NEW POST: Is Canada morally leaderless? emmettmacfarlane.substack.com/p/is-canada-...

I have started doing weekly surveys of cyber news with a focus on Canada. www.cyberincontext.ca/p/weekly-new...

Some thoughts from me in Bloomberg.

Meta has maintained a years-long news blockade of Canada to bully Ottawa into dropping a meager attempt to make the company compensate the journalism organizations it systematically defunded. It's time Canada stop being so chickenshit and do something about it. www.thestar.com/opinion/star...

MDA and Telesat right now.

Hey, look Parliament if Canada! You aren't the only one anymore.

GET TO KNOW SOME OF THE INTERNATIONAL TREATIES AND ORGANIZATIONS WE JUST WITHDREW FROM: European Centre of Excellence for Countering Hybrid Threats - Prepares NATO members for threats that destabilize democratic institutions, like disinformation, coercive diplomacy or economic influence.

A strong science culture is a contributor to innovation, growth, health, well-being, democratic integrity and a resource for navigating the current malaise. But what is it, exactly? Building on work by the @cca-reports.ca, Actua has developed a framework for discussion. actua.ca/wp-content/u...

NATO has maintained for over a decade that a cyber attack could involve article 5, but adherence to Tallin Manual interpretation means it would need to arise to the level of a physical attack to likely initiate article 5 vote. This was also when NATO allies were on friendly terms.

I'm speaking at the @SANSInstitute #CTISummit on an operation against #Rhadamanthys years before #OperationEndgame. https://www.sans.org/u/1CtB

Grateful for the insight from one of Canada's leading cyber security experts. Please give my latest @cdnaffairs.bsky.social article a read. 🇨🇦💻

My thanks to @samforster.bsky.social for talking with me for his latest article. A great article that gives a good overview of cyber operations and their role and what CAFCYBERCOM is doing. www.canadianaffairs.news/2025/12/21/c...

End the year with completing my dissertation? Nope, pneumonia time.

hmm... "France is investigating whether an organised group linked to a “foreign power” may have been involved in the malware infection of a passenger ship that would allow it to be controlled remotely." www.france24.com/en/live-news...

Age verification will mean, in many places, that people who want to watch legal pornography will have to create an account on a porn site as part of the verification process. Here we can see how one of the largest sites in the world can’t protect user data.

So, remember how Carney keeps talking about AI and Cloud data centers as if they're the same? techcrunch.com/2025/12/13/a...

In the "everyday more bad news" category: Trump Administration Turning to Private Firms in Cyber Offensive 🧵 www.bloomberg.com/news/article...

News is that Trump is looking to allow private firms to conduct offensive cyber operations. This has been in the works all year. www.cyberincontext.ca/p/america-wa...

Can we stop having most big hacker conferences in the U.S. please, as only people who support Trump publicly will be allowed into the country from overseas.

The names of two partial owners of contractor firms linked to China's Salt Typhoon hacker group also appeared in records for Cisco's "Networking Academy" global training program—years before those hackers targeted Cisco's devices in their sweeping spy campaign. www.wired.com/story/2-men-...

Canada is pushing the idea of “digital sovereignty,” yet a Canadian court just disregarded France’s own data sovereignty law. This case has major implications for cross-border data access and cloud service providers. youtu.be/L2Mk9z1nKzQ

In light of recent discussion of Arctic communications, I'm reminded of a book chapter I wrote on the CAF in the Arctic and the risks of relying on satellite communications. TL;DR: Don't expect to be able to use satellite comms in a conflict www.taylorfrancis.com/chapters/edi...

Canada's cyber defence public-private partnership is more private than public, argues @cyberincontext.ca

It’s official — the Policy Village schedule for #BSidesOttawa is now posted. Join sessions where security, policy, and innovation meet. 🔗 bsidesottawa.ca/policy-villa... #PublicPolicy #CyberSecurity #BSides

Cyber resilience starts local. Hear Shelly Bruce on grassroots cybersecurity at Policy Village, BSides Ottawa. #CyberSecurity #Grassroots

Policy Village at BSides Ottawa! A space where cybersecurity pros & policymakers connect. No tech workshops, no politics—just meaningful dialogue about how public policy impacts our field. All experience levels welcome! bsidesottawa.ca/ #BSidesOttawa #Cybersecurity

Bridging the gap between hackers & policymakers at BSides Ottawa's Policy Village. Dedicated time for dialogue, networking & understanding how government policy shapes cybersecurity. Bring your curiosity! Visit bsidesottawa.ca/ #InfoSec #PublicPolicy #BSidesOttawa

The Auditor General of Canada released a report on the federal government's cyber security. A lot are making a big deal out of it, but it's honestly not that bad. A lot of what we already knew, but I think this means I need to write why. www.oag-bvg.gc.ca/internet/Eng...

The Government of Canada wants to invest in AI and cloud data centres. Their mixed signals suggest they may not fully understand what this entails yet. www.cyberincontext.ca/p/canadas-mi...

This isn't the only bill that would give Trump sweeping new authorities. www.cyberincontext.ca/p/america-wa...

> No serious investment in Canadian cloud for defence > Canadians when they find out the Canadian government and military rely on American cloud providers

Since sovereign cloud is in the news again today...

Great scoop from @martinmatishak.bsky.social: The Trump administration has abandoned any intention of breaking up the joint leadership of U.S. Cyber Command and the National Security Agency, bowing to the reality of the enormous complexity of the task.

The Pentagon depends on commercial clouds without a doctrine to defend them. That gap is a liability rivals will exploit.

Dangerous thing about LLMs is not that they produce PhD level work. They don’t. It’s that they produce junior researcher level work. Flawed but decent material you can work with. So you ditch your farm team to save money. 10 years later your senior researcher bullpen is empty and you’re cooked 1/3

Posting Woods of Ypres until @canadianshieldinstitute.ca includes them in their newsletter. youtu.be/Hyc84XRy-PQ?...

In a DoD shake-up, Ashley Manning, the principal deputy assistant secretary of Defense for cyber policy, and Jonathan Owen, the acting deputy assistant secretary of Defense for homeland defense integration and defense support to civil authorities, have left the Pentagon. thehill.com/policy/defen...

New information from @canadianshieldinstitute.ca in their first "The National Interest" newsletter app.cyberimpact.com/newsletter-v...

“Less shy. More aggressive.” BDC is preparing a 360-degree plan to support Canada’s defence tech ecosystem—from dual-use startups to indirect fund investments.

The House Homeland bill to renew the 2015 Cybersecurity Information Sharing Act has been dubbed the Widespread Information Management for the Welfare of Infrastructure and Government Act, or WIMWIG: www.govinfo.gov/app/details/...

My fellow neurodivergent hackers are in shambles.

A key paper I have been trying to track down has so far only been found on a malware analysis website because someone submitted it to test it for malware.

Ed Snowden replied-all to a supervisor with an all-caps screed and was made to apologize to everyone on the email. His downloading of classified documents began the next day. The DNI comments that he cites as his reasons for action didn't happen until two weeks later.

wild how people want to get rid of autistic trans people and think that the Internet would still work

I'm in the meme phase of this chapter

Consumer credit reporting giant TransUnion warns it suffered a data breach exposing the personal information of over 4.4 million people in the United States.

This is an entire article about how city employees are barred from speaking to the press without permission and how weird that is for a U.S. city. It is also incredibly routine and basically the default in Canada…. www.modbee.com/news/politic...

A lone cybercriminal used Anthropic's vibe-coding LLM to automate a massive spree that hacked and extorted 17 companies. It did almost everything for him: Scoped out who to hack and how, organized the hacked material, helped him decide how much to ask each company for and wrote his extortion emails.