Red Cross says tech companies should protect civilians during conflicts

The Red Cross is urging tech companies to act responsibly during armed and cyber conflicts.

Governments, the military, tech companies and humanitarian organizations should adhere to international law during wartime to minimize digital threats to civilians, according to the advisory from the International Committee of the Red Cross (ICRC)

Tech companies, in particular, should monitor how their products and services — including communications infrastructure, cloud storage and cybersecurity tools — are used during war, as direct involvement in hostilities could categorize them as military targets and put their employees at risk, the Geneva-based ICRC said.

The Red Cross also urges tech businesses to “prevent or minimize” the use of their civilian services by the military, and to inform employees about the associated risks and potential legal consequences of such usage.

When offering services for use during conflicts, tech companies should physically or technically separate the data and communication infrastructure they provide for military purposes from those intended for civilian use, ICRS said.

Tech companies should also make sure that their voluntary actions — those taken beyond the legal obligations — do not disrupt the operation and safety of critical services such as healthcare and humanitarian aid.

Businesses “should do everything feasible to minimize the risks to the company and civilian clients that arise in the context of armed conflicts,” ICRS said.

The advisory follows a similar pronouncement earlier this month about the responsibilities of hacktivists during wartime.

Tech and war

Technology plays a crucial role in modern warfare, with private businesses often eager to supply tech to the military. The war in Ukraine is the latest example of the mutual collaboration between the military and tech businesses.

In cyberspace, Ukraine's response to Russian aggression heavily relies on international assistance. Throughout the war, Ukraine has gained access to advanced technologies from major private cybersecurity firms, including Microsoft, ESET and Cisco.

Elon Musk's satellite internet company, Starlink, is vital for keeping Ukrainian soldiers connected on the battlefield, especially in areas lacking other means of communication.

The head of another big tech firm — data analytics company Palantir — stated that its service is responsible for the majority of targeting in Ukraine.

Ukraine's top cybersecurity official, Yurii Shchyhol, previously said in an interview with Recorded Future News that business investments in Ukraine serve not only its defense but also the companies' own interests.

"Ukrainian specialists possess valuable experience in full-scale cyberwarfare, unlike any other country. While our partners contribute technology, we provide them with expertise and skills they didn't possess before," he added.

Civilian hackers & war

The ICRC acknowledges that protecting civilians from digital threats during conflicts requires investment in legislation, policies and procedures. Some progress has been achieved in this regard.

For example, the International Criminal Court announced in September that it plans to prosecute cyberwar crimes, which include attacks on critical civilian infrastructure like power grids, banks, and hospitals, mirroring its approach to physical-world war crimes.

Certain aspects of cyberwarfare, such as the involvement of civilian hackers, remain unregulated.

The ICRC’s recent guidelines for hacktivists, urged them to be more "humane" and avoid targeting civilian infrastructure. However, these rules faced criticism from hacktivist groups in Ukraine and Russia.

"There are no rules in war,” said the pro-Ukrainian hacker group Hdr0.

Pro-Russian hacking groups Killnet and Anonymous Sudan said that they would ignore the Red Cross and that its rules are “not viable and breaking them for the group's cause is unavoidable".

The Red Cross disagrees. “The more civilians take part in digital operations related to an armed conflict, the more difficult it becomes to distinguish between who is a civilian and who is a combatant," the organization said.