Imagine waking in the pitch-black hours of a cold morning to your phone blaring an evacuation siren. You reach blindly for the screen, heart already hammering against your ribs, bracing for the usual nightmare of incoming cruise missiles or Iranian-designed drones. But this time, the glowing rectangle in your palm delivers a different horror: a radiation warning. In a country scarred by Chornobyl and held hostage by the militarization of Zaporizhzhia, those few words do not just trigger protocol. They shatter whatever frayed remnants of psychological safety you had left. That the alert was an illusion, the product of a malicious cyber intrusion into Ukraine's air defense notification system, makes it no less violent.
We spend an inordinate amount of time discussing cyberwarfare in the abstract. Pundits and venture capitalists love to talk about zero-day exploits, state-sponsored advanced persistent threats, and critical infrastructure vulnerabilities as though they were chess moves played out on pristine server racks. But digital warfare is never abstract to the person on the receiving end. When hackers compromise an emergency broadcast system to fabricate an invisible, catastrophic threat, the target is not software architecture. The target is the human nervous system. The cost is paid in the sheer, suffocating terror of families herding children into bathtubs, wondering if the air they breathe has turned to poison.
For the past several years, Ukraine’s digital transformation has been rightfully lauded as a modern marvel. In the crucible of an unprovoked invasion, developers built agile, crowdsourced tools for civilian survival, turning smartphones into decentralized radar systems and life-saving sirens. It was civic tech at its most noble. Yet, as with all things connected to the network, the very ubiquity that makes an app effective also makes it a catastrophic single point of psychological failure. When trust in that channel is poisoned, the tool ceases to be a shield and becomes another vector of terror.
This hack did not happen in a vacuum. It unfolded against the grim backdrop of renewed physical strikes on power grids, cutting heat and light to thousands of civilians in places like Kherson. This is the grotesque symphony of modern hybrid warfare: blow up the substations with metal and fire, then corrupt the glowing screens with lies and phantom fallout. One attack freezes the body; the other paralyses the mind. By turning an instrument of public safety into an instrument of panic, the perpetrators sought to erode the baseline trust civilians need to survive. If you cannot trust the alarm that warns you of death, you stop listening to alarms altogether.
In the comfortable enclaves of the Western tech sector, we have long fetishized disruption. We celebrate moving fast, breaking things, and delegating our fundamental civic needs to proprietary platforms and fragile cloud networks. But out here in the real world, where bad actors do not play by sandbox rules, breaking things means breaking people. We have constructed a world where our most vital lifelines are tethered to systems vulnerable to malicious code, and we consistently fail to reckon with the human debt incurred when those lifelines snap.
National defense can no longer be measured merely in artillery shells and air defense batteries. It must be measured in the resilience of civic infrastructure and the absolute sanctity of the information pipelines that keep ordinary people alive. A hacked air raid app is not a clever technical exploit to be analyzed at an industry conference; it is a psychological war crime masquerading as digital disruption. If tech has any moral compass left, it must reckon with the truth that behind every ping, every notification, and every hacked screen, there is a terrified human being simply trying to live through the night.
Mei Watanabe