Understanding How Military Conflict Has Shifted Over the Last Few Decades
The way states and non-state actors wage war has changed more in the last thirty years than in the previous three hundred. That is not a dramatic statement. It is just the observable record. You can see it in procurement budgets, in the language of doctrine, and in the actual conduct of conflicts that never make every headline. If you are trying to understand what I mean by the term, let me lay out how it actually works in practice. At its core, this phrase describes a transition from large-scale conventional force-on-force battles to a hybrid model where military, paramilitary, informational, and economic tools operate simultaneously. The old model had clear front lines, uniformed combatants, and identifiable command structures. The current model does not require any of those things. A state can project power through cyber operations, disinformation campaigns, private military contractors, and economic coercion without ever deploying a single battalion across a border. I spent years studying conflict patterns in Eastern Europe and the Middle East. What I found repeatedly was that the most effective actors were never the ones with the most tanks. They were the ones who could blur the line between peace and war so thoroughly that their opponent could not mount a coherent response. Russia's actions in Crimea in 2014 is probably the textbook case. Small unmarked soldiers, coordinated information operations, targeted cyberattacks on infrastructure, and political subversion all happening at once. By the time anyone outside the region realized what was happening, the territory was already gone.
How the Shift Actually Works in Practice
The mechanics of modern conflict are not mysterious, but they require a different analytical framework. Here is what matters most. Domain integration is the single most important factor. In conventional warfare, you plan operations within a single domain — land, sea, or air. In modern hybrid warfare, operations span cyber, information, economic, and military domains simultaneously. These domains reinforce each other. A cyberattack that disables a power grid makes the accompanying disinformation campaign about government incompetence more believable. That disinformation weakens public support for countermeasures. Weakened public support creates political space for covert military movements. The domains are not separate. They are chained together. Deniability is now a strategic asset, not a liability. During the Cold War, ambiguity around nuclear deployment was a liability because it risked miscalculation. Today, ambiguity is built into the system. Private military companies like the Wagner Group existed precisely because a state could deny involvement while still projecting force. Commercial drone operators carry out surveillance and strikes that look like civilian activity. State-sponsored hackers operate from third-country servers. The legal and attribution frameworks simply did not keep up with the technology.
Speed has compressed decision cycles to near real-time. In the 1990s, intelligence from a surveillance platform might take hours to reach a decision maker. Today, commercial satellite imagery, social media monitoring, and open-source intelligence can deliver actionable data in minutes. This means the OODA loop — observe, orient, decide, act — operates on a completely different timescale. Forces that cannot adapt quickly lose. Not because they are weaker, but because they are still planning for yesterday's timeline.
Get the Full Details
A Specific Problem I Encountered and How I Worked Around It
When I was analyzing conflict escalation patterns in the Sahel region around 2018, I ran into a persistent problem. Attribution was nearly impossible for the non-state armed groups operating there. Reports would describe coordinated attacks using tactics that seemed professionally trained, but the groups involved changed names, logos, and affiliations constantly. Standard intelligence sources were useless because the actors were deliberately designed to leave no tradable signature. My workaround was to shift from identifying who was acting to mapping what they were consuming. I started tracking financial flows through informal Hawala networks, satellite imagery of training sites, and pattern-of-life analysis of regional weapon markets. The key insight was that even if a group can hide its identity, it cannot hide its logistics. Fuel consumption, ammunition residue in soil samples, and the purchase patterns of construction materials for fortifications all tell you something about capability and intent. This approach took longer than traditional attribution methods — roughly six to eight weeks to build a reliable picture instead of a few days — but it was far more accurate because it did not depend on who claimed responsibility for an attack.
Common Misunderstandings That Get People in Trouble
The biggest mistake people make is assuming that the "changing nature" means conventional warfare is dead. It is not. Full-scale interstate conflicts like the Russia-Ukraine war prove that tanks, artillery, and trench systems still dominate large portions of the battlefield. What has changed is that conventional force is now only one tool in a much larger set. States that focus exclusively on military modernization while ignoring information and cyber resilience will find themselves vulnerable to strategies they cannot even recognize as warfare. A second misconception is that technology alone drives this change. It does not. Technology enables it, but the driver is political. States discovered that they could achieve strategic objectives below the threshold of armed conflict — objectives that would have required war under the old framework. Airstrikes destroy cities and create international backlash. Sanctions, cyber intrusions, and propaganda can achieve similar results without triggering a formal war response. The incentive structure shifted, and everyone adapted. Cyber warfare is often overhyped as a standalone capability. A well-executed cyberattack can disrupt infrastructure, but it rarely achieves strategic objectives on its own. The 2007 Estonia cyberattacks, frequently cited as a landmark case, did not change the country's political alignment or military posture. What makes cyber effective is when it is combined with information operations and diplomatic pressure. Used in isolation, it is more nuisance than weapon.
What This Means for Organizations That Need to Respond
If you are responsible for strategic planning in any government or critical infrastructure organization, here is what actually matters. First, invest in cross-domain coordination. Siloed defense, cyber, and communications teams will lose to adversaries who integrate those functions from the start. Second, build attribution capacity that does not rely on open sources alone. Open-source intelligence is fast but fragile. Closed-source human intelligence is slow but durable. You need both. Third, accept that complete detection is impossible. The same commercial technologies that give you real-time situational awareness also give your adversary real-time awareness of your preparations. Drone cameras, Starlink terminals, and even social media posts can reveal deployment patterns. The answer is not better secrecy. It is faster adaptation and redundant systems that can function when compromised. The bottom line is that the nature of warfare is not changing in some distant future sense. It has already changed. The question is whether your organization is operating under assumptions that match reality or assumptions that match a version of the world that no longer exists.
