Cybersecurity

The CrashOverride program represents the first-in-the-wild case of a generic automated attack: one that is designed to affect all systems of a given family, not just a particular installation. If someone were to couple this warhead to a self-propagating worm for delivery, it could constitute a global threat.

After months of international consternation, China’s cybersecurity law (CSL) went into effect today. For a deep dive on what foreign companies should expect from the law, see Samm Sacks’s excellent piece posted to Lawfare this morning.

With the attention of the United States and its allies at present focused on North Korea's nuclear activity, North Korea potentially has greater latitude to act aggressively in the cyber realm, especially against the private sector.  

The most important policy question raised by the WannaCry ransomware fiasco is not the most obvious one.