9 Best Cyber Warfare and Geopolitics Books to Read in 2026

You can be technically excellent and miss the point of why this field exists. The books below tell you what cyber actually does in the world, who wields it, and what it costs.

The picks at a glance

1. Sandworm by Andy Greenberg — the modern foundational text. Read first.
2. Countdown to Zero Day by Kim Zetter — the definitive Stuxnet narrative.
3. This Is How They Tell Me the World Ends by Nicole Perlroth — the zero-day market, from the inside.
4. The Perfect Weapon by David E. Sanger — cyber as statecraft, from inside Washington.
5. The Cuckoo's Egg by Cliff Stoll — the historical foundation. Reads like a thriller.
6. Dark Territory by Fred Kaplan — the US cyber-policy origin story.
7. @War by Shane Harris — the Pentagon's view.
8. Ghost in the Wires by Kevin Mitnick — the genre's best memoir.
9. Pegasus by Laurent Richard & Sandrine Rigaud — the surveillance front of cyber conflict.

None of them are technical. All of them are essential.

The modern foundational text

Sandworm by Andy Greenberg is the best book on what state-level cyber actually looks like. The GRU's Ukraine campaign, NotPetya, the operators behind the operations. Read it first.

If you only read one book on this list, it's this one.

The Stuxnet narrative

Countdown to Zero Day by Kim Zetter is the definitive account of the operation that defined the genre. Patient tradecraft, multi-year preparation, careful targeting; the antithesis of the smash-and-grab campaigns that dominate news.

Read it after Sandworm, for contrast.

The zero-day market, from the inside

This Is How They Tell Me the World Ends by Nicole Perlroth documents the offensive cyber market in uncomfortable detail. Brokers, governments, researchers, the moral compromises of an industry built on undisclosed vulnerabilities.

It's the most controversial book on the list and the one you'll argue about most.

Cyber as statecraft

The Perfect Weapon by David E. Sanger is the clearest single book on how governments actually think about offensive cyber. The NYT national security correspondent writes from inside Washington, so you get the situation-room deliberations and the ambivalence: cyber weapons are attractive precisely because they sit below the threshold of armed conflict, which makes deterrence and norms genuinely hard. It covers ground Sandworm and This Is How They Tell Me the World Ends also cover, and often less vividly.

Read it for the policy frame. Skip it if you want technical depth or fresh reporting; it's a strategic synthesis, and a US-centric one, that practitioners will already know in outline. Best read alongside Sandworm and Perlroth.

The historical foundation

The Cuckoo's Egg by Cliff Stoll is from 1989 and reads like a thriller. An astronomer notices a 75-cent accounting error and ends up tracking a KGB-affiliated hacker across the early internet. The book that started the genre.

It's the easiest read on this list and the one most likely to convert your non-security friends.

The American cyber-policy origin story

Dark Territory by Fred Kaplan is the long history of US government engagement with cyber, from Reagan's WarGames briefing through Stuxnet. Best read alongside or after Sandworm; together they cover both sides of the great-power cyber dynamic.

The Pentagon's view

At War: The Rise of the Military-Internet Complex by Shane Harris is the institutional history of how cyber became a domain of warfare. More academic than Kaplan, denser, useful if you want to understand how doctrine actually got written.

The hacker memoir

Ghost in the Wires by Kevin Mitnick is the genre's best memoir. More about social engineering than computers, but it's the fullest portrait we have of an era's most famous hacker, and a useful reminder that humans are usually the easier exploit.

The surveillance front

Pegasus by Laurent Richard & Sandrine Rigaud is the inside story of the Forbidden Stories investigation into NSO Group's zero-click spyware, told by the journalists who ran it. It reads like a thriller because it was one: they were investigating a weapon that could have been turned on them mid-investigation. Where the other books on this list are about states attacking states, Pegasus is about the commercial mercenary spyware market, and the journalists, lawyers, activists, and heads of state who turned up among its targets rather than the terrorists and criminals NSO advertised.

It's stronger on stakes and tradecraft than on technical mechanism. Read it for the human and political story; skip it if you came for Citizen Lab-grade forensics on the exploits. No other book conveys so clearly that surveillance-for-hire is a present reality, not a future risk.

A reading order

If you're new to the genre:

1. The Cuckoo's Egg (read it on a weekend).
2. Sandworm (the modern foundational text).
3. Countdown to Zero Day (for contrast).
4. This Is How They Tell Me the World Ends (to be uncomfortable).
5. The Perfect Weapon (for how governments decide).
6. Dark Territory + At War (the policy backstory).
7. Pegasus (the surveillance front).
8. Ghost in the Wires (the human angle).

These books matter most for technical practitioners who can already do the work. The risk is becoming so technical that you forget the field is, ultimately, political. These books prevent that.