without resistance.
What Needs to Change - Now
If national security leaders want to prevent a catastrophic cyber event, they need to rethink their approach to CTI. Here’s what must happen immediately:
1. Track Everything, Ignore Nothing – Intelligence agencies must be free to track all cyber threats, regardless of political considerations and within legal boundaries. National security should never be subject to diplomatic trade-offs.
2. Invest in AI-Driven CTI – Attackers are automating their operations, defenders need to do the same. Advanced AI and machine learning tools can predict threats faster than human analysts.
3. End Bureaucratic Paralysis – Too many agencies sit on valuable intelligence because they’re buried in red tape. Information-sharing between government and private sector organizations must be real-time and mandatory.
4. Prepare for the Cyber 9/11 – Governments must assume a major cyberattack is coming. Disaster recovery plans, cyber defense drills, and offensive countermeasures should already be in place.
The Bottom Line
Cyberwarfare is not a future threat - it’s happening right now. Ignoring threats for political reasons is not just irresponsible, it’s national security negligence. If intelligence agencies are forced to look the other way, they aren’t protecting their countries - they’re helping their enemies.
Either we take cyber intelligence seriously, or we wait until an attack cripples our infrastructure, economy, and military capabilities.
By then, it will be too late.
I would highlight the fact that not many take into consideration CTI coupled with behavioural analysis that can identify possible outlines that attackers can deploy.