When the War Is Everywhere at Once

The channels themselves are now contested infrastructure. US and Israeli operators compromised the BadeSaba prayer app — 5 million users — to deliver messages urging Iranian military personnel to lay down arms. No broadcast tower. No leaflet drop. The app bypassed state internet blackouts entirely.

If you are still thinking about channel strategy in terms of social, paid, owned, and earned media, that framework no longer covers the territory. Your audiences are operating inside a cognitive battle-space whether they have registered that fact or not. Any application with sufficient reach and user trust is, in principle, a potential delivery mechanism for someone else's message.

The lesson is not that you should abandon digital channels. It is that channel selection now requires a threat assessment, not just a reach-and-frequency calculation.

The 17-minute window does not care about your legal review cycle. During the February 2026 earthquakes in Iran, social media was flooded with claims of covert nuclear tests within 17 minutes of the seismic event — before the Comprehensive Nuclear-Test-Ban Treaty Organisation had issued anything, before a single professional seismologist had examined the data.

The claims were wrong. The correction came hours later. By then, large parts of the audience had moved on, carrying the wrong version.

Your crisis communications plan almost certainly assumes time to convene a response team, draft a statement, clear legal, and issue something considered. That assumption is now a liability.

The question is not whether you can respond in 17 minutes. Most organisations cannot, and trying to build a process that fast invites rushed errors. The real question is whether you have pre-approved holding positions and decision frameworks that allow a designated person to publish something — anything accurate and stabilising — without calling anyone first.

Pre-approved language is not a compromise. It is the difference between being present in a narrative and being absent from it.

The weapon was financial. The battlefield was actuarial. The Strait of Hormuz did not close primarily through military force during the 2026 escalation. It closed through insurance. The P&I clubs — Skuld, Gard, London P&I — issued 72-hour cancellation notices for war risk cover. Additional War Risk Premiums jumped from 0.15% to approximately 1% of hull value. Maersk and Hapag-Lloyd suspended operations or rerouted around the Cape of Good Hope. Daily vessel transit fell 86% below baseline.

The signal was present in the insurance markets before a single commercial vessel was touched.

For crisis communicators, this reframes what intelligence actually means. Monitoring social media for brand mentions is one thing. Monitoring Additional War Risk Premium surges, freight rate movements, and P&I club bulletins as early-warning indicators of escalation is another entirely — and that second capability is the gap currently costing organisations their response windows.

Organisations with supply chains, energy dependencies, or logistics exposure to contested regions need to integrate financial market signals into their crisis intelligence picture. This is not the job of the communications function alone. But the communications function needs to be in the room where those signals are being read.

Reactive debunking fails once an audience is emotionally captured by a narrative. The correction arrives too late. And it often reinforces the original claim through simple repetition — stating the false claim in order to deny it gives the false claim another impression. You are playing whack-a-mole against opponents who do not need to be accurate. They need to be first, and emotionally resonant.

The US Department of Defence has reached the same conclusion. It is now building information inoculation into warfighter training — warning personnel in advance that manipulation is coming and showing them what the techniques look like before they encounter them. The operational term for this is pre-bunking.

The DEPICT framework structures the threat landscape into six categories: Discrediting, Emotional language, Polarisation, Impersonation, Conspiracy promotion, and Trolling. Each category has recognisable signatures. Each can be taught.

The principle scales well beyond military applications. Any organisation whose workforce, clients, or stakeholders are likely to be targeted during a regional crisis — one affecting supply chains, energy prices, or financial markets — has a pre-bunking problem it has probably not yet addressed.

A message can be accurate, timely, and well-crafted — and still not arrive. Iran's internet connectivity dropped to 4% during the 2026 crisis. The state shifted from reactive censorship to a whitelist model: only authorised services permitted, with permanent digital trails left by anyone who strayed outside them.

This is the extreme end. But it sits on a spectrum that includes EU regulatory frameworks, platform content moderation decisions, and national emergency communications protocols that can be activated faster than most organisations anticipate.

Single-channel communication strategies are a structural vulnerability. Build redundancy now. Not after the first failure, when it is too late to establish alternative channels, verify alternative audiences, and test whether those channels actually work under pressure.

The 2026 Middle East crisis is a convergence event — and most crisis communication plans were not built for convergence. Kinetic and narrative operations ran in parallel. Insurance markets functioned as strategic weapons. Seismic monitoring networks were exposed to coordinated manipulation. Trusted civilian applications were repurposed for psychological operations.

None of this fits neatly within a communications function designed for a slower, more linear world. If your crisis communication plan predates AI as an operational reality, predates information warfare as standard statecraft, or predates financial instruments as conflict tools, the gap between your plan's assumptions and current conditions is significant.

Peter Sandman, the risk communication researcher whose outrage model has shaped the field for decades, has long argued that perceived risk is as much about fairness, trust, and control as it is about probability and magnitude.

The 2026 events add a new dimension: the information environment itself is now a managed, contested space. What audiences perceive is being actively shaped by actors whose goals are not yours. That changes the communication calculus entirely.

What is the 17-minute problem in crisis communication? The 17-minute problem refers to the documented speed at which false narratives — in this case, claims of covert nuclear testing during Iranian seismic activity in February 2026 — can saturate an audience before any official body has verified or responded to an event. Most organisational approval processes cannot match this speed, making pre-approved holding statements and delegated publishing authority essential tools.

How did war risk insurance become a strategic weapon in the 2026 Middle East conflict? When P&I clubs including Skuld, Gard, and London P&I issued 72-hour war risk cover cancellations, shipping operators faced uninsurable exposure. Additional War Risk Premiums spiked from 0.15% to approximately 1% of hull value. Major carriers suspended or rerouted operations, causing an 86% drop in daily vessel transit through the Strait of Hormuz — achieved without direct military action against commercial shipping.

What is pre-bunking and why is it more effective than fact-checking? Pre-bunking involves warning audiences in advance that manipulation attempts are coming and showing them what those techniques look like. Research and practice — including the US Department of Defence's warfighter training programmes — indicate that inoculating people against manipulation before they encounter it is significantly more durable than reactive corrections, which arrive after emotional capture has already occurred and can inadvertently amplify false claims through repetition.

What is the DEPICT framework? DEPICT is a framework for categorising information warfare techniques: Discrediting, Emotional language, Polarisation, Impersonation, Conspiracy promotion, and Trolling. It provides a structured vocabulary for recognising and teaching resistance to manipulation, applicable in both military and civilian organisational contexts.

Why is single-channel crisis communication a structural vulnerability? Filters — sovereign, regulatory, or platform-based — can sever communication between organisations and their audiences without warning. The 2026 crisis demonstrated that both state censorship and insurance-driven operational shutdowns can create information blackouts rapidly. Redundant channels, established and tested before a crisis, are the only reliable mitigation.

What should crisis communicators be monitoring that they probably are not? Beyond conventional media monitoring, crisis communicators with supply chain or energy dependencies should track Additional War Risk Premium movements, P&I club advisories, freight rate indices, and cargo route disruption signals. These financial and logistical indicators often move ahead of public narrative — they are the early warning layer that most communications functions currently lack.

How do compromised civilian applications change crisis communication planning? When applications with millions of legitimate users can be repurposed as psychological operations delivery platforms — as the BadeSaba prayer app was in 2026 — channel trust becomes a variable rather than a constant. Crisis communicators need to audit the digital infrastructure their audiences rely on and build resilience against the possibility that familiar channels are delivering adversarial content alongside legitimate information.

What does information warfare mean for organisational crisis plans written before 2023? Plans written before AI became an operational reality, before information warfare became standard statecraft, and before financial instruments emerged as conflict tools are likely to contain significant assumption gaps. The 2026 convergence event — simultaneous kinetic operations, narrative warfare, insurance-market disruption, and civilian app compromise — is the model for the next crisis, not the exception to it.

Philippe Borremans is a crisis communication specialist with 25 years of experience and the founder of RiskComms. He publishes the Wag the Dog Newsletter, which covers the intersection of crisis communication, narrative intelligence, and emerging threat environments. Related reading: Who Benefits When the Public is Confused? | The GCC SIRTREP