Critics argue that the current approach treats symptoms rather than causes. In interviews with more than two dozen practitioners, a recurring theme emerged: coordination between agencies remains weak, and information is still shared on a case-by-case basis rather than systematically.

Technology is both part of the problem and part of the solution. The same digital tools that enable faster coordination also create new vulnerabilities, from data leaks to targeted disinformation campaigns that exploit existing social divisions.

Indicators

  • Increased reporting from multiple independent sources over the past 48 hours.
  • Official advisories issued by at least one national authority.
  • Observed changes in adversary or environmental behaviour consistent with escalation.