🚨 NEW BRIEF: AI is both a target and a tool for attackers. The cloud infrastructure it runs on doesn’t have the vulnerability management regime to match. New CSI brief on what needs to change. atlanticcouncil.org/in-depth…

In his issue brief, fellow @Peacock_Cyber highlights the oft-overlooked dimension of cybersecurity development - corruption in software acquisition practices. Read more here: atlanticcouncil.org/in-depth…

OSS might often be free (like a puppy or like speech)--but the way it interacts with risk can resemble financial systems. Don't believe us? Check out our “Avoiding the Success Trap” report for more! atlanticcouncil.org/in-depth…

Design homogeneity and concentration can expose users to more systemic cybersecurity risks. @Jshermcyber, and Jessica Edelson examine the impacts on web browsers in “Homogeneity and Concentration in the Browser”. atlanticcouncil.org/content-…

Justin Sherman examines how governments exert influence to warp the Internet, and why the US needs to be more active in building a safer, more secure Internet in his report, “The Politics of Internet Security.” Give it a read here: atlanticcouncil.org/in-depth…

What do intelligence and regional studies have to do with cybersecurity? Here's one argument: stop thinking about cybersecurity as a tech problem and treat it as a social systems problem. Read more by @SimonPHandler, @emmacs26, & Trey Herr here: warontherocks.com/2021/05/cy…

A regime for software liability must be designed in light of its policy goals. Our report covers how different goals, like incentivizing security versus helping harmed businesses, point towards different standards and mechanisms. atlanticcouncil.org/in-depth…

📢 Guess who’s back, back again! #Cyber912 is heading to Austin, TX, Jan 30–31, 2027 with our partners @StraussCenter Registration is open through Dec 7! Sign up: form.jotform.com/Cyber_State…

Autonomy is a major trend in artificial intelligence right now and one of the more real areas of risk around models' cyber capabilities. Our report, “Hacking with AI,” discusses these risks and how policymakers should begin to respond. atlanticcouncil.org/in-depth…

Cybercrime and cyber fraud, from ransomware to financial data fraud and romance scams, have reached a new high in Southeast Asia. In Myanmar, this not only facilitates traditional crime, but also directly supports the ongoing civil war. atlanticcouncil.org/in-depth…

How is the government responding cyber workforce development? Rob Shriver says the focus is on skills-based hiring, letting candidates “demonstrate that you’ve got the skills to do the job.” See the full conversation here: atlanticcouncil.org/event/un…

We asked teams about their experience competing in the 2025 Washington, DC #Cyber912 competition and developing policy recommendations in response to a cyber crisis with implications for rural healthcare infrastructure. Check out their reflections here: atlanticcouncil.org/content-…

Individuals who cultivate businesses around spyware will be repeat players in the broader market. See how individuals in the Intellexa Consortium are connected to other vendors in this space in: atlanticcouncil.org/in-depth…

As more actors look to purchase offensive cyber capabilities (OCC) from private companies, the continued proliferation of OCC poses a national security threat to the US and its allies. Learn more here: atlanticcouncil.org/in-depth…

We asked 5 Cyber 9/12 alumni if they could participate in 9/12 again, would they? Gabriel Cajiga said “I would definitely do it again!” Learn what Frances Schroeder, Grant Versfeld, Nitansha Bansal and Tionge Mughogho have to say: atlanticcouncil.org/content-…

NATO’s challenge isn’t collecting intel—it’s connecting it. Fragmented systems + selective sharing = slower response times. This report explores how cloud-enabled ISR can unlock faster, trusted intelligence across the Alliance. atlanticcouncil.org/in-depth…

How can cyberattacks on OSS be mitigated? Fiona Krakenbürger says, “There is clearly no silver bullet, but there are ways to improve the resilience and security posture of software projects” Read more in CSI's 5x5: atlanticcouncil.org/content-…

Spyware doesn't travel from vendor to target in a straight line. Chains of intermediaries add layers of opacity at every step. This issue brief maps who these actors are and why intermediaries matter in driving proliferation atlanticcouncil.org/in-depth…

The threat of personal liability for CISOs is changing the game. How are execs adapting in light of recent high-profile charges? Learn more here: atlanticcouncil.org/content-…

The era of global pooled health datasets is ending—at least in Europe. The EU is shifting toward federated, local data infrastructure under GDPR, the AI Act, and EHDS. This report explains what comes next. atlanticcouncil.org/in-depth…

Today, like every day, would be a great day for policymakers to demand more transparency and collaboration from the biggest cloud service providers, whose infrastructure is key for many important sectors. Here's a starting point -> atlanticcouncil.org/in-depth…