The market and the government need to move beyond just punishing corporations after major cybersecurity failures to steer them instead toward proactive and comprehensive cyber risk management.
Latest in Cybersecurity
On July 29, the U.S. Attorney’s Office for the Western District of Washington filed a criminal complaint against Paige A. Thompson for violating the Computer Fraud and Abuse Act by hacking into protected computers belonging to Capital One. The complete charging document is available here and below.
Attorney General William Barr delivered a keynote address at the International Conference on Cyber Security. The speech can be read here.
The National Guard should be taken more seriously as a national cybersecurity asset—but to do so will require commitment from both state and federal leaders.
The Verizon-Huawei dispute contradicts a view espoused by many experts, and even the Trump administration, about the relationship between national security and intellectual property rights such as patents.
Jim Miller and Neal Pollard offer an important and positive assessment of the strategy of persistent engagement. Here, the authors engage their perspective on how to describe cyber activity short of armed attack.
American policymakers have sought to persuade allies to ban the Chinese telecommunications company Huawei from developing 5G communications networks. But few nations have been convinced.
After Iran shot down a U.S. Navy Global Hawk, the Trump administration considered airstrikes but apparently settled for a cyber response instead. Here’s a primer on the legal issues involved.
The overemphasis on trespass in the Computer Fraud and Abuse Act disincentivizes the wrong types of activities in cyberspace, while also permitting activities that should be criminalized.
The New York Times’s report that the U.S. has deployed code inside Russia’s grid casts doubt on the premise that a demonstration of an offensive cyber capability will destroy its future value as an operational asset.