Experts warn of cyber nuclear nightmare

It’s a war that pits states against states and criminals against corporations, often blurring the lines between who is who. And increasingly, civilians are getting caught up in it, either as direct targets or as the collateral damage of the digital age.

“You have a mix of state level and non-state actors constantly probing and attacking networks around the world,” said Martijn Rasser, a former CIA emerging technology analyst now at the prominent defense think tank, the Center for a New American Security. He was speaking in the recent DW documentary Future Wars — and How to Prevent Them. “That’s just the reality of 21st-century life and something that we’ll have to deal with,” he said. This reality is underlined by no fewer than 25 “cyber” mentions in the final communique of this week’s NATO summit.

The allies signed off on a new “Comprehensive Cyber Defense Policy,” affirming that, if serious enough, a cyberattack could lead to the invocation of NATO’s core Article 5: that an attack on one member is considered an attack on all. Recent targets have included various parts of the US government, the German parliament and election campaigning in France. Ever more corporations have been held up by ransomware, with their systems blocked in an attempt to extort money. And these are just the attacks we know about. One of the most serious intrusions in recent years hit Ukraine’s electricity grid, cutting power to more than 200,000 people in the winter of 2015. It showed how cyberattacks could bring societies to their knees.

Kyiv and Washington blamed the Russian government, with the US even singling out a member of the GRU military intelligence agency in late 2020. “These were the first reported destructive malware attacks against the control systems of civilian critical infrastructure,” said John Demers, the US assistant attorney general at the time, announcing the charges. “No country has weaponised its cyber capabilities as maliciously and irresponsibly as Russia.” Cyberattacks on civilian infrastructure have triggered broad public concern, and debate on how to protect against them. Cyberwar could also hit the world of nuclear weapons — an even more serious prospect. And only a small group of experts have been speaking out about this risk. “This is an issue that is enormously important — and exceptionally difficult to discuss,” said James Acton, co-director of the Nuclear Policy Program at the Carnegie Endowment for International Peace in Washington. “Because it is so heavily classified.”

Acton’s concerns center on cyber intrusions not against nuclear weapons themselves, but the command and control systems surrounding them. “Nuclear command and control is everything apart from the physical weapons themselves that are needed to make those weapons work,” he explained. This is perhaps the most sensitive infrastructure in the world. It’s so sensitive that the US explicitly said in its latest “Nuclear Posture Review” that if it comes under attack, it could respond with a nuclear strike. What makes this situation even more unstable is that many of America’s command and control facilities are no longer just serving nuclear weapons — they’re involved in conventional systems, too. Acton calls this phenomenon “entanglement.”

The lack of trust between the major powers remains a fundamental problem. “When there is lack of trust, you tend to attribute all kinds of intentions to the other party,” Amandeep Singh Gill, a veteran of efforts to curtail autonomous weapons at the United Nations in Geneva, told DW. Today in the cyber realm, verification is not possible. There is nothing to count. So as the world sinks deeper into the cyberwar era, finding anything approaching trust between the major powers might be the biggest challenge of all.

This article was provided by Deutsche Welle