This week, our Cyber Team will be in Tallinn for
NATO CCDCOE #CyCon2024 - check out where you can hear more from them below 👇

Next week our RUSI Cyber Team will be in Tallinn for NATO CCDCOE #CyCon2024 . We are organising a series of dialogues on topics ranging from responsible cyber behaviour & ops to intl mechanisms for cyber crisis assistance. More below👇

Drop a message if you plan on being there!

Heading back to London after a wonderful day in Bath for a workshop exploring UK’s Cyber Power as part of our RUSI PoLIS - Bath King's College London RISCS Cyber Statecraft project. ✨

Anne Neuberger, Deputy Assistant to the US President and Deputy Nat Sec Advisor for Cyber and Emerging tech joins us at RUSI today to reflect on the US approach/responses to cyber threats. Ransomware, prepositioning from China-based threat actors, intl cooperation and more.

'You could, in theory, target individuals because you have their data. It could help you to understand structures within the organisation', says James Sullivan to Metro about the cyberattack on the UK’s armed forces. Read more below.
metro.co.uk/2024/05/07/chi…

A leader of what was once the world’s most harmful cyber crime group has been unmasked and sanctioned by the UK, US and Australia, following an NCA-led international disruption campaign.

#Cronos FBI Europol

Full story ➡️ nationalcrimeagency.gov.uk/news/lockbit-l…

One hour to go...

#Cronos

More details to follow on this incident but an important point from Ciaran Martin. The semantics we use to describe these incidents and the motivations of the threat actor matter. There are different ‘rules’ when it comes to cyber espionage. All states spy.

Important and timely piece on the dangers of exaggerating the importance of foreign disinfo campaigns: 'when officials exaggerate the efficacy and impact of foreign influence operations, the ones who benefit the most are the very regimes that produce it' foreignaffairs.com/russian-federa…

Latest piece from our RUSI Responsible Cyber Behaviour series is out! ✨
In this one, we focus on how countries in the Indo-Pacific (🇻🇳🇦🇺🇯🇵🇮🇳) balance the often-thorny rel between state responsibility and the thirst for the dev of cyber capabilities. rusi.org/explore-our-re…

Election security is more important than ever with over 2 billion voters heading to the polls in 2024. Our latest research outlines the diversity of targets, tactics, and threats within the election cyber security landscape... bit.ly/3Uz3oEL

I am so sad that Michael Phillips and Jamie MacColl are on the stage at the same time at the Institute for Security and Technology 24 in '24 and I am not there in person...but this is a great way to end the day!

Interesting new Mandiant report. Shows that GRU-linked hackers may have messed with control systems at water utilities in the US & Poland (17-18 Jan), and credibly claimed (2 Mar) to have interfered with a dam in France. This is not normal. services.google.com/fh/files/misc/…

🎉Today, the Centre for Financial Crime and Security Studies officially becomes the Centre for Finance and Security (CFS) at RUSI! Since our inception in 2014, the geopolitical landscape has evolved and finance has become an increasingly important element of global security.

📅There is still time to register and join us tomorrow as we discuss with Tom Keatinge, Ciaran Martin, @infosecjen, and Jamie MacColl whether banning ransomware payments is a viable solution to reducing the profitability of ransomware for cybercriminals.my.rusi.org/events/online-…

“The ways the code evades detection in source form, how it lies dormant and undetectable until activated, and its immense power and flexibility give credence to the widely held assumption that a major nation-state is behind this.” schneier.com/blog/archives/…

The third is an account of how we recently discovered that someone spent years quietly working to implant a backdoor in a piece of open-source software that would, had it not been caught, allowed the attacker to gain access to most internet servers.
economist.com/science-and-te…

Come do a PhD with me!

I research #cybersecurity #culture , #humanfactors in cyber, cyber #insurance , #ransomware , corporate #communications after security incidents, and more!

Check out the call below and drop me a line if any questions!

#phd #research

“Had it not been discovered, it would have been catastrophic”

One of the most generally accessible accounts so far of the #xzbackdoor from Ars Technica 👇

Hope there are more generally accessible reports soon: policymakers need help understanding the implications of this stuff

Prompted by Ciaran Martin’s Times article last month, RUSI is hosting an online event on whether or not the UK government should ban ransomware payments. Conrad Prince will be moderating a panel of Ciaran, Infosecjen, Tom Keatinge and myself. my.rusi.org/events/online-…