Official account of the @AtlanticCouncil's Cyber Statecraft Initiative. Working at the nexus of geopolitics & nat sec with cyber. RT≠Endorsement

Washington, DC
🚨 NEW BRIEF: AI is both a target and a tool for attackers. The cloud infrastructure it runs on doesn’t have the vulnerability management regime to match. New CSI brief on what needs to change. atlanticcouncil.org/in-depth…
1
3
7
997
In his issue brief, fellow @Peacock_Cyber highlights the oft-overlooked dimension of cybersecurity development - corruption in software acquisition practices. Read more here: atlanticcouncil.org/in-depth…
103
Design homogeneity and concentration can expose users to more systemic cybersecurity risks. @Jshermcyber, and Jessica Edelson examine the impacts on web browsers in “Homogeneity and Concentration in the Browser”. atlanticcouncil.org/content-…
124
What do intelligence and regional studies have to do with cybersecurity? Here's one argument: stop thinking about cybersecurity as a tech problem and treat it as a social systems problem. Read more by @SimonPHandler, @emmacs26, & Trey Herr here: warontherocks.com/2021/05/cy…
1
2
131
A regime for software liability must be designed in light of its policy goals. Our report covers how different goals, like incentivizing security versus helping harmed businesses, point towards different standards and mechanisms. atlanticcouncil.org/in-depth…
1
170
📢 Guess who’s back, back again! #Cyber912 is heading to Austin, TX, Jan 30–31, 2027 with our partners @StraussCenter Registration is open through Dec 7! Sign up: form.jotform.com/Cyber_State…
1
1
1
167
Autonomy is a major trend in artificial intelligence right now and one of the more real areas of risk around models' cyber capabilities. Our report, “Hacking with AI,” discusses these risks and how policymakers should begin to respond. atlanticcouncil.org/in-depth…
1
113
Cybercrime and cyber fraud, from ransomware to financial data fraud and romance scams, have reached a new high in Southeast Asia. In Myanmar, this not only facilitates traditional crime, but also directly supports the ongoing civil war. atlanticcouncil.org/in-depth…
192
How is the government responding cyber workforce development? Rob Shriver says the focus is on skills-based hiring, letting candidates “demonstrate that you’ve got the skills to do the job.” See the full conversation here: atlanticcouncil.org/event/un…
113
We asked teams about their experience competing in the 2025 Washington, DC #Cyber912 competition and developing policy recommendations in response to a cyber crisis with implications for rural healthcare infrastructure. Check out their reflections here: atlanticcouncil.org/content-…
124
As more actors look to purchase offensive cyber capabilities (OCC) from private companies, the continued proliferation of OCC poses a national security threat to the US and its allies. Learn more here: atlanticcouncil.org/in-depth…
131
We asked 5 Cyber 9/12 alumni if they could participate in 9/12 again, would they? Gabriel Cajiga said “I would definitely do it again!” Learn what Frances Schroeder, Grant Versfeld, Nitansha Bansal and Tionge Mughogho have to say: atlanticcouncil.org/content-…
159
NATO’s challenge isn’t collecting intel—it’s connecting it. Fragmented systems + selective sharing = slower response times. This report explores how cloud-enabled ISR can unlock faster, trusted intelligence across the Alliance. atlanticcouncil.org/in-depth…
172
How can cyberattacks on OSS be mitigated? Fiona Krakenbürger says, “There is clearly no silver bullet, but there are ways to improve the resilience and security posture of software projects” Read more in CSI's 5x5: atlanticcouncil.org/content-…
137
Spyware doesn't travel from vendor to target in a straight line. Chains of intermediaries add layers of opacity at every step. This issue brief maps who these actors are and why intermediaries matter in driving proliferation atlanticcouncil.org/in-depth…
191
The era of global pooled health datasets is ending—at least in Europe. The EU is shifting toward federated, local data infrastructure under GDPR, the AI Act, and EHDS. This report explains what comes next. atlanticcouncil.org/in-depth…
1
1
152
Today, like every day, would be a great day for policymakers to demand more transparency and collaboration from the biggest cloud service providers, whose infrastructure is key for many important sectors. Here's a starting point -> atlanticcouncil.org/in-depth…
1
123