Cybersecurity & Digital Warfare: Will Future Wars Be Fought More Online Than on Battlefields?

Future wars will be fought far more extensively online than wars of the past, but cyber conflict is unlikely to replace physical battlefields completely. The more probable future is integrated or hybrid warfare: cyberattacks, artificial intelligence, electronic warfare, disinformation, economic pressure, autonomous systems, and conventional military force operating as parts of the same campaign.

A future conflict may begin inside computer networks months or even years before soldiers cross a border. Attackers may quietly penetrate electricity grids, government databases, telecommunications systems, financial networks, satellites, ports, hospitals, transportation systems, and military command networks. When political tensions escalate, those hidden accesses can be activated to create confusion, delay military responses, weaken public confidence, and disrupt essential services.

NATO now treats cyberspace as an operational domain and describes cyber threats as increasingly frequent, destructive, and coercive. It also recognizes that hybrid threats combine cyberattacks with sabotage, disinformation, economic pressure, political interference, irregular forces, and conventional military operations. 

The battlefield is already expanding

Traditional warfare focused largely on territory, military formations, weapons, supply routes, and industrial production. Digital societies have created additional strategic targets.

A country’s military strength now depends on civilian and commercial technology:

• Cloud computing and data centres

• Telecommunications networks

• Navigation and satellite systems

• Semiconductor supply chains

• Civilian logistics companies

• Financial payment networks

• Energy and water-management systems

• Social media and public information platforms

This means an enemy may weaken a state without immediately bombing its cities. A sophisticated operation could interrupt communications, corrupt databases, disable payment systems, manipulate transportation schedules, interfere with industrial controls, or leak sensitive government information.

Recent official warnings demonstrate that state-linked actors continue to target critical infrastructure and network equipment. CISA’s nation-state threat resources cover persistent activity against infrastructure, while recent advisories have described attempts to exploit operational technology and programmable industrial systems for disruptive purposes. 

The strategic objective is not necessarily to destroy every system. Sometimes it is sufficient to make leaders and citizens uncertain about which systems can still be trusted.

Why cyber operations are attractive

Cyber operations offer several advantages that conventional military attacks do not.

First, they can cross borders almost instantly. An attacker does not need to move an army, obtain air superiority, or sail a fleet toward the target.

Second, cyber operations can be conducted covertly. Attackers may hide behind compromised computers, criminal organizations, private contractors, proxy groups, or supposedly independent hacktivists. This complicates attribution and can delay political or military retaliation.

Third, cyber campaigns can remain below the threshold of open war. A government may steal data, disrupt services, manipulate public debate, or pressure another country without formally declaring hostilities.

Fourth, cyber capabilities may provide asymmetric power. A smaller state or non-state organization may be unable to compete with a major power in tanks, aircraft, or naval vessels, but it may still possess programmers capable of finding vulnerabilities in important networks.

Finally, cyber operations can prepare the conventional battlefield. They can interfere with military communications, surveillance, logistics, air defence, transportation, mobilization, and decision-making immediately before or during a physical attack.

For these reasons, cyberspace is likely to become the permanent front line of international competition—even when countries are not formally at war. NATO has described cyberspace as continuously contested, with malicious activity ranging from low-level intrusion to sophisticated, coercive operations. 

Information itself will become a weapon

Digital warfare is not limited to hacking computers. It also includes attempts to control how societies understand events.

Artificial intelligence can accelerate the production of convincing false videos, fabricated audio, fraudulent documents, automated propaganda, impersonation campaigns, and coordinated social-media activity. These techniques may be used to:

• Discredit political leaders

• Spread false military orders

• Encourage panic or ethnic hostility

• Undermine elections

• Convince soldiers that their commanders have surrendered

• Create confusion during emergencies

• Reduce international support for an opponent

In this environment, the struggle may not simply be over territory. It may be over perception, legitimacy and truth.

A state whose population no longer trusts its government, news organizations, financial institutions, or emergency warnings can be strategically weakened without suffering a conventional military defeat. Digital influence operations therefore aim at a nation’s psychological cohesion as well as its technical infrastructure.

Artificial intelligence will increase the speed of conflict

AI will likely make cyber conflict faster, more automated, and more difficult to contain.

Defensive systems can use AI to examine large amounts of network activity, identify anomalies, detect malware, prioritize vulnerabilities, and respond to incidents. Attackers can use similar technology to search for weaknesses, generate malicious code, imitate trusted individuals, automate reconnaissance, and coordinate influence campaigns.

The most consequential change may be decision speed. Military and political leaders could face incidents developing in seconds rather than hours. Automated defensive systems may block or counterattack before humans fully understand what is happening.

This creates a dangerous escalation problem. A technical malfunction, incorrectly attributed intrusion, manipulated warning system, or AI-generated deception could be interpreted as the beginning of a major attack. Governments might then feel pressure to respond before verifying the evidence.

The future cyber battlefield will therefore involve not only superior technology but also superior judgment. The state that reacts fastest will not necessarily be the state that reacts most wisely.

Why physical battlefields will not disappear

Despite the growth of digital warfare, cyber operations have important limitations.

Software cannot physically occupy territory, guard a border, remove an opposing government, rescue a besieged population, patrol a sea lane, or compel an entrenched military force to surrender. Cyberattacks may disrupt an enemy, but they do not automatically create political control.

A government can also recover from many digital attacks by restoring backups, isolating networks, replacing equipment, changing communication methods, or operating manually. A cyberattack that causes temporary disruption may not produce lasting strategic results unless it is connected to diplomatic, economic, intelligence, or military action.

Physical weapons remain the most direct means of destroying hardened targets, defeating military formations, controlling territory, and imposing irreversible costs. Tanks, missiles, aircraft, drones, ships, artillery, special forces, and infantry will therefore remain central where the objective involves physical control.

The fundamental distinction is this:

Cyber power can paralyse, deceive, expose and disrupt. Military power can seize, defend, destroy and occupy.

Most major wars will require some combination of both.

Future war will be multi-domain warfare

The term “online war” can be misleading because future conflicts will not occur neatly in one environment. They will operate across interconnected domains:

Cyberspace: Network intrusion, data theft, industrial disruption and command-system attacks.

The information environment: Propaganda, psychological operations, deepfakes and narrative manipulation.

The electromagnetic spectrum: Jamming communications, radar, drones, satellites and navigation signals.

Space: Attacks against satellites, ground stations and space-based communications.

Economics: Sanctions, financial restrictions, supply-chain disruption and technology controls.

The physical battlefield: Missiles, aircraft, drones, naval forces, ground troops and special operations.

A coordinated campaign might begin with disinformation intended to divide the target population. Cyber units could then penetrate government and infrastructure networks. Electronic-warfare forces might disrupt communications and navigation. Economic measures could increase pressure. Conventional forces would act only when the adversary had been confused, isolated or weakened.

This is why the boundary between war and peace is becoming less clear. NATO’s recent descriptions of hybrid threats include cyberattacks, sabotage, interference, information threats, and attacks against critical infrastructure—activities that may occur even without a formal declaration of war. 

Civilians may become the primary digital targets

One of the greatest dangers is that military and civilian systems frequently depend on the same infrastructure. Hospitals, banks, governments, emergency services, military organizations, and private companies may use shared cloud services, telecommunications providers, software platforms, energy grids, and satellite networks.

An attack intended to weaken military capability could therefore disrupt medical care, water distribution, transportation, communications, or financial services.

The International Committee of the Red Cross warns that cyber operations used during armed conflicts can create serious risks for civilians and civilian infrastructure. It maintains that international humanitarian law applies to cyber operations conducted in armed conflict, including obligations concerning distinction, proportionality, and protection of civilian objects. 

This creates difficult legal and ethical questions. Does deleting critical civilian data constitute an attack? How should proportionality be calculated when the indirect consequences spread across interconnected networks? Who is responsible when civilian hackers voluntarily participate in hostilities? How should states respond when attribution remains uncertain?

International law applies, but applying established rules to rapidly evolving digital operations remains complex.

The most likely answer

Future wars will probably be fought more online than ever before, but not exclusively—or necessarily predominantly—online.

Cyber operations will often be the opening move. They will shape the battlefield, weaken institutions, steal intelligence, manipulate public opinion, and interfere with military mobilization. They may continue throughout the conflict and long after a ceasefire.

However, whenever the objective is to capture territory, remove a regime, defend a population, control resources, or physically defeat an armed force, conventional military operations will remain necessary.

The defining conflict of the future will therefore not be cyberwar versus battlefield war. It will be cyberwar integrated with battlefield war.

The countries best prepared for this environment will not simply possess the most advanced weapons. They will have resilient infrastructure, secure software, protected supply chains, trusted institutions, educated citizens, reliable information systems, capable intelligence services, and procedures that allow human judgment to remain effective under extreme technological pressure.

Future wars may begin with code rather than gunfire. But when digital disruption cannot produce the desired political result, physical force will remain the final instrument of coercion.