The EU is strengthening AI and health data governance, creating a more secure and trusted framework for innovation.

Critical infrastructure increasingly depends upon cloud computing. Policy must adapt its approach to risk management accordingly.

Much of today's critical infrastructure and military systems rely on open-source software

A proof-of-concept study looking for correlation between open source software project funding and security practices at scale.

Russia imprisoned a security service officer for taking bribes from cybercriminals—showing not a willingness to crack down on cybercrime, but instead just how much the Kremlin wants to maintain its…

It is imperative that governments reevaluate their approach to countering the proliferation of offensive cyber capabilities.

The FTC has brought 47 cases against companies for unfair or deceptive cybersecurity practices. What can we learn from them?

This panel features a discussion on lethal outcomes of cyber operations, coordination between cyber and kinetic forces, and integration of cyber options in future warfare within the context of larger…

Current policy does not address the issue of cyber-physical security with a systemic approach, instead focusing with tunnel vision on specific events. This analysis uses the iceberg model for systems…

In competition and cooperation, cloud computing is the canvas on which states conduct significant political, security, and economic activity.

The marketplace for offensive cyber capabilities continues to grow globally. Their proliferation poses an expanding set of risks to national security and human rights, these capabilities also have…

Experts provide insights into ways for the United States and its allies to bolster the cyber workforce.

Sunburst was a startling reminder of the United States’ collective cyber insecurity and the inadequacy of current US strategy.

The digital attack surface the aviation sector presents to its adversaries continues to grow in such a way that both managing risk and gaining insight on it remain difficult. With emerging…

Senior European and American policymakers and experts assess how sovereignty, security and competitiveness are reshaping the digital transatlantic relationship.

The Mythical Beasts project pulls back the curtain on the connections between 435 entities across forty-two countries in the global spyware market.

When technologies work together, it benefits users and the digital ecosystem. Policymakers can advance interoperability and security in tandem by understanding how each impacts the other.

NATO’s eastern flank is under persistent pressure across multiple domains. The Alliance's core challenge is not sensing capacity

Software supply chain attacks are popular, impactful, and are used to great effect by malicious actors. To dive deeper on this topic, we asked eight experts about these threats and how policymakers…

Private technology companies have provided essential and often irreplaceable support to Ukraine following Russia’s invasion in 2022.

Open-source software (OSS) sits at the center of almost every digital technology moving the world since the early 1980s—laptops, cellphones, widespread internet connectivity, cloud computing, social…

The opacity of intermediaries in the OCC marketplace represents a discernible gap in current policy frameworks. Brokers and resellers are essential enablers and connectors of the OCC supply chain.

The private sector plays a crucial role in defining the changing shape of the Internet, especially its security. This report examines two protocols as examples of private sector influence over…

The EU is strengthening AI and health data governance, creating a more secure and trusted framework for innovation.

The EU is strengthening AI and health data governance, creating a more secure and trusted framework for innovation.

Software liability—resurgent in the policy debate since its mention in the 2023 US National Cybersecurity Strategy—describes varied potential structures to create legal accountability for vendors of…

Pfizer Chairman and CEO Albert Bourla discusses how artificial intelligence is reshaping drug discovery and healthcare.

Can generative AI help hackers? By deconstructing the question into attack phases and actor profiles, this report analyzes the risks, the realities, and their implications for policy.

An in-depth discussion on the opportunities, goals, and anticipated challenges with the National Cyber Workforce and Education Strategy

The Intellexa Consortium is a complex web of holding companies and vendors for spyware and related services. The Consortium represents a compelling example of spyware vendors in the context of the…

Alumni of Cyber 9/12 Strategy Challenge share their experiences, and discuss the impact of such simulated exercises to prepare for real life cyber attacks.

Open source software security experts share their insights into the XZ backdoor, and what it means for open source software security.

A proof-of-concept study looking for correlation between open source software project funding and security practices at scale.

For this Cybersecurity Awareness Month, senior cybersecurity executives share their insights into the evolution of their roles.

It is imperative that governments reevaluate their approach to countering the proliferation of offensive cyber capabilities.

Critical infrastructure increasingly depends upon cloud computing. Policy must adapt its approach to risk management accordingly.

Russia imprisoned a security service officer for taking bribes from cybercriminals—showing not a willingness to crack down on cybercrime, but instead just how much the Kremlin wants to maintain its…

Offensive cyber capabilities run the gamut from sophisticated disruptions of infrastructure to malware used to target human rights journalists.

The FTC has brought 47 cases against companies for unfair or deceptive cybersecurity practices. What can we learn from them?

The marketplace for offensive cyber capabilities continues to grow globally. Their proliferation poses an expanding set of risks to national security and human rights, these capabilities also have…

Current policy does not address the issue of cyber-physical security with a systemic approach, instead focusing with tunnel vision on specific events. This analysis uses the iceberg model for systems…

Competitors and judges from the 2025 Washington, DC Cyber 9/12 Strategy Challenge share their perspectives on the competition's role in cyber workforce development.