What is the reality of the cyber threat to the UK? We hear from @mrjamessullivan.bsky.social Director of Cyber and Tech at the Royal United Services Institute- definitely worth a listen @thisisnotadrillpod.bsky.social

NEW EPISODE @gavinesler.bsky.social talks to @mrjamessullivan.bsky.social, Director of Cyber and Tech at RUSI, the Royal United Services Institute to discuss scale and nature of cyber attacks, and assess how governments can respond 👉 linktr.ee/DrillPod #cyber #tech #podcast

🚨 Applications now open for the UK Cyber Effects Network Fellowship Programme! Early-career professionals, don't miss this chance to deepen your knowledge of offensive cyber operations. Submit your application now. (Only open to NATO member citizens)

I've had it confirmed by my own sources now that it is DragonForce. Not 100% sure on Scattered Spider but looks like it might be hackers with links to them at least. But who's left from the group after all the arrests?! Also fascinating nugget- DragonForce's website has been hacked itself it seems!

Ransomware is becoming a huge problem – not just to private companies but to national infrastructure too. What can be done? @rusi.bsky.social's @jamiemaccoll.bsky.social explains the issue to @snellarthur.bsky.social and tries to Order the Disorder in this week's episode. Listen 👉 tr.ee/ksicr-3Wty

We are looking for a motivated Research Analyst to join our cyber and tech team at @rusi.bsky.social. You need to be able to work in London. Full job spec below 👇 royalunitedservicesinstitute.peoplehr.net/Pages/JobBoa...

@ciaranm.bsky.social is the opposite of a fearmonger, so it's important to listen when he concludes: "amidst all the noise and hype about cyber threats one thing has changed: the threat from China is significantly more serious than at any point in the digital age." rusi.org/explore-our-...

New on @rusi.bsky.social on the profound change in China as a cyber threat actor. @ciaranm.bsky.social outlines its new political, strategic and active footing in cyberspace that has laid the grounds for disruptive operations vs western critical infrastructure. Read how 👇 rusi.org/explore-our-...

Excellent piece on the relationship between the government and the private sector on technology and national security. With comments from @piahuesch.bsky.social @rusi.bsky.social

We're hosting a panel event at RUSI at 0900 on 3 April to discuss the UK government's ongoing consultation on ransomware legislation. I'll be joined by: @alexmartin.bsky.social @kathrynwestmore.bsky.social Verona Hulse-Johnstone (NCC Group) Edward Lewis, CyXcel my.rusi.org/events/asses...

Excellent write up from @kimzetter.bsky.social here on the nuances behind some of the recent headlines on US cyber security and cyber operations.

apparently CISA analysts have also been told not to follow or report Russian cyber threats, according to the @theguardian.com www.theguardian.com/us-news/2025...

New from @lmhurel.bsky.social @rusi.bsky.social and Gatra Priyandita from @aspi-org.bsky.social on responsible cyber behaviour in the Indo-Pacific. Case studies comprise Cambodia, Fiji, India, Indonesia, Japan, Pakistan and Taiwan - exploring how they pursue their interests in cyberspace. See 👇🌏

Join us 👇 my.rusi.org/events/the-r...

UK proposes to ban public bodies (schools, hospitals, etc) from paying cyber criminal ransoms. As others have said - this is a tangible and progressive move but these kinds of orgs don't pay up anyway. Also, as @jamiemaccoll.bsky.social says - these gangs don't pick targets based on public policy.

New opinion piece from @piahuesch.bsky.social and @tashbuckley.bsky.social on how the UK can balance competing ideological and regulatory approaches to technology in an unpredictable global political environment. bindinghook.com/articles-bin...

Turns out that just focusing on Huawei did not fully address the inherent vulnerabilities in legacy telecommunications networks… www.politico.com/news/2024/12...

The United States is already one of the most globally aggressive, methodical, and pervasive threat actors in cyber.

For the latest analysis on defence, security and international affairs, here is a list of RUSI staff members to follow on BlueSky (will be updated regularly as user base expands).

Reposting this fine write-up by @kathrynwestmore.bsky.social and @jamiemaccoll.bsky.social on Operation Destablise. A compendium of national security threats, showing the clear links between organised crime, sanctions evasion and hostile state activity. Read👇 www.rusi.org/explore-our-...

A thoughtful piece from @selenalarson.bsky.social for @rusi.bsky.social on how we (mis)categorise cyber crime groups compared to nation-state actors. Professional cyber crime groups are just as persistent as traditional APTs 'making them equally devastating in today’s threat landscape.' Read why 👇

Perhaps a bit early for this, but wanted to pick out a few of my favourite pieces from the year. I started 2024 looking at ransomware: “...doing as much harm to UK national security as anything Russia, China, Iran or North Korea does in cyberspace.” www.economist.com/internationa...

A significant law enforcement operation has showcased the clear links between organised crime, sanctions evasion and hostile state activity. This includes laundering the proceeds of ransomware. Read more from @rusi.bsky.social colleagues @kathrynwestmore.bsky.social and @jamiemaccoll.bsky.social 👇

Punchy intro to CDS Xmas lecture at RUSI from @MTSavill: “last month's announcement of cuts… is emblematic of a dept. that is struggling to reconcile people and money with existing commitments at a very time when the threats that we face are growing in scale and complexity”

A week today @rusi.bsky.social is hosting a panel discussion at The Science Gallery on the last ten years of cyber attribution. Join @shashj.bsky.social, @ciaranm.bsky.social, Sandra Joyce of Google, Samantha Seller of the FCDO, and Sean Newell of the DOJ. Register here: my.rusi.org/events/10-ye...

There is a lot in the speech to agree with. It helpfully frames Russian cyber ops as effort to "gain a strategic advantage, to degrade the states that support Ukraine", and points out Russian targeting of UK media, telcos, democracy and energy infra. www.gov.uk/government/s...

📅Join us on 5 December for a discussion on the history of cyber attribution with @shashj.bsky.social, @ciaranm.bsky.social, Sandra Joyce of Google, Sean Newell of the Department of Justice, and Samantha Seller of the FCDO. To secure your spot, register on our website now 👇

Great comments here from @jamiemaccoll.bsky.social

As Shashank says, this kind of language does Russia’s job for it. Part of the aim of Russia’s cyber operations is to try and cause panic/weaken societal resilience.

Germany cybersecurity strategy evolved in the wake of the 2015 Russian hack of the Bundestag and the 2022 invasion of Ukraine, but still faces limitations on countering cyber operations in peace time, writes Matthias Schulze: bindinghook.com/articles-bin...

Scoop: A record number of cyber incidents impacted Britain’s critical drinking water supplies this year without being publicly disclosed, according to information obtained by Recorded Future News.

🚨 New Research Drop: 🇰🇵 DPRK IT Workers | A Network of Active Front Companies and Their Links to China Summary: ⚪ Newly Disrupted Front Companies by USG ⚪ Impersonating US based software and tech orgs ⚪ Links to still-active front orgs, CN association Report: www.sentinelone.com/labs/dprk-it...

Please join us @rusi.bsky.social as @shashj.bsky.social chairs an expert discussion on the use of attribution as a tool of cyber statecraft. Part of wider research looking at cyber statecraft in an era of systemic competition. Full details 👇 @ciaranm.bsky.social my.rusi.org/events/10-ye...

How the world has changed: EU to demand technology transfers from Chinese companies. h/t Eleanor Olcott www.ft.com/content/f4fd...

Interesting nugget from Marcus Willett’s new Adelphi paper on why Five Eyes abandoned term “computer network attack (CNA)” in 2010s and went for “offensive cyber” instead.

North Korea’s sanctions evasion is evolving – now with cyber freelancers raising millions for the regime’s nuclear ambitions. Read more from Chandana Seshadri on Binding Hook: bindinghook.com/articles-hoo...

T-Mobile (telco) hacked as part of Chinese cyber intelligence operation. AI methods used methods in the operation. Losses unknown. But they could be huge. I.e. incalculable. www.wsj.com/politics/nat...

Some good insights here from @ericjgeller.com @wired.com on future US cyber policy and what Trump could do with Biden's cyber agenda. www.wired.com/story/trump-...

An excellent session earlier this week in Geneva at the World Economic Forum's Annual Cyber Meeting. We discussed what actually constitutes a cyber crisis, the range of interventions required to manage an incident, and how vital international cyber support has been for Ukraine.

My first post and from what I read on this platform, so far, so good! I will mainly talk about cyber public policy issues and our research @rusi.bsky.social. This week I was in Washington for the Counter Ransomware Initiative, where I showcased our research on ransomware and cyber insurance.