In today's international politics, rapid technological change, especially in cyberspace, is reshaping how countries pursue power, security, and influence. Yet despite the rise of new digital tools, the core strategies of political competition still reflect age-old practices such as spying, subversion and deception. The growing reliance on cyber capabilities has created a complex environment where cooperation and conflict coexist. While digital networks improve efficiency and global connectivity, they also introduce new vulnerabilities that adversaries can exploit. This duality raises important questions about whether technology genuinely changes the nature of international security or alters how it is carried out.

The book Age of Deception: Cybersecurity as Secret Statecraft by Jon R. Lindsay provides a detailed explanation of cybersecurity by connecting it with traditional intelligence practices. Instead of presenting cyber activities as a completely new form of warfare, the author explains that they are part of a long history of deception in politics. The book is divided into seven chapters and organized into two main themes: the political logic of deception and secret statecraft in practice. Through these themes, the author tries to explain not only how cyber operations work, but also why states use them and what makes them successful or unsuccessful (p. 1-3).

The first theme, the political logic of deception, focuses on the theoretical understanding of cyber activities. In this part, the author explains that cyber operations should not be seen mainly as warfare. He clearly states that “answers to such questions vary depending on whether we interpret network intrusions as warfare or as something else.” This suggests that the book's main purpose is to change how we think about cybersecurity. Instead of labeling everything as cyber war, the author introduces the idea of “secret statecraft,” which he defines as “the use of organized deception for strategic advantage.” This definition is important as it shifts attention from open conflict to hidden actions like spying, manipulation and covert influence (p. 23-26).

The author further explains that deception has always been part of politics. He mentions that strategies of deception go back to ancient thinkers like Sun Tzu and Kautilya, showing that cyber deception is not something new but an extension of old practices. According to the book, “the information age is also the age of deception.” This statement highlights how modern technology has increased the scale of deception, allowing actors to collect more data and influence more people than before. However, the author also warns against misunderstanding this situation. He argues that there is “little evidence of catastrophic digital disruption” and instead there is “a profusion of intrusion – mostly cybercrime, espionage and disinformation.” This means that most cyber activities are not destructive wars, but rather ongoing hidden competitions (p. 28-30).

Another key argument in this theme is the connection between cooperation and deception. The author explains that cyberspace depends on trust and cooperation, but this same trust also creates chances for exploitation. He notes that “secret statecraft is a form of competition that exploits cooperation.” This idea is important because it helps explain why cyber systems remain vulnerable. When individuals and organizations rely on and trust digital systems, they also become more exposed to deceptive actions. For instance, shared software and communication networks improve efficiency, but they can also provide opportunities for intruders to operate unnoticed. As a result, achieving complete security in such an environment is extremely difficult (p. 47-52).

The book also discusses the role of institutions in shaping cyber operations. Institutions include governments, organizations, and technological systems. The author explains that “institutions both enable and constrain secret statecraft.” This means that institutions create opportunities for cyber activities, but they also limit them. For example, strong institutions can improve security and reduce risks, while weak institutions can make systems more vulnerable. This argument is important because it shows that cyber power is not only about technology, but it also depends on social and organizational structures (p. 50-60).

A further important concept within this theme is the notion of intelligence performance. The author defines it as “the operational implementation of secret statecraft.” He explains that successful cyber operations require two main conditions: vulnerable institutions and a clandestine organization. Vulnerable institutions provide access, while clandestine organizations provide the ability to use that access effectively. This framework helps explain why some cyber operations succeed while others fail. It also shows that cyber activities are complex and depend on many factors, not just technical skill (p. 60-70).

Another important idea in this theme is the role of complexity in cyberspace. The author explains that modern digital systems are deeply interconnected and increasingly complex. This creates both advantages and difficulties for cyber operations. He notes that “cyberspace expands not only the opportunities but also its liabilities.” In other words, while attackers can access a wider range of targets, they also face higher chances of being detected or failing. The complexity of these systems makes it more difficult to manage operations effectively and to maintain secrecy (p. 74-90).

The second theme of the book, secret statecraft in practice, focuses on real-world examples to explain how these ideas work. In this part, the author examines different types of cyber and intelligence operations, including espionage, sabotage, subversion and cyber power. These examples help the reader understand how theory is applied in practice (p. 95-100).

A significant example highlighted in the book is intelligence collection. The author emphasizes that the primary objective of intelligence operations is to obtain access to valuable information rather than to inflict damage. He notes that “secret access to targets is a necessary first step to advantage,” underscoring that many cyber activities are designed to gather data for future strategic use. Instances of large-scale cyber intrusions illustrate how vast amounts of information can be extracted from multiple organizations, though such actions do not always produce immediate or visible outcomes. Ultimately, the worth of intelligence lies in how effectively it is utilized (p. 97-110).

Another significant example discussed in this context is sabotage. The author explains that sabotage involves using deception to disrupt systems. However, he also shows that such operations are often limited in their impact. He writes that cyber sabotage may cause “minor, temporary disruption.” This suggests that cyber-attacks are not always as powerful as people think. Even when they are technically advanced, their effects may be controlled and short-lived. This supports the author’s main argument that cyber activities are more about influence and strategy than destruction (p. 125-140).

The book also discusses subversion, which involves influencing people’s beliefs and behavior. The author explains that cyberspace allows the spread of information and misinformation on a large scale. However, he also points out that the success of such efforts depends on social conditions. He explains that “the political demand for disinformation is often more important.” This means that people’s existing beliefs and attitudes play a major role in shaping the impact of information campaigns. Technology on its own cannot determine outcomes because the social context is equally important (p. 155-165).

In addition to these examples, the book discusses the concept of cyber power. The author explains that cyber power involves using information technology to achieve political goals. However, he emphasizes that success in this area depends on institutional factors. He notes that “contingent institutional context conditions cyber power.” This means that cyber capabilities are effective only when supported by strong institutions and proper strategies. Without these, even advanced technology may not produce the desired results (p. 180-190).

Throughout the second theme, the author consistently highlights two essential conditions for successful cyber operations: vulnerable institutions and effective clandestine organizations. He argues that when both elements are present, the chances of success increase significantly. In contrast, if either condition is weak or absent, the outcomes tend to be limited or uncertain. This perspective helps explain why cyber activities often lead to uneven and mixed results (p. 190-200).

Overall, the book provides a balanced and detailed understanding of cybersecurity. Its main strength lies in how it connects modern cyber issues with traditional intelligence practices. By doing so, the author avoids exaggeration and presents a realistic view of cyber conflict. The arguments are explained in a clear and structured way, which makes the ideas easier to follow. At the same time, the theoretical framework offers a strong foundation for understanding the subject.

The book explains that cybersecurity should be understood as part of secret statecraft rather than as a form of war. Cyber operations are mainly tools of deception that allow actors to gain information, influence others and achieve strategic goals without open conflict. Their success depends on institutions, organizations, and context, not just technology. As the author shows, cyber activities are both important and limited, and they must be understood in relation to the broader political environment. This makes the book an important contribution to the study of cybersecurity and international relations (p. 208–212).

Ali Hamza is a Research Assistant at the Center for International Strategic Studies Sindh (CISSS), Karachi, Pakistan