Experts provide insights into ways for the United States and its allies to bolster the cyber workforce.

Sunburst was a startling reminder of the United States’ collective cyber insecurity and the inadequacy of current US strategy.

The digital attack surface the aviation sector presents to its adversaries continues to grow in such a way that both managing risk and gaining insight on it remain difficult. With emerging…

Senior European and American policymakers and experts assess how sovereignty, security and competitiveness are reshaping the digital transatlantic relationship.

The Mythical Beasts project pulls back the curtain on the connections between 435 entities across forty-two countries in the global spyware market.

When technologies work together, it benefits users and the digital ecosystem. Policymakers can advance interoperability and security in tandem by understanding how each impacts the other.

NATO’s eastern flank is under persistent pressure across multiple domains. The Alliance's core challenge is not sensing capacity

Software supply chain attacks are popular, impactful, and are used to great effect by malicious actors. To dive deeper on this topic, we asked eight experts about these threats and how policymakers…

Private technology companies have provided essential and often irreplaceable support to Ukraine following Russia’s invasion in 2022.

Open-source software (OSS) sits at the center of almost every digital technology moving the world since the early 1980s—laptops, cellphones, widespread internet connectivity, cloud computing, social…

The opacity of intermediaries in the OCC marketplace represents a discernible gap in current policy frameworks. Brokers and resellers are essential enablers and connectors of the OCC supply chain.

The private sector plays a crucial role in defining the changing shape of the Internet, especially its security. This report examines two protocols as examples of private sector influence over…

The EU is strengthening AI and health data governance, creating a more secure and trusted framework for innovation.

Software liability—resurgent in the policy debate since its mention in the 2023 US National Cybersecurity Strategy—describes varied potential structures to create legal accountability for vendors of…

Pfizer Chairman and CEO Albert Bourla discusses how artificial intelligence is reshaping drug discovery and healthcare.

Can generative AI help hackers? By deconstructing the question into attack phases and actor profiles, this report analyzes the risks, the realities, and their implications for policy.

An in-depth discussion on the opportunities, goals, and anticipated challenges with the National Cyber Workforce and Education Strategy

The Intellexa Consortium is a complex web of holding companies and vendors for spyware and related services. The Consortium represents a compelling example of spyware vendors in the context of the…

Alumni of Cyber 9/12 Strategy Challenge share their experiences, and discuss the impact of such simulated exercises to prepare for real life cyber attacks.

Open source software security experts share their insights into the XZ backdoor, and what it means for open source software security.

For this Cybersecurity Awareness Month, senior cybersecurity executives share their insights into the evolution of their roles.

It is imperative that governments reevaluate their approach to countering the proliferation of offensive cyber capabilities.

Critical infrastructure increasingly depends upon cloud computing. Policy must adapt its approach to risk management accordingly.

Russia imprisoned a security service officer for taking bribes from cybercriminals—showing not a willingness to crack down on cybercrime, but instead just how much the Kremlin wants to maintain its…

Offensive cyber capabilities run the gamut from sophisticated disruptions of infrastructure to malware used to target human rights journalists.

The FTC has brought 47 cases against companies for unfair or deceptive cybersecurity practices. What can we learn from them?

The marketplace for offensive cyber capabilities continues to grow globally. Their proliferation poses an expanding set of risks to national security and human rights, these capabilities also have…

Current policy does not address the issue of cyber-physical security with a systemic approach, instead focusing with tunnel vision on specific events. This analysis uses the iceberg model for systems…

Competitors and judges from the 2025 Washington, DC Cyber 9/12 Strategy Challenge share their perspectives on the competition's role in cyber workforce development.

In competition and cooperation, cloud computing is the canvas on which states conduct significant political, security, and economic activity.

Sunburst was a startling reminder of the United States’ collective cyber insecurity and the inadequacy of current US strategy.

Experts provide insights into ways for the United States and its allies to bolster the cyber workforce.

Domestic investment in spyware is undermining national security at all levels of society.

The digital attack surface the aviation sector presents to its adversaries continues to grow in such a way that both managing risk and gaining insight on it remain difficult. With emerging…

Russia’s technological isolation is both a reality and a desired goal for Moscow. This piece explores the impacts of this phenomenon and offers recommendations for how to deal with that evolving…

Web browsers are the gateway to the internet. As browser developers replicate design features and concentrate around shared underlying technologies, they create cybersecurity risks with the potential…

As the Global South prepares for the next stage in ICT development, governments must prioritize policies that reduce corruption in critical network software procurement to protect those countries'…

Earlier this month, a senior Justice Department official referred to ransomware as a potential “cyber weapon of mass destruction.” When hackers

The second edition of the Mythical Beasts project assess how the global spyware market has developed and changed over the past year.

In Myanmar, cybercrime has become an effective vehicle through which nonstate actors can fund and perpetuate conflict.

When technologies work together, it benefits users and the digital ecosystem. Policymakers can advance interoperability and security in tandem by understanding how each impacts the other.

Software supply chain attacks are popular, impactful, and are used to great effect by malicious actors. To dive deeper on this topic, we asked eight experts about these threats and how policymakers…

Open-source software (OSS) sits at the center of almost every digital technology moving the world since the early 1980s—laptops, cellphones, widespread internet connectivity, cloud computing, social…

The private sector plays a crucial role in defining the changing shape of the Internet, especially its security. This report examines two protocols as examples of private sector influence over…

Software liability—resurgent in the policy debate since its mention in the 2023 US National Cybersecurity Strategy—describes varied potential structures to create legal accountability for vendors of…

Can generative AI help hackers? By deconstructing the question into attack phases and actor profiles, this report analyzes the risks, the realities, and their implications for policy.

An in-depth discussion on the opportunities, goals, and anticipated challenges with the National Cyber Workforce and Education Strategy

The Intellexa Consortium is a complex web of holding companies and vendors for spyware and related services. The Consortium represents a compelling example of spyware vendors in the context of the…