Use of US cyberweapons against ISIS, which uses the web to recruit, spread propaganda, and use encrypted communication, has been a consistent disappointment
WASHINGTON — America's fast-growing ranks of secret cyberwarriors have in recent years blown up nuclear centrifuges in Iran …
Context & Ripple Effects
This assessment lands at a pivot point in American offensive cyber policy. The very next year, the NSA and Cyber Command would run what they describe as the largest and longest offensive cyber operation in US military history against ISIS's media apparatus — an implicit admission that earlier efforts had not worked, scaled up rather than abandoned.
First-order effects
- ISIS retains working recruitment, propaganda, and encrypted-communication channels despite a fast-growing corps of US cyberwarriors, meaning the disruption burden falls back on takedowns and intelligence rather than decisive cyber effect.
- Cyber Command's record against a web-dependent adversary undercuts the case for cyberweapons as a standalone tool, pushing planners toward targets with clearer physical effects like the Iranian centrifuge sabotage cited in the piece.
Second-order effects
- Attention shifts from ISIS to state adversaries: Cyber Command later pursues a formal deterrence process against Iran and takes unspecified action against Iranian hackers around the 2020 election, treating nation-state interference as the problem cyber operations can actually shape.
- Offensive capability becomes a liability when it escapes: within weeks of this report, a malware attack raised fears that the NSA had lost control of cyberweapons it developed through the Shadow Brokers leaks, arming opponents with US-built tools.
Third-order effects
- If disappointment against a non-state actor is the baseline, US cyber doctrine structurally migrates from one-off disruption toward persistent engagement and deterrence frameworks aimed at states like Iran — whose hackers are now mobilized at scale for chaos and targeting.
- The combination of leaked US weapons and maturing adversary programs points toward a normalized, civilian-exposing cyber conflict, where attacks on fuel systems and dating apps show spillover beyond military targets.
The trend: US offensive cyber is moving from chasing non-state propagandists like ISIS toward durable deterrence against state adversaries such as Iran, while weapon leakage erodes the advantage that justified the buildup.