When the Guns Fall Silent, The Drones Won’t

The Next Threat NATO Is Not Ready For

For three years, a generation of young Ukrainians and Russians has learned a single trade with a precision no military academy could teach in peacetime. They have learned to build, fly, and fight with unmanned aircraft. They have learned to defeat electronic jamming with fibre optic cable. They have learned to swarm, to spoof, to hunt, and to kill from a screen and a controller. This is not a skill that disappears when a ceasefire is signed. It travels. History says so, and the record of the last forty years should worry anyone responsible for the safety of a stadium, a refinery, an airport, or a head of state.

Ukraine has already announced the shape of what comes next. Its defense ministry confirmed in June 2026 that a phased demobilization will begin by the end of the year, prioritizing the troops who have served longest and fought hardest. These are precisely the soldiers who have spent years mastering first person view drones, fibre optic strike systems, and swarm tactics against one of the most electronically contested battlespaces in modern history. When that demobilization accelerates, tens of thousands of people with an elite, transferable, commercially replicable skill set will re-enter civilian life in an economy that has little capacity to absorb them.

A Lesson the World Has Already Paid For

Analysts at the Modern War Institute at West Point have already named the phenomenon. They describe a postwar market for force built not around riflemen but around drone pilots and coders, individuals whose battlefield value lies in a cognitive skill rather than in heavy equipment they can carry across a border. Russia is already showing the early symptoms. Veterans returning from the front have been linked to a rise in violent incidents involving civilians, a pattern consistent with what happened after the Soviet Union withdrew from Afghanistan in 1989, when veterans came home to widespread addiction, crime, and a state with no plan for them.

The world has been here before, and the lesson was expensive. When the Soviet-Afghan war ended, a relatively small cohort of Arab volunteers, no more than a few thousand by most credible estimates, dispersed from that conflict zone and became the seed of a transnational jihadist infrastructure. They carried with them networks, training, and an ideology built on the idea that irregular combat against a superpower could succeed. Within a decade those networks metastasized into the movements that produced al Qaeda and, later, the foreign fighter pipelines that fed the wars in Bosnia, Iraq, and Syria. The scale of the Ukraine war dwarfs the Soviet-Afghan conflict by orders of magnitude, and the technology those fighters are trained on is exponentially more exportable than a rifle and a knowledge of mountain terrain. A drone operator does not need a training camp. He needs a laptop, a controller, a supply of airframes bought commercially, and a buyer.

That buyer already exists, and the model is already operating. Human Rights Watch has documented that armed drones killed more than 1,200 people in over 140 strikes in Haiti between March 2025 and January 2026, carried out by government-aligned forces working alongside private contractors. It is the same template the Wagner Group used to build a deniable expeditionary force of combat veterans and export it from Africa to the Middle East, except this time the commodity moving across borders is not a rifleman for hire but a pilot who can put a warhead through a window from kilometres away. NATO and European leaders who are focused on securing the peace in Ukraine are, in my judgment, thinking about the wrong end of this problem. Ending the war does not end the threat. It disperses it.

The Gulf Just Received a Preview

While Europe debates reconstruction and reintegration, the Gulf has just been handed a live demonstration of what an under secured airspace looks like against a determined adversary with drones and missiles. On July 13 and 14, 2026, the Houthi movement in Yemen launched ballistic missiles and drones at Saudi Arabia’s Abha International Airport and two Saudi air bases, an escalation that broke nearly four years of informal de-escalation following the 2022 United Nations brokered truce. Saudi-led forces struck back at Saada province, the stronghold of Houthi leader Abdul-Malik al-Houthi. No major casualties were reported on the Saudi side, largely because Saudi air defenses intercepted the incoming missiles and drones, but the episode should end any complacency in Riyadh, Abu Dhabi, or Doha.

This is not the first time. Houthi drones have previously reached an Aramco refinery at Ras Tanura, an Aramco fuel depot near Jeddah, and Abu Dhabi itself. The kingdom with arguably the deepest pockets for air defense in the region is still absorbing hits from a non-state actor flying commercially available airframes rigged with explosives and old Soviet or Iranian missile technology. If Saudi Arabia can be reached, so can any target with less money and less layered defense behind it. Interception is not the same as deterrence. A state can intercept ninety-nine attacks and still suffer the consequences of the hundredth, and an adversary that can force a wealthy, well defended state to intercept at all has already demonstrated the ability to impose cost, disruption, and fear at a fraction of what the defense costs to field.

The Money That Is Moving, and the Money That Is Not

This is the case for treating counter unmanned aircraft systems, known throughout the industry as counter-UAS or C-UAS, as a first order national security priority rather than a procurement afterthought. The money is beginning to move, but not fast enough and not always toward the right problem. NATO allies committed more than forty billion dollars over five years to counter-drone defense, drone procurement, and operator training at the July 2026 summit. Global government spending on counter-UAS systems passed twenty-nine billion dollars in publicly announced contracts in the first quarter of 2026 alone, spanning the United States, NATO’s eastern flank, and the Gulf states. The Pentagon has approved its largest counter-drone budget in its history. These are serious numbers, and they should be read as validation of the threat rather than evidence that the threat is handled.

Here is where I part ways with a great deal of the public conversation. Much of what passes for counter-drone readiness in the mainstream press, and in the planning documents for major public events such as the 2026 World Cup, is built around consumer-grade quadcopters, the kind sold on a retail website for a few hundred dollars, used by hobbyists and the occasional criminal to smuggle contraband or embarrass a stadium security team. That is a real problem, and it deserves a real answer. But it is not the problem that should be driving national investment. The threat that matters is the one built with intent, by people who understand exactly how radar cross section, radio frequency detection, electro-optical tracking, and jamming work, and who design airframes specifically to defeat them. Reduced radar signatures, fibre optic control links immune to jamming, terrain-hugging flight profiles, and swarming logic that overwhelms a single point of defense are no longer theoretical. They are combat proven in Ukraine and increasingly available to anyone with the money and the will to buy them.

A handful of companies understand this distinction and are building against it with a discretion that has kept them almost entirely out of the trade press. One firm has already achieved very significant operational deployments while remaining largely unknown outside a narrow circle of defense buyers, a deliberate choice that reflects the sensitivity of the customers it serves rather than any lack of capability. This is the profile of company that governments should be funding aggressively, not the consumer detection vendors chasing headline contracts tied to sporting events. The distinction matters because the money is finite and the threat is not evenly distributed. A system built to spot a hobbyist drone near a stadium perimeter will not detect a fibre optic controlled airframe flying below radar coverage with a purpose built warhead, and treating the two problems as interchangeable is how procurement dollars get wasted on the wrong layer of defense.

Hardware Cannot Substitute for Intelligence

There is a second front that deserves equal urgency, and it has received far less public attention than hardware. Intelligence funding, the human and signals collection that identifies who is buying airframes, who is training former combatants, and where demobilized operators are being recruited, has not kept pace with the physical buildup of interceptors and jammers. Detection and defeat technology can stop a drone in the air. It cannot stop the recruitment pipeline that puts a skilled operator behind the controls in the first place.

I have spent a career close enough to the counter-terrorism world in Europe to know exactly how this problem is worked when it is worked properly. Defeating the suicide bomb threat that reached its peak in the 2000s and 2010s was never primarily a bomb disposal problem. It was a network mapping problem, a financial tracing problem, and above all a resourcing problem. The technical means to identify a threat existed in nearly every major case that later became a mass casualty attack. What failed was the allocation of people and priority to act on what was already known.

The July 2005 bombings on London’s transport network are the clearest example on record. Mohammed Siddique Khan, the ringleader who killed fifty-two people alongside three other bombers, had crossed the paths of British security services on at least nine occasions before the attack. He was never made a priority target. A parliamentary inquiry later found that MI5 could properly investigate only a fraction of the individuals connected to known terror cells at the time, and that resourcing, not a lack of information, was the decisive failure. The same pattern reappeared in Paris in January 2015. Kouachi brothers, who murdered twelve people at the offices of Charlie Hebdo, had been under French surveillance for years. One had trained with al Qaeda’s affiliate in Yemen. Both were on a United States no fly list. Their surveillance was terminated in 2013 and 2014, months before the attack, because French services judged their resources better spent tracking fighters returning from Syria. In both cases, the state possessed the intelligence. What it lacked was the funded capacity to act on it before, rather than after, the attack.

That is the exact failure mode I do not want to see repeated with a drone-trained mercenary or a radicalized former operator instead of a bomb vest. The technical signature is different. The organizational failure that allows it to happen is identical, and it is entirely preventable with the right level of sustained funding rather than a reactive surge after the first attack forces the issue.

Where the Private Sector Fits

The good news, to the extent there is any, is that the model for closing this gap already exists and has existed for two decades. In-Q-Tel, the independent investment arm that supports the Central Intelligence Agency and the wider American intelligence community out of Langley, has spent years identifying and funding private technology companies whose commercial products carry a national security application, from data fusion platforms to autonomous systems to advanced sensing. That structure is precisely what needs to be scaled and mirrored across allied services in Europe, not narrowed now the threat is diversifying into drone-enabled and AI-assisted networks.

The companies best positioned to help are rarely the ones with the loudest marketing. The most effective counter-terrorism technology work has always been done by firms willing to operate quietly, take direction from the agencies they serve, and avoid the kind of public profile that would compromise the sensitivity of their customers. That is by design, not by accident, and it should not be mistaken for a lack of capability. Governments evaluating where to direct the next round of intelligence-linked technology funding should be looking specifically for firms with a demonstrated ability to fuse open-source data, financial tracing, and network analysis into a single operational picture, because that is the combination that turns a name on a watch list into a prevented attack rather than a post-incident inquiry.

This is not a call for more surveillance for its own sake. It is a call for the surveillance and analysis capacity that already exists on paper to be properly funded so that the people doing the work are not forced, as MI5 was in 2005 and the DGSI was in 2014, to choose which known threat gets followed and which one gets deprioritized until it is too late. Doubling intelligence funding aimed specifically at the foreign fighter and mercenary pipeline, before Ukraine’s demobilization accelerates, is the cheapest insurance available against a repeat of July 7 or Charlie Hebdo with a drone in place of a rucksack or a rifle.

One Connected Problem

None of this is an argument against ending the war in Ukraine. The war should end, and the sooner the better for everyone caught inside it. It is an argument that the peace itself creates a security problem that is distinct from, and in some ways more diffuse and harder to track than, the war it replaces. A front line is a known geography. A demobilized drone operator with a laptop and a grudge is not. European leaders who treat the end of the war as the end of the danger are making the same mistake that was made in 1989, when the Soviet withdrawal from Afghanistan was treated as a victory rather than the opening chapter of a new and harder problem. The Houthi escalation against Saudi Arabia this month is a preview of what an under secured airspace looks like even for a wealthy state with real air defense investment. Ukraine’s coming demobilization is a preview of where the next generation of operators for that kind of attack will come from.

The counter-UAS industry, the intelligence community, and NATO’s own procurement architecture need to treat these as one connected problem rather than three separate line items in a budget. Fund the reintegration and formal channelling of Ukraine’s drone operator cadre before demobilization accelerates. Double the funding directed at intelligence collection on foreign fighter and mercenary networks, with specific attention to the drone dimension that did not exist in the Afghan Arab era and give the analysts who inherit that mission the resources that MI5 and the DGSI did not have when they needed them most. Direct procurement dollars toward companies building against the deliberately engineered threat, not the hobbyist one, and toward the technology partners willing to work as closely with allied intelligence services as the best of them already work or are sharing data with Langley.

The Houthis have just shown the Gulf what happens when that work is not done fast enough. Ukraine is about to show the rest of the world where the next wave of operators will come from. The window to get ahead of both is closing while the war is still winding down, and it will not reopen once the operators have already found their next employer.