The international system is undergoing a profound global power shift characterized by the resurgence of great power competition and a broad diffusion of technical capabilities. This environment is intensifying security competition across all domains. Concurrently, the proliferation of artificial intelligence (AI) and other disruptive technologies has fundamentally transformed espionage and defense. The traditional landscape of counterintelligence (CI) is obsolete and requires rapid, systemic overhaul to address the increasingly amplified, technologically enabled threats posed by state and non-state actors.

Specifically, the shift to great power technological competition has expanded CI’s mandate from protecting military secrets to securing critical infrastructure, intellectual property (IP), and the integrity of the information domain. The dual-use nature of AI functions as both in support of automated espionage and a critical mechanism for preemptively anticipating and mitigating threats. The failure of the United States to strategically integrate AI into CI methodologies will result in the systemic erosion of national technological and economic advantage.

The Expanded Mandate of Modern Counterintelligence

CI functions to protect a nation’s secrets, personnel, and systems from foreign intelligence entities (FIEs). Yet today, CI must also confront a threat matrix dramatically enlarged in scope, sophistication, and velocity. The current geopolitical climate has necessitated a significant expansion of the traditional CI mission. In the context of great power competition, the most significant threat has shifted from the theft of classified military and diplomatic secrets to the large-scale acquisition of IP, trade secrets, and technological data, as highlighted in the recently released Annual Threat Assessment.

FIEs are aggressively targeting the private sector, academia, and research institutions, the very engines of national innovation through sophisticated economic espionage. Their strategic goal is not merely to obtain information, but to erode a nation’s competitive advantage and accelerate the adversary’s technological timetable, thereby shifting the global balance of power. CI must establish robust protective mechanisms that extend deep into the non-governmental technology and research ecosystem.

The dissolution of a clear distinction between peacetime competition and active conflict has resulted in a continuous state of confrontation known as the ‘gray zone’. This strategic domain is characterized by persistent, non-lethal, yet tactically damaging activities designed to achieve political objectives without triggering traditional military responses. CI must now defend against a spectrum of subtle subversion, including large-scale cyber operations, persistent penetration of networks for reconnaissance and preparatory measures, and covert attempts to manipulate political discourse and decision-making.

The globalization of commerce and technology has created intricate, interconnected supply chains. These networks present significant CI risks, as adversaries seek to compromise the integrity, trustworthiness, and authenticity of products and services. By inserting “backdoors” or creating exploitable “choke points” at various nodes, adversaries establish capabilities for future exploitation. CI efforts are essential to conduct comprehensive due diligence and risk mitigation, securing these complex networks against both hardware and software compromise.

Artificial Intelligence: The Dual-Use Catalyst

AI and emerging technologies are not merely targets of modern espionage; they are simultaneously the most potent tools and the most necessary defenses in the counterintelligence battleground. This dual-use dynamic creates a challenging “AI vs. AI” scenario that demands immediate, radical adaptation. Adversaries are leveraging AI to dramatically enhance the speed, scale, and sophistication of their intelligence operations:

Automated Espionage and Big Data Analysis: AI-powered tools can automate and scale the processing, translation, and analysis of vast, heterogeneous datasets (Big Data), vastly increasing the volume and velocity of intelligence collection from both open-source intelligence and classified sources.

Adaptive Cyberattacks: Machine learning (ML) algorithms enable the development of more elusive and adaptive cyber threats. This includes automated exploitation of vulnerabilities, dynamic creation of polymorphic malware, and rapid penetration of defenses, operating at speeds that effectively outpace traditional, human-centric cybersecurity responses.

Generative AI for Influence: Generative AI can create highly realistic deepfakes (synthetic videos and audio) and synthetic narratives at scale. This facilitates sophisticated disinformation and propaganda campaigns to manipulate public opinion and conduct advanced social engineering, severely compromising the ability of institutions to discern truth from falsehood.

Three interconnected factors fundamentally redefine the scope of CI responsibility: target expansion, the blurring of conflict lines, and supply chain vulnerabilities. To effectively counter these technologically enabled threats, CI must aggressively embrace and integrate these same technologies, transforming them into proactive defensive tools:

Threat Anticipation and Predictive Analysis: AI can process and analyze massive amounts of threat data, identifying subtle, non-obvious patterns, trends, and anomalies. This capability allows CI to transition from merely reacting to threats toward predictive modeling, allowing one to forecast adversary actions before they materialize and enabling preemptive defense.

Enhanced Surveillance and Anomaly Detection: ML algorithms are crucial for the detection of subtle anomalies in network traffic, user behavior, and physical security systems that a human operator would miss. AI-driven monitoring provides real-time, large-scale pattern-of-life analysis that significantly exceeds human cognitive capacity.

Counter-Disinformation and Integrity Checks: CI requires AI-driven tools to effectively identify, analyze, and flag AI-generated propaganda, deepfakes, and synthetic media. Systems designed for content provenance and authenticity verification are essential to safeguard the integrity of the information domain and maintain public trust.

Insider Threat Mitigation: Defensively, AI can monitor internal networks to flag anomalous user behaviors such as unusual data access attempts, large data transfers, or deviations in an employee’s digital pattern-of-life. As such they assist in identifying potential insider threats before significant compromise occurs.

The Strategic Imperative

The shift of global powers and the proliferation of disruptive technologies have thrust counterintelligence into an even more important aspect of national security. The stakes of this technological arms race transcend traditional security concerns, encompassing the integrity of a nation’s innovative ecosystem, its economic competitiveness, and the resilience of its democratic institutions.

CI must rapidly evolve its strategies to prioritize the defense of economic and technological assets, and it must integrate AI as a foundational defensive technology to achieve predictive, scalable threat mitigation. Failure to aggressively master and deploy AI defenses against technologically augmented adversaries risks the systemic erosion of national advantage in a world where technological leadership is increasingly synonymous with global power. The future success of great power competition hinges directly on the adaptive capacity and technological sophistication of CI’s function.

Joshua Thibert is a Senior Analyst at the National Institute for Deterrence Studies (NIDS) with over 30 years of comprehensive expertise. His background encompasses roles as a former counterintelligence special agent within the Department of Defense and as a practitioner in compliance, security, and insider risk management in the private sector. His extensive academic and practitioner experience spans strategic intelligence, multiple domains within defense and strategic studies, and critical infrastructure protection. The views of the author are his own.

Redefining Espionage: The Unseen War for Technological Dominance was originally published on Global Security Review.

AI has improved intelligence operations in developing nations, but it has also created a new intelligence gap due to disjointed technological implementation, political exploitation of surveillance, reliance on foreign suppliers, and insufficient integration between HUMINT and AI-driven systems. Pakistan and India have large human resources and developing technological ecosystems, but institutional fragmentation and political agendas prevent the development of integrated, modern intelligence frameworks.

The problems that South Asian intelligence services are having are part of a larger global transformation. AI is now a segment of intelligence operation in the US, China, Israel, and some European countries. This includes automated translation, pattern-of-life analysis, algorithmic triage of intercepted data, commercial satellite imagery analytics, and cyber-enabled anomaly detection. China’s surveillance state uses AI-powered facial recognition, behavior prediction, and nationwide data fusion to show what a fully integrated intelligence model looks like. The U.S. is pushing for automated signals intelligence (SIGINT) processing and predictive analysis in all its intelligence agencies in the Office of the Director of National Intelligence (ODNI). As shown in studies of its military AI systems, Israel uses AI in real-time targeting and ISR fusion.

Developing countries are just as vulnerable to cyber-attacks, terrorism, and false information, but they do not have the institutional frameworks that let AI grow. This global gap is what makes the changes in intelligence in Pakistan and India so important for strategy. Pakistan and India have both spent resources on AI-enabled surveillance systems like ID databases, CCTV networks, predictive policing tools, interception systems, and cyber technologies that come from other countries. The NADRA database and Safe City projects in Pakistan give a lot of biometric and real-time data. India has made the Central Monitoring System (CMS) and the National Intelligence Grid (NATGRID) to connect databases between state agencies. The ministry, military, police, and intelligence systems are separate. Legacy bureaucracies promote compartmentalization over integration. AI needs centralized databases, clean data, agency cooperation, and agreed analysis criteria. These requirements are missing; hence, AI systems exhibit limited and inconsistent intelligence. Agencies are collecting more data than ever but lack the framework to analyze it.

Pakistan and India still value HUMINT for intelligence. It is crucial for counterterrorism, political spying, and regional operations. HUMINT alone can’t compete with hybrid enemies who use AI-driven processing. Strategically, China’s integrated military and civilian AI ecosystem is advantageous. Developing states are stuck between two sources of intelligence: First is a legacy HUMINT system with deep networks and second is an AI ecosystem that is fragmented and not fully developed, so it cannot support strategic analysis. In cross-border threat assessments, cyber invasions, and emerging non-traditional security issues like information warfare, this mismatch causes delays, blind spots, and analytical distortions.

In both Pakistan and India, AI-enabled surveillance has been used more for political purposes than for improving strategic intelligence. Amnesty International reported that India’s use of Pegasus spyware targeted journalists, activists, and political opponents. Pakistan has been criticized for using automated social media monitoring and political profiling, which often focuses on threats from within the country rather than threats from other countries. When surveillance tools are used to control political competition within a party, two things happen. First, institutional resources prioritize domestic control over strategic analysis. Second, technology investments strengthen policing instead of updating intelligence. This challenges national security by making it harder for the intelligence system to predict cyberattacks, regional crises, and threats from outside the country.

South Asia has a lot of foreign AI and cyber infrastructure. Pakistan employs Chinese surveillance equipment (Hikvision, Huawei), while India uses Israeli, US, and European and American forensics platforms. This increases structural risks, including data exfiltration and espionage due to entrenched vulnerabilities, strategic reliance on foreign updates, and weakened sovereignty over vital intelligence activities.

Two traditional rivals, nuclear-weapon states, are weakened by this reliance. AI-powered surveillance systems increase digital access points for assault. Big national data repositories attract attackers. Pakistan has had multiple government system hacks, and India has had large breaches that compromised critical infrastructure and government information.  Failures in the past were largely caused by human error, but in the AI era, bias in algorithms, data manipulation, hostile and automated cyberattacks, and misclassification can lead to erroneous operational decisions. These dangers make the strategy unstable.

Increasing intelligence gaps between Pakistan and India jeopardize national and regional security. More likely to misjudge opponents: In fast-moving crises, agencies may miss signals, misjudge threats, or misread trends without AI–HUMINT fusion. Cross-border escalation risks rise; poor intelligence integration in nuclearized environments may aggravate misperceptions during crises like the 2019 Pulwama–Balakot incident or the May 2025 standoff. Cyber attacks expose national secrets. Easy-to-get digital network intelligence can have fatal repercussions. China-asymmetric strategic competition: China is decades ahead in intelligence upgrading, and Pakistan and India may fall further. Domestic AI reduces institutional capacity: political survival trumps strategic intelligence.

In summary, countries that do not update their intelligence risk being caught off guard, making mistakes, and becoming more vulnerable. The myths of shadows, secrecy, and huge people networks that fueled emerging country intelligence organizations are gone. AI has highlighted bureaucratic opacity’s long-hidden structural flaws: dysfunctional systems, politicized surveillance, reliance on foreign technology, and a lack of HUMINT-AI integration. Thus, Pakistan and India’s new intelligence divide is not about data or resources. It is about institutions’ failure to transition from analogue intelligence to AI-connected ecosystems. State and non-state adversaries that accelerate this transformation will benefit.

In nuclearized, crisis-prone South Asia, small misunderstandings could lead to massive wars. Pakistan and India need more than AI tools to stay competitive strategically. They need data architectures that work together, technical specialists, protocols to prevent politicians from abusing their authority, and strategic AI–HUMINT fusion.

Dr. Tahir Mahmood Azad is currently a research scholar at the Department of Politics & International Relations, the University of Reading, UK.  Views expressed in this article are the author’s own. 

The Intelligence Illusion: How AI is Exposing Strategic Vulnerabilities in the Developing World was originally published on Global Security Review.

This was not an isolated incident. Civilian-grade drones and other dual-use technologies are increasingly being used to survey or target public infrastructure. From energy grids to airports, the connective tissue of modern life is exposed to risks once confined to traditional warzones. These developments are reshaping global security policies and blurring the boundary between civilian and military domains.

Civilian Tech, Strategic Impact

Cheap unmanned aircraft systems (UAS) are now accessible worldwide. While drones were initially developed for military use, the most commonly deployed platforms today, such as DJI’s Mavic series, were originally built for civilian applications like aerial photography and videography. Their affordability, portability, and high-spec cameras made them commercially popular, but those same features have made them easy to repurpose for military contexts.

In particular, first-person view (FPV) drones, designed for immersive recreational flying, were rapidly adapted for frontline use in conflict. These drones are now routinely deployed with improvised explosives or used for precision reconnaissance. In Ukraine, both sides repurposed off-the-shelf drones in vast numbers; nearly two million were produced in 2024 alone. Many of these are equipped with AI-enabled navigation and targeting, underscoring how quickly civilian tech can be weaponised.

Non-state actors are following suit. Armed groups are using FPV drones for low-cost, high impact strikes on infrastructure, blurring the lines between military and civilian threats. This second drone age shows that national security vulnerabilities now stem as much from consumer technology as from conventional arsenals.

The broader implication is clear: private-sector innovations, often created without any defense intent, are shaping the battlefield. These companies bring novel use cases, technical advantages, or agile design processes that legacy defense contractors may overlook. Civilian tech is not just a risk; it is a potential strategic asset. Tapping into this ecosystem, especially among start-ups and experts, could redefine how the country protects critical infrastructure in an era of hybrid conflict.

Infrastructure in the Crosshairs

Modern infrastructure is a key target in modern conflicts or hybrid attacks, just like military bases traditionally were. In 2022, after the sabotage of the Nord Stream pipelines, over 70 drone sightings were reported near Norwegian offshore oil platforms. Oslo feared Russian-linked hybrid operations targeting Europe’s energy supply and deployed naval assets and invited NATO allies to assist in patrols.

Meanwhile, Ukraine’s energy grid suffered repeated drone and missile attacks, with waves of low-cost Shahed drones used to disable power plants. By spring 2024, roughly half of Ukraine’s electricity capacity was destroyed, forcing nationwide blackouts.

Outside conflict zones, attacks on infrastructure are also rising. In Sudan, a drone strike on a power station caused regional outages, and other drone attacks on water purification stations left the country on the brink of a significant Cholera outbreak. In the US, federal officials stopped an attack on a power grid by a man using an explosive-carrying drone.

Transportation hubs are vulnerable, too. In January 2025, drone activity shut down Riga Airport, disrupting dozens of flights.

 Gaps in Governance

 Despite growing risks, legal and operational frameworks remain fragmented. Drones and AI-driven surveillance systems often fall outside traditional arms control regimes. As a recent executive order put it, “Criminals, terrorists, and hostile foreign actors have intensified their weaponization of drone technologies, creating new and serious threats to our homeland.”

Jurisdictional confusion is common. In many countries, local authorities lack legal authority to respond to rogue drones above critical sites. Aviation safety rules and privacy laws create hesitation, giving bad actors a head start.

Even when threat awareness exists, coordination is inconsistent. The Cybersecurity and Infrastructure Security Agency warns that drones are used for surveillance and sabotage, yet they lack the comprehensive tools to oversee private-sector resilience or cross-border response.

 A Global Security Challenge

 Drone and AI threats are not confined by borders. In 2023, the European Commission launched a new counter-drone strategy, urging member states to harden infrastructure and coordinate airspace protections. NATO has added counter-UAS exercises to its joint drills, while AUKUS partners are beginning to share emerging drone and AI tactics.

But international law is lagging. There is still no global treaty governing the use of armed drones or autonomous surveillance. Export control regimes struggle to manage proliferation of AI-enabling components. At the UN, efforts to establish binding norms on autonomous weapons are stalled. Ad hoc coordination is, however, slowly improving.

When Norway’s oil platforms were threatened, NATO allies were called in within days. After drone sightings near Dutch and Belgian ports, neighboring governments exchanged countermeasure plans. These models suggest a path forward: rapid and collective responses based on shared tools, shared doctrine, and shared threat intelligence.

The future of civilian dual-use technologies will not be defined by innovators alone. Whether drones or AI software, these tools are already reshaping how adversaries threaten public safety and economic continuity. What is at stake is not just national security, but the resilience of infrastructure that supports daily life.

The Crucial Role of Start-ups in National Defense

 Civilian-origin technologies are now driving the next wave of defense capability. From FPV drones to AI surveillance tools, some of the most disruptive military applications today are emerging not from traditional defense primes but from commercial markets, often developed by start-ups with no military background.

A coordinated international framework is urgently needed, one that does not just support innovation and infrastructure protection but actively integrates civilian tech into defense planning. This means lowering the barriers for experts and start-ups to meaningfully contribute alongside legacy contractors. The United Kingdom’s recent Defence Review hinted at this shift, recognising that smaller firms are vital to national resilience, particularly when civilian infrastructure is under threat.

What is truly needed is a NATO-wide or broader allied framework that enables cross-border collaboration, streamlines regulation, and opens up procurement pathways.

Today, many start-ups working at the intersection of security and technology face steep hurdles: limited access to capital, opaque compliance regimes, and procurement processes designed around, and for, large incumbents. Yet by creating space for their innovation, we can modernize collective defense from the ground up, using the very same civilian tools that adversaries are already turning into weapons.

A coordinated international framework is urgently needed, one that not only supports innovation and infrastructure protection but also lowers barriers to experts and start-ups to contribute more meaningfully alongside traditional defense primes. The UK’s recent Defence Review hinted at this shift, recognizing the value smaller firms bring to national resilience. It is time to take similar action at home.

Harry Geisler is the CEO of YAVA.

How Civilian Dual-Use Technologies Are Reshaping Global Security Policies was originally published on Global Security Review.

5GW includes information dominance and manipulation, social engineering, economic coercion, cyber sabotage, and hybrid influence operations. It thrives on ambiguity, exploiting vulnerabilities without traditional combat. In 5GW, the lines between war and peace are blurred. No declarations, no clear enemies, just a relentless assault on stability. The goal is not to conquer land or destroy armies, but to cripple a nation’s spirit, economy, and infrastructure from within.

One of the most potent asymmetric tools of 5GW is economic manipulation. Palau, a serene archipelago of over 500 islands, were untouched by war until 2017. Palau dared to reject Beijing’s “One China Policy.” This move sent shockwaves through its fragile economy in the form of economic strangulation. In a masterstroke of economic coercion, China’s state-backed tour operators erased Palau from the Web.

Travel agencies stopped selling trips. Online searches yielded no results. Palau’s tourism industry, which accounted for 45 percent of gross domestic product (GDP), collapsed. Hotels emptied, airlines shut down, and the once-thriving economy suffocated.

This was not an anomaly, but a pattern. In 2016, South Korea agreed to facilitate the American THAAD missile defense system. China retaliated not with weapons but with economic muscle. Mysterious “fire and safety” violations suddenly appeared in South Korean businesses across China. A nine-month ban on Chinese tourism cost Seoul $6.5 billion. Retail giants like Lotte crumbled, thousands lost jobs, and yet, no war was declared.

The more interconnected the world economy becomes, the more vulnerable nations are to economic blackmail. Even Venezuela, despite its fiery anti-American rhetoric, was bound to the US economy. In 2018, despite Washington branding Nicolás Maduro a dictator and Caracas calling the US a “white supremacist regime,” the two nations still had $24 billion in trade, a quarter of Venezuela’s GDP.

Yet, when Washington imposed sweeping financial sanctions, Venezuela’s economy shrunk by 35 percent in a single year. After all, the United States does not just impose sanctions; it controls the very financial system that runs the world. The US dollar is the bloodline of global trade, and those who defy it find themselves cut off from international markets, unable to access capital or even conduct basic transactions. However, economic warfare breeds resistance.

Russia and China saw the writing on the wall. Between 2017 and 2020, Moscow slashed its holdings of US Treasury securities from $105 billion to just $3.8 billion and shifted towards China’s Cross-Border Interbank Payment System (CIPS), sidestepping American financial hegemony.

The true commanding heights of global dominance lie at the intersection of technology, finance, and unchecked ambition. China is not just selling 5G networks, it is embedding itself into the nervous system of global communication. On the other hand, the US does not just dominate finance, it controls the SWIFT banking system, ensuring economic warfare is just a sanction away. Similarly, corporations do not just innovate, they monopolize, influence, and quietly dictate policy behind closed doors.

“Surge forward, killing as you go, to blaze us a trail of blood.” A battle cry? Indeed. Not from a general on the battlefield, but from Ren Zhengfei, the founder of Huawei, a company waging a war not just against competitors but against entire nations. Britain’s telecom networks are suspected to have Chinese backdoors.

Information is now what oil was in the 1970s, a critical commodity to be controlled. Today, data is the new crude, and the battle to monopolize its flow has already begun. Quantum computing, AI, and machine learning are the new oil rigs, and the nations that dominate these technologies will dictate the future. Unlike oil, information is easily stolen, manipulated, or even weaponized in ways no physical resource ever could.

The first lethal autonomous drone strike in Libya, recorded in March 2020, was a grim reminder of what is to come. A suicide drone, powered by AI, needed no human command—just a target. Fire and forget was the name of the game. Imagine the next phase: terrorist organizations deploying AI-powered swarms, able to strike with precision, invulnerability, and zero risk to human operatives. They would not negotiate, would not retreat, and would prove hard to stop.  

In a world where biological warfare is outlawed, the selective control of food, aid, and healthcare has replaced mass destruction with slow, calculated suffocation. Nations can now deny access to the very essentials of life to break their adversaries in a siege without walls and a war without battlefields. Over 40 percent of the world’s population faces water scarcity, and by 2030, drought could displace 700 million people. The Turkish-backed militias that had control over the Alouk water station in Syria in 2020 was a stark reminder—when resources are weaponized, suffering becomes policy.

Interestingly, the battle of perception is gaining momentum more than ever. In an era of clickbait headlines and disinformation campaigns, lies travel faster than truth. The Massachusetts Institute of Technology found that false news spreads 70 percent faster than real news. From the Soviet KGB planting the rumor in the 1980s that the US government created AIDS to modern deepfake propaganda, deception is the new artillery.

Even culture is not immune. Hollywood exported American ideals, Bollywood spread Indian influence, and K-pop turned South Korea into a global powerhouse. For instance, the Cold War was not just won by missiles, it was won when a West German band sang “Wind of Change,” which then became the anthem of the Berlin Wall’s collapse.

If hunger, water, and financial systems hare already weaponized, the next battlefield is clear—space and the seabed. Subsea communication cables are responsible for carrying 97 percent of global data traffic and are the arteries of the modern economy. They enable over $10 trillion in financial transactions every single day. Yet, these vital lifelines remain shockingly unprotected and are vulnerable to sabotage, espionage, and strategic disruption. A targeted attack on just a handful of these cables could cripple stock markets, paralyze banking systems, and sever military command structures—all without a single warship being deployed.

Meanwhile, the race for space dominance is accelerating. From $63.66 billion in 2024 to an estimated $74.4 billion by 2028, the global military satellite market is growing, fueled by the realization that power no longer lies in boots on the ground, but in eyes in the sky. Satellites provide precision-strike capabilities, secure communication, and real-time battlefield intelligence. The Pentagon warns that the US is already vulnerable, with China and Russia developing anti-satellite (ASAT) weapons.

In this realm, one can say that modern states wage wars without battlefields, where the goal is not to destroy but to subdue—crippling economies, infiltrating cyber networks, and manipulating narratives without a single shot fired. What is never openly begun is rarely officially ended. In 5th-generation warfare, silence is a weapon, perception is the battlefield, and survival means accepting that war never truly ends.

Syeda Fizzah Shuja is a Research Associate at Pakistan Navy War College and an Mphil scholar in Peace and Counter Terrorism. Her work focuses on hybrid warfare and maritime terrorism. She can be contacted at fizzasyed2k@gmail.com.

The 5GW Playbook: Silent Wars and Invisible Battlefields was originally published on Global Security Review.

Read More

Chinese ‘Police Station Spy Network in the U.S. was originally published on Global Security Review.

Read More

The Cubans are more disciplined and more effective pound-for-pound than the KGB ever was was originally published on Global Security Review.

Read More

Ties to Russian Military and Russian Intelligence Agencies was originally published on Global Security Review.