An in-depth look at Russia's offensive cyber capabilities, their potential use in Ukraine, the limitations of cyber power, and implications for the West
and cannot—play in relation to Russia's aggression against Ukraine, and what it all means for the rest of us. https://twitter.com/... @k8em0 : “The strategic vulnerability to disruption & sabotage lies not in military space but in hospital booking systems(Ireland), logistics schedules (Maersk), political party (U.S. experience in 2016 election), electricity grid (Kyiv), & other civilian, mostly privately owned networks” https://twitter.com/... David Priess / @davidpriess : Events since Russia's invasion of Ukraine shine a light on the limitations of cyber capabilities in this conflict—and provide two important lessons of cyber realism that we all should heed. A must-read overview on Lawfare by @ciaranmartinoxf: https://www.lawfareblog.com/ ... Jamie MacColl / @jamiemaccoll : Very good piece. However, I'm not sure it necessarily exposes the limitations of cyber power. If anything it should emphasise that cyber power ≠ offensive cyber capabilities. Much more focus needed on global technical standards & creating safer tech that reflects our values. https://twitter.com/... James Cook / @jamesliamcook : Excellent post from Ciaran Martin, the former head of the NCSC in the UK. For years the widespread thinking has been that the next war would take place in cyberspace. Ukraine has shown that tanks and missiles are still a primary problem https://twitter.com/... Kim Zetter / @kimzetter : Former dir. of GCHQ's National Cybersecurity Center on cyber in war: “reality is that cyber capabilities...can do everything from low-level harassment to serious disruption of everyday economic and social activity. But they can't do what missiles, fighter jets and soldiers do” https://t.co/TtvaECBkZR
Context & Ripple Effects
Written by former NCSC chief Ciaran Martin just days after the invasion, this Lawfare piece asks whether Russia's long-feared offensive cyber arsenal would actually matter in a hot war — a question built on years of prior Russian hacking campaigns against NATO countries, including the attacks on the Polish stock exchange and a German steel plant.
The coverage that followed split the answer in two: Foreign Affairs judged Russia's cyberattacks on government, logistics, and critical infrastructure its biggest military success of the war so far, while the Washington Post showed how a quiet alliance of US tech firms, NATO intelligence, and Ukrainian hackers blunted the same campaign — a defense seeded by US soldiers and cybersecurity experts working with Ukraine well before the invasion.
First-order effects
- Russia's cyber operators run into Ukrainian networks already hardened by years of US assistance, forcing them to fight for intrusions that pre-war assumptions treated as near-automatic.
- Western planners' expectation that offensive cyber would deliver early strategic effect gets stress-tested in real time, with commentators like David Priess flagging the visible gap between capability and outcome.
Second-order effects
- Defense goes public-private: [[a:980121|US tech companies, US and NATO intelligence agencies, and Ukrainian hackers quietly partner]] to blunt Russian operations, pulling commercial firms into a wartime role once reserved for signals-intelligence agencies.
- The real attack surface proves to be civilian and mostly privately owned — hospital booking systems, Maersk's logistics schedules, political party networks, Kyiv's grid — shifting the defensive burden onto companies rather than militaries.
Third-order effects
- If the pattern holds, cyber conflict consolidates around allied defensive coalitions and shared threat intelligence rather than offense alone, making resilience investment a core NATO-adjacent capability.
- Jamie MacColl's argument in the piece points to the next battleground: global technical standards and safer-by-design technology reflecting democratic values, where influence matters as much as intrusion skill.
The trend: Cyber power is being revalued from a presumed war-deciding weapon into a supporting tool, with the decisive edge migrating to allied public-private defense.