Loading story…
A Lieber Institute analysis examines a hypothetical U.S. strike during a Russian attack on the Suwałki Gap, a strategically vital corridor between Poland and Lithuania covered by NATO’s collective-defense framework. In the scenario, adversary deception causes an AI-enabled Federated Front targeting system to wrongly identify a hospital as a Russian command-and-control site, killing 50 civilians.
The analysis argues that the legality of the strike and possible commander liability under the UCMJ must be judged on information reasonably available at the time, consistent with the Hostage case’s Rendulic Rule, rather than through hindsight. It warns that commanders may struggle to justify reliance on opaque AI models and recommends explainable “Glass Box” systems, legally reviewed and certified operating parameters, bounded continuous learning, continuing JAG and technical oversight, and training on feasible law-of-armed-conflict precautions.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Department of Defense Directive 3000.09 (2023), paragraph 1.2(2)(c), required autonomous and semi-autonomous weapon systems to use technologies and data sources transparent to, auditable by, and explainable by relevant personnel.
In the post-Second World War Hostage case, General Lothar Rendulic was acquitted of the charge concerning his scorched-earth withdrawal in Norway because his assessment was considered reasonably prudent based on the information available at the time.
The Hague Convention (IV) of 1907 and its annexed Regulations became foundational treaty law relevant to attack obligations, including steps to spare non-military hospitals.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ukraine is advancing its use of **AI-enabled and increasingly autonomous drone systems** as part of a broader effort to scale battlefield effects, with analysts highlighting both current capabilities and a longer-term vision for autonomous warfare. One prominent example cited is **Operation Spider’s Web**, a June 2025 drone strike on Russian airbases that has become a reference point for how software-driven targeting, coordination, and terminal guidance can expand operational reach while reducing direct human control over each engagement decision. Legal and policy experts warn that these systems create a growing **accountability gap** even though international humanitarian law and the law of armed conflict still apply. The main concerns include unclear legal application, unpredictable software behavior, responsibility spread across commanders, developers, and operators, and the difficulty of anticipating swarm behavior at deployment; experts say the degree of autonomy in a swarm’s architecture directly affects where liability can be assigned, and they call for weapons reviews, explicit human decision points, and reliable records of system behavior and input-data integrity before such systems are fielded.
Jul 24, 2026
AI-enabled drones and loitering munitions are increasingly being designed to continue attacks autonomously after losing contact with human operators, creating a widening accountability gap in lethal strikes. The reported pattern involves systems launched under human supervision that can switch to autonomous terminal engagement when communications are disrupted by jamming, spoofing, range limits, or tether failure. Examples cited include the **Shahed-136** lineage, including a reported **Shahed-136 MS** variant with cameras and an Nvidia Jetson processor, Russia’s **Geran-2**, the U.S. **LUCAS** program, and the earlier **STM Kargu-2** case in Libya referenced in UN reporting.
Aug 5, 2026
A Lawfare analysis says the push for **AI sovereignty** is intensifying a long-running dispute over whether unauthorized cyber intrusions into another state’s networks violate sovereignty under international law. The article contrasts a **pure sovereignty** position associated with France and the African Union, an **effects-based** approach reflected in the Tallinn Manual and many Western states, and an **operational-latitude** posture linked to the U.K. and, in a different form, the U.S. It argues that governments have historically preserved room for intelligence collection and offensive cyber operations by resisting a broad sovereignty rule, even as AI systems become more central to national security. The piece warns that this legal posture leaves AI assets such as training data, compute infrastructure, and model weights exposed to low-level but strategically significant intrusions including data theft and data poisoning. Drawing on examples such as the **OPM breach**, **Volt Typhoon** activity, and security cooperation under **AUKUS Pillar II**, it says current thresholds focused on physical damage, loss of functionality, or coercive interference do not clearly cover covert compromise of AI systems. Background references to France’s formal cyber-law position and a U.K. government speech on international law underscore the divide among states as customary international law appears to be moving toward stronger sovereignty protections in cyberspace.
Jul 28, 2026