Key points
- In 2010 a small antivirus firm in Belarus found Stuxnet: four zero-day exploits, carried across an air gap on a USB drive, built to sabotage Iran’s Natanz nuclear facility.
- Cyberweapons strike without attribution, and nations now build and hold them, waiting for the moment to use them.
- Ukraine is the first full-scale drone war: consumer drones costing a few hundred dollars scout and strike for both sides.
- AI raises the stakes: autonomous drones, AI targeting and deepfake propaganda, in a contest where data becomes ammunition.
The Dawn of a New Era in Global Warfare
In 2010, a small antivirus company in Minsk, Belarus, uncovered a threat that signaled the dawn of a new era in global warfare. VirusBlokAda, a modest antivirus developer, was approached by a client in Iran experiencing unexplained reboots of their industrial control computers. Initially dismissing it as a software glitch, the VirusBlokAda team soon identified suspicious files pointing to something more sinister. This discovery would send shockwaves through the cybersecurity world and redefine the concept of warfare. This post follows that change from Stuxnet to AI and drones in combat, the new front lines of modern warfare.
Updated October 2026: since I wrote this in July 2024, the drone war has changed faster than any other part of this story.
- Cheap FPV (first-person view) attack drones are now built in the millions, and drones guided through a thin fibre-optic cable, which radio jamming cannot stop, reached the front in 2024.
- Both sides fly drones with AI terminal guidance that keeps tracking a target after the radio link is jammed, and use small interceptor drones against Shahed-type drones.
- In June 2025 Ukraine’s Operation Spiderweb launched drones from trucks deep inside Russia and struck strategic bombers at several air bases: 117 cheap drones, by President Zelensky’s count, against aircraft that cannot be replaced.
The Discovery of Stuxnet
Sergey Ulasen, a researcher at VirusBlokAda, discovered that the mysterious code could silently execute programs from a USB drive without any user interaction, by exploiting a flaw nobody knew about yet: a zero-day. This zero-day vulnerability, and a method that let the malware spread with terrifying efficiency, made Iran the centre of the outbreak: about 58% of all the computers it had infected were in Iran. The implications were staggering: a highly skilled attacker had deployed an unprecedented worm, and no one knew its purpose.
Cyber Warfare Unveiled
This malicious code, later named Stuxnet, marked the beginning of a new era in cyber warfare. Unlike traditional espionage that intercepted data in transit, this new digital conflict exploited vulnerabilities in the devices where data was created and stored. Zero-day vulnerabilities, previously the domain of hobbyist hackers, became valuable commodities. Companies like iDefense, which began buying them in 2002, paid for these exploits, creating an ethical, profitable system that allowed hackers to monetize their discoveries while alerting software developers and customers to potential threats.
The Evolution of Zero-Day Exploits
However, this system quickly evolved as government contractors saw the potential of these exploits for national security purposes. The American military, recognizing the strategic advantage of cyberweapons, began paying exorbitant sums for zero-day exploits. Companies like Zerodium emerged, openly publishing bounties for remote code execution vulnerabilities on various platforms, with payouts reaching up to $1,000,000 for critical systems like Windows.
Stuxnet’s Strategic Sabotage
Stuxnet was a sophisticated cyberweapon utilizing four zero-day exploits, a never-before-seen feat. It targeted the Natanz nuclear facility in Iran, bypassing air-gapped security measures through a contaminated USB drive. Once inside, Stuxnet spread silently, aiming not at immediate destruction but long-term sabotage. It altered the speeds of uranium enrichment centrifuges, causing wear and eventual failure while reporting normal operations, a tactic designed to evade detection and prolong damage.
State-Sponsored Cyber Warfare
The precision and complexity of Stuxnet indicated it was the product of a state-sponsored effort, likely involving significant resources and time. Investigative reporting, led by The New York Times in 2012, said that the US and Israel had developed Stuxnet as a middle ground between doing nothing and launching airstrikes against Iran’s nuclear facilities. This marked the first use of a cyberweapon to achieve physical destruction, setting a precedent for state-led cyber offensives.
The Evolution of Cyberwarfare
In the years since, the cyberwarfare landscape has evolved rapidly. Nations like North Korea, China and Russia have developed their capabilities, and they and criminal groups operating from their territory have carried out significant cyberattacks on global targets, from Sony Pictures (2014) and the UK’s National Health Service (WannaCry, 2017) to the US’s Colonial Pipeline (2021, by the Russia-based DarkSide ransomware gang). The leak of NSA hacking tools by The Shadow Brokers in 2016 and 2017 further democratized the ability to conduct cyberattacks, increasing the threat landscape.
The Threat of Unaccountable Cyber Weapons
Cyberweapons offer a unique advantage: they can be deployed without immediate attribution, evading the traditional consequences of warfare. This lack of accountability raises the stakes as nation-states develop and embed these weapons, waiting for the right moment to unleash their potential.
The Future of Cyber Warfare
Today, we are waiting. The capability for catastrophic cyber warfare exists, but the major players have yet to fully deploy these weapons. The next significant conflict will likely be fought not on distant battlefields but within the digital infrastructure that underpins modern life. The challenge for leaders is to navigate this new landscape, balancing the development of defensive measures with the ethical considerations of cyber offenses.
Preparing for a New Battlefield
As we stand on the brink of this new era, Stuxnet’s lessons remind us that the tools of war have changed. The battlefield is everywhere, and the front lines are drawn in code. Leaders must prepare for a future where cyberweapons are as consequential as any physical arsenal, shaping the course of global conflict in ways we are only beginning to understand.
The Revolutionary Role of Drones in Modern Warfare: The Russia-Ukraine Conflict
In the war between Russia and Ukraine, consumer drones, which can be purchased on Amazon for a few hundred dollars, have become crucial tools of warfare. These drones, initially designed for photography and 4K video recording, are now used to win wars, demonstrating a significant shift in military strategy.
The Russia-Ukraine war is unique for several reasons. It is the largest war in Europe since World War II and the first full-scale drone war in history. Unlike previous conflicts where drones were used by one side over uncontested airspace, such as the U.S. operations in Afghanistan, this war sees extensive use of drones by both sides, integrated into every phase of the fight. Russia and Ukraine deploy a variety of military and consumer drones, each with specific capabilities and roles.
Russia’s Drone Arsenal
- Shahed 136: An Iranian-designed drone, now also built in Russia as the Geran-2, equipped with an explosive warhead and optical sensors. It is known for its long range and relatively low cost, making it a significant threat on the battlefield. The drone’s ominous noise before impact adds to its psychological impact.
- Orlan-10: Developed by Russia’s Special Technology Center, this drone is primarily used for reconnaissance and surveillance. Unlike the Shahed 136, it is usually not armed with a warhead.
Ukraine’s Drone Arsenal
- Bayraktar TB2: Developed by the Turkish company Baykar, this drone is the size of a small aeroplane capable of striking targets and conducting reconnaissance. Its versatility makes it a key asset in Ukraine’s military strategy.
- Switchblade 300: The United States provided this small drone designed to strike soldiers and light targets; the larger Switchblade 600 is the version built against armoured vehicles. Its compact size makes it easy to hide despite its limited range.
The Role of Consumer Drones: Both sides also extensively use consumer drones manufactured by DJI, the world’s largest commercial drone producer. While DJI does not formally supply drones to Ukraine or Russia, their models, particularly the Matrice 300 RTK and the Mavic 3, have found their way to the battlefield. These drones are inexpensive and accessible, with a Matrice 300 RTK costing more than $10,000 and a Mavic 3 a few thousand dollars.
Defensive Measures Against Drones: Despite their effectiveness, consumer drones have vulnerabilities. Two primary methods to defend against these drones include:
- Anti-Drone Jamming Gun: This device disrupts the operation of drones by transmitting radio signals.
- DJI Aeroscope: A system that can track drone operators, potentially exposing them to artillery attacks. While DJI has condemned the use of their technology in warfare, there are allegations that they have provided enhanced versions of Aeroscope to Russian forces, though these claims remain unproven.
Adaptation and Future Use: Despite these challenges, Ukraine has adapted to counteract these vulnerabilities. Both Ukraine and Russia will likely continue to use drones extensively throughout the conflict and in future military operations. This conflict underscores the evolving nature of warfare, where technology plays an increasingly critical role.
AI and Drones in Combat: The Future of Warfare
Artificial intelligence (AI) is set to revolutionize warfare, with potential applications ranging from swarms of lethal drones with facial recognition to unmanned armed robots and autonomous fighter jets. These technologies could perform tasks with a speed and precision unattainable by humans, changing the dynamics of military engagement.
AI-driven cyberattacks could incapacitate critical infrastructure or influence political outcomes through disinformation campaigns and deepfakes. Foreign adversaries could target satellites, our eyes and ears in space, blinding us to global events. These AI-driven weapons of terror signal the dawn of a new warfare age.
Historically, the country that integrates new technology into warfare most effectively often prevails. Today, in the AI arms race, China leads in areas like computer vision and has closed much of the gap in large language models (DeepSeek and Qwen, for example), while the United States still holds the frontier. Despite the U.S. having the largest military hardware fleet, much of this fleet’s data is underutilized. In an AI-driven war, data supremacy is crucial. Military commanders must learn to use data as a critical asset, integrating it from military assets, sensors, and collaborations with tech companies.
What the War in Ukraine Shows
The Ukraine war has demonstrated AI’s pivotal role. Technologies such as drones, AI-based targeting, and image intelligence have enabled Ukraine to mount a formidable defence against a numerically superior adversary. AI is invaluable in defending cities and infrastructure against missile and drone bombardment, providing real-time battle damage assessments and change detection through constant imagery monitoring.
AI also poses significant challenges. Disinformation and misinformation are major problems, and AI tools can exacerbate these issues. For instance, China uses disinformation campaigns in Taiwan, and Russia’s propaganda machine has employed deepfakes, such as a fake video of Ukrainian President Zelensky calling for surrender.
Proper investment in data infrastructure and preparation is essential to counter these threats. Deterrence, a concept familiar from the nuclear era, will also apply to AI, where data becomes a new kind of ammunition. The AI war will define the future of our world and has the potential to shift the balance of diplomatic power. Technologists must rise to the challenge, supporting national security and ensuring the ethical development and deployment of AI technologies. For the business side of the same technology, see my guide to generative AI for business leaders.
Conclusion
The landscape of modern warfare has fundamentally transformed. The tools and tactics of conflict have evolved from the silent, pervasive threat of cyber espionage and the disruptive power of cyber weapons to the strategic use of drones and the revolutionary potential of artificial intelligence. Nations must navigate this new terrain with technological advancement, ethical considerations, and robust defence strategies.