Cyber Statecraft

🚨 NEW BRIEF: AI is both a target and a tool for attackers. The cloud infrastructure it runs on doesn’t have the vulnerability management regime to match. New CSI brief on what needs to change. atlanticcouncil.org/in-depth-resea…

EU vs US on health data and AI: Open, global datasets vs. localized, regulated infrastructure. This divide is growing, and reshaping innovation. Read our report to understand the stakes. atlanticcouncil.org/in-depth-resea…

Russia's reliance on Chinese digital technology grows amid its isolation. As Western tech leaves the Russian market, China plays a growing role. What does this mean for global tech dynamics? Read more here: atlanticcouncil.org/in-depth-resea…

🚨 As cybersecurity threats evolve, so do the roles of its executives. It's no longer just about tech but securing the mission of an organization. 🔐 Read what these senior cybersecurity executives say: atlanticcouncil.org/content-series…

Join us on May 21 at 1:00pm at the Capitol Visitors' Center for an event on how the US should govern health data in the AI era while protecting innovation, privacy, and national security. Register: atlanticcouncil.org/event/health-d…

Cloud computing is the backbone of much of the modern internet -- and, increasingly, critical infrastructure systems like those in finance and transportation. How should policymakers adapt? Check out our report Critical Infrastructure and the Cloud -> atlanticcouncil.org/in-depth-resea…

We asked teams about their experience competing in the 2025 Washington, DC #Cyber912 competition and developing policy recommendations in response to a cyber crisis with implications for rural healthcare infrastructure. Check out their reflections here: atlanticcouncil.org/content-series…

Curious why an FSB officer went to prison for taking cybercriminal payoffs? It's not about cracking down on cybercrime—it's about the Kremlin’s interest in protecting its ecosystem. Read the full story here: 🔗 atlanticcouncil.org/content-series…

Trust is a critical part of supply-chain security. How do we build, maintain and defend that trust when it’s been broken? Check out our Breaking Trust reports and dataset to see more! atlanticcouncil.org/programs/cyber…

Overwhelmed trying to figure out a simple list of bad cybersecurity practices that you should probably avoid? Boy, do we have a graphic for you.... atlanticcouncil.org/in-depth-resea…

Despite bans and sanctions, spyware companies keep thriving—with US dollars. US firms are investing in tools that harm US interests. The Trump administration can counter this problem set. Learn how in: nationalinterest.org/blog/techland/…

Policymakers must prioritize understanding embedded cyber-physical risks in operational technology. If you agree, check out this report: atlanticcouncil.org/in-depth-resea…

Join us on May 21 at 1:00pm at the Capitol Visitors' Center for an event on how the US should govern health data in the AI era while protecting innovation, privacy, and national security. Register: atlanticcouncil.org/event/health-d…

Intermediaries don't just facilitate transactions; sometimes they are the only reason it is possible. Read how intermediaries have been leveraged to facilitate OCC transactions that bypass export controls and trade bans in atlanticcouncil.org/in-depth-resea…

In his issue brief, fellow Robert Peacock highlights the oft-overlooked dimension of cybersecurity development - corruption in software acquisition practices. Read more here: atlanticcouncil.org/in-depth-resea…

Cloud myth #1: All data is created equal. Fact: User data, derived data, and system data are all different in terms of their uses, sensitivities, and security properties. Conversations about where to localize data should account for these differences. atlanticcouncil.org/in-depth-resea…

The global spyware market is evolving 🌎 The second edition of the Mythical Beasts project details a resilient and expanding ecosystem of surveillance actors. Read more in: atlanticcouncil.org/in-depth-resea…

We asked Ayan Islam, Merili Soosalu, Richard Harris, Eric Novotny, and Nelson Abbott 5 questions about Strengthening the Cyber Workforce– see what they had to say on it here: atlanticcouncil.org/content-series…

“Absent direct experience, all one can rely on is academic research”—cyber operations have never been used during a military crisis between two nuclear-armed states. What happens if this Rubicon is crossed? See this piece from Michael Fischerkeller: atlanticcouncil.org/in-depth-resea…

The #aviation industry is global & complex and everyone has a role in contributing to safe, secure & resilient aviation operations. Our report “Aviation Cybersecurity: Scoping the Challenge” maps the diverse perspectives across the aviation ecosystem. atlanticcouncil.org/in-depth-resea…

Did you know? Out of 195 countries, over 80 have procured spyware from commercial vendors. Our report shines a light on this global issue, calling for increased transparency and better regulation atlanticcouncil.org/in-depth-resea…