Makings of the Market: Seven perspectives on offensive cyber capability proliferation

The marketplace for offensive cyber capabilities continues to grow globally. Their proliferation poses an expanding set of risks to national security and human rights, these capabilities also have…

atlanticcouncil.org

The 5×5—Strengthening the cyber workforce

Experts provide insights into ways for the United States and its allies to bolster the cyber workforce.

atlanticcouncil.org

Broken trust: Lessons from Sunburst

Sunburst was a startling reminder of the United States’ collective cyber insecurity and the inadequacy of current US strategy.

atlanticcouncil.org

Aviation cybersecurity: Scoping the challenge

The digital attack surface the aviation sector presents to its adversaries continues to grow in such a way that both managing risk and gaining insight on it remain difficult. With emerging…

atlanticcouncil.org

Transatlantic digital relations: Sovereignty, security, and competitiveness

Senior European and American policymakers and experts assess how sovereignty, security and competitiveness are reshaping the digital transatlantic relationship.

atlanticcouncil.org

Mythical Beasts and where to find them: Mapping the global spyware market and its threats to national security and human rights

The Mythical Beasts project pulls back the curtain on the connections between 435 entities across forty-two countries in the global spyware market.

atlanticcouncil.org

User in the middle: An interoperability and security guide for policymakers

When technologies work together, it benefits users and the digital ecosystem. Policymakers can advance interoperability and security in tandem by understanding how each impacts the other.

atlanticcouncil.org

Fusion on paper or in practice? Making the cloud work for ISR and NATO

NATO’s eastern flank is under persistent pressure across multiple domains. The Alliance's core challenge is not sensing capacity

atlanticcouncil.org

Kink in the chain: Eight perspectives on software supply chain risk management

Software supply chain attacks are popular, impactful, and are used to great effect by malicious actors. To dive deeper on this topic, we asked eight experts about these threats and how policymakers…

atlanticcouncil.org

Building the digital front line: Understanding big tech decision-making in Ukraine

Private technology companies have provided essential and often irreplaceable support to Ukraine following Russia’s invasion in 2022.

atlanticcouncil.org

Avoiding the success trap: Toward policy for open-source software as infrastructure

Open-source software (OSS) sits at the center of almost every digital technology moving the world since the early 1980s—laptops, cellphones, widespread internet connectivity, cloud computing, social…

atlanticcouncil.org

Mythical Beasts: Investigating the role of intermediaries in the proliferation of offensive cyber capabilities

The opacity of intermediaries in the OCC marketplace represents a discernible gap in current policy frameworks. Brokers and resellers are essential enablers and connectors of the OCC supply chain.

atlanticcouncil.org

The politics of internet security: Private industry and the future of the web

The private sector plays a crucial role in defining the changing shape of the Internet, especially its security. This report examines two protocols as examples of private sector influence over…

atlanticcouncil.org

Navigating the European Union’s AI and health data framework

The EU is strengthening AI and health data governance, creating a more secure and trusted framework for innovation.

atlanticcouncil.org

Design questions in the software liability debate

Software liability—resurgent in the policy debate since its mention in the 2023 US National Cybersecurity Strategy—describes varied potential structures to create legal accountability for vendors of…

atlanticcouncil.org

Pfizer’s Albert Bourla on AI, health, and innovation in a changing world

Pfizer Chairman and CEO Albert Bourla discusses how artificial intelligence is reshaping drug discovery and healthcare.

atlanticcouncil.org

Hacking with AI

Can generative AI help hackers? By deconstructing the question into attack phases and actor profiles, this report analyzes the risks, the realities, and their implications for policy.

atlanticcouncil.org

The National Cyber Workforce and Education Strategy: Unleashing America’s cyber talent

An in-depth discussion on the opportunities, goals, and anticipated challenges with the National Cyber Workforce and Education Strategy

atlanticcouncil.org

Markets matter: A glance into the spyware industry

The Intellexa Consortium is a complex web of holding companies and vendors for spyware and related services. The Consortium represents a compelling example of spyware vendors in the context of the…

atlanticcouncil.org

The 5×5—Alumni perspectives on Cyber 9/12 Strategy Challenge

Alumni of Cyber 9/12 Strategy Challenge share their experiences, and discuss the impact of such simulated exercises to prepare for real life cyber attacks.

atlanticcouncil.org

The 5x5—The XZ backdoor: Trust and open source software

Open source software security experts share their insights into the XZ backdoor, and what it means for open source software security.

atlanticcouncil.org

The 5×5—The evolving role of CISOs and senior cybersecurity executives

For this Cybersecurity Awareness Month, senior cybersecurity executives share their insights into the evolution of their roles.

atlanticcouncil.org

Countering cyber proliferation: Zeroing in on Access-as-a-Service

It is imperative that governments reevaluate their approach to countering the proliferation of offensive cyber capabilities.

atlanticcouncil.org

Critical infrastructure and the cloud: Policy for emerging risk

Critical infrastructure increasingly depends upon cloud computing. Policy must adapt its approach to risk management accordingly.

atlanticcouncil.org

Take the bribe but watch your back: Why Russia imprisoned a security officer for taking cybercriminal payoffs

Russia imprisoned a security service officer for taking bribes from cybercriminals—showing not a willingness to crack down on cybercrime, but instead just how much the Kremlin wants to maintain its…

atlanticcouncil.org

A primer on the proliferation of offensive cyber capabilities

Offensive cyber capabilities run the gamut from sophisticated disruptions of infrastructure to malware used to target human rights journalists.

atlanticcouncil.org

“Reasonable” cybersecurity in forty-seven cases: The Federal Trade Commission’s enforcement actions against unfair and deceptive cyber Practices

The FTC has brought 47 cases against companies for unfair or deceptive cybersecurity practices. What can we learn from them?

atlanticcouncil.org

Makings of the Market: Seven perspectives on offensive cyber capability proliferation

The marketplace for offensive cyber capabilities continues to grow globally. Their proliferation poses an expanding set of risks to national security and human rights, these capabilities also have…

atlanticcouncil.org