17 June 2026

A First Step to Unpacking Cyber, Deception, and Intelligence Contests

Lawfare | Jason Healey

Cyber operations primarily serve intelligence functions, driven by a "logic of deception" termed "secret statecraft," according to Jon Lindsay’s book, "Age of Deception." The book's first section, which the author finds convincing, explores this concept through case studies like Bletchley Park, the Stuxnet program, Russia's 2016 election interference, and Chinese cyber power.

Lindsay effectively demonstrates how Stuxnet offered a "third option" to disrupt Iranian nuclear enrichment, positioned between war and inaction. However, the article critiques Lindsay's overreach in the second section, where he claims all cybersecurity should be viewed through deception, arguing he overlooks crucial factors like vulnerability and the pervasive offense bias. The author contends Lindsay's limited case studies, including one pre-internet and others not purely cyberwarfare, fail to adequately support his broad assertions. The review highlights Lindsay's omission of extensive literature and data on fraud, cybercrime, and ransomware, which demonstrate the significant role of quantity-driven attacks and the rapid evolution of threats, such as AI-driven data exfiltration within 72 minutes. This oversight leads Lindsay to both underanalyze deception's rich role and disproportionately emphasize its importance in cybersecurity.

No comments: