Cyber operations are the use of cyberspace capabilities to achieve objectives in or through digital environments. The term covers more than malware or intrusion: it includes reconnaissance, credential theft, disruption, influence activity, persistence, and coordination with other parts of a campaign. In practice, cyber operations can support espionage, sabotage, extortion, or military and political goals.
This matters in cyber security because an operation is judged by its objective, not just its tooling. A scan, phishing wave, or supply-chain compromise may be part of a broader campaign rather than an isolated attack. Defenders use monitoring, segmentation, least privilege, backups, and incident response playbooks to limit impact and recover quickly. In state conflict, cyber operations can create ambiguity, spill over to civilian systems, and shape decisions before any physical action is visible.