Why Governments Can't Win the Next Cyber War Without Big Tech

Jan de Vries · 2026-08-07

The next major cyber conflict won't be fought with tanks or fighter jets. It will happen in milliseconds, across thousands of servers, and it will target everything from power grids to hospital systems. And here's the uncomfortable truth: governments can't handle it alone. Steve Durbin, a leading voice in cybersecurity strategy, has been making this point with increasing urgency. His argument is simple yet profound: as artificial intelligence supercharges the speed and sophistication of cyberattacks, the public sector desperately needs the firepower that only private companies can provide. ### The AI Threat Multiplier Let's talk about what's actually changed. For years, cyberattacks were largely manual efforts. Hackers needed time, patience, and serious technical skill to breach a network. AI flipped that script entirely. Now, automated tools can scan for vulnerabilities at machine speed, craft convincing phishing emails in seconds, and adapt their tactics in real time. What used to take a team of experts weeks now takes a single operator with a decent AI model just a few hours. This isn't a hypothetical scenario. We're already seeing AI-driven attacks on critical infrastructure, and the trend is only accelerating. The bad guys are moving fast, and the good guys are struggling to keep up. ### Why Governments Fall Short The challenge for governments isn't a lack of talent or intelligence. It's a matter of scale, speed, and flexibility. Government agencies are often bogged down by bureaucracy, procurement processes, and security clearances that take months to finalize. Private companies, on the other hand, move at the speed of the market. They can deploy new security tools overnight, hire top talent without lengthy approval processes, and test innovative solutions in real-world environments. Consider this: the largest cybersecurity firms have threat intelligence feeds that update every few seconds with data from millions of endpoints worldwide. No government agency has that kind of visibility on its own. ### The Partnership Playbook So what would a stronger public-private partnership actually look like? It's not about handing over classified information or letting corporations run national defense. It's about creating structured collaboration. - **Shared threat intelligence:** Private firms can provide real-time data on emerging attack patterns while governments offer context on state-sponsored actors. - **Rapid response teams:** Joint teams that can be deployed within hours of a major breach, combining government authority with private-sector technical expertise. - **Joint training exercises:** Simulated attacks that test both sectors' readiness and reveal gaps before a real crisis hits. - **Incentivized innovation:** Government funding or tax breaks for companies developing security tools specifically for critical infrastructure protection. This isn't just a nice-to-have. It's becoming an operational necessity. ### The Cost of Inaction Every day that passes without stronger collaboration is a day that attackers gain an advantage. The financial impact of a single major cyber incident can run into the billions of dollars, not to mention the potential loss of life if hospitals or transportation systems are compromised. Durbin's message is clear: we can't afford to treat cybersecurity as a purely governmental concern or a purely private-sector one. The threats are too complex, the stakes too high, and the technology too fast-moving for either side to go it alone. The next cyber war won't be announced. It will simply begin, often without warning. The question isn't whether it's coming, but whether we'll be ready. And being ready means building bridges between the public and private sectors before the first shots are fired. The time for hand-wringing is over. The time for partnership is now.