🚨NEW REPORT🚨 "This Job Post Will Get You Kidnapped: A Deadly Cycle of Crime, Cyberscams, and Civil War in Myanmar" by Emily Ferguson and @emmacs26, examines the expansion of kidnap-to-scam operations amidst the Myanmar Civil War.

dfrlab.org/2023/11/13/thi… Cyberscams, run by criminal syndicates out of empty hotels and casinos in war-torn Myanmar, have become a multimillion-dollar criminal enterprise by exploiting thousands of vulnerable people across Southeast Asia and forcing them, in turn, to exploit people all around the world.

🚨🔎🚨 New issue brief - "Critical infrastructure Cybersecurity Prioritization: A Cross-Sector Methodology for Ranking Operational Technology Cyber Scenarios and Critical Entities" from @CyberSnark! Short 🧵
atlanticcouncil.org/in-depth-resea… Threading the tapestry of risk across critical infrastructure requires a more granular and purposeful model than the current approach can deliver. Informing decision-makers requires deeper analysis of criticality amongst critical infrastructure targets.
atlanticcouncil.org/content-series…

🚨NEW REPORT🚨 Today, @cyberstatecraft is dropping our new report - “Raising the Colors: Signaling for Cooperation on Maritime Cybersecurity” by @loomisoncyber, @VirpratapVS, Dr. Gary Kessler, and @noktec. THREAD 🧵 atlanticcouncil.org/in-depth-resea… The Maritime Transportation Sector (MTS) sits at the heart of global supply chains, energy markets, and national security— yet, despite the recent increase of attacks targeting key infrastructure, maritime cybersecurity risks remain under-appreciated. atlanticcouncil.org/in-depth-resea…

Looking for analysis on @POTUS' recent Executive Order on Improving the Nation's Cybersecurity? We've got you covered. THREAD 🧵

First, listen to @BobbyChesney and @CyberStatecraft director Trey Herr break it down on the @lawfareblog podcast. 1/4
lawfareblog.com/lawfare-podcas… Second, we brought together @likethecoins, @NMAndersen, @wendynather, @_kate_stewart, @drdavidawheeler, and @WeldPond to mark up the executive order.

See their annotations throughout the text here. 2/4 atlanticcouncil.org/blogs/new-atla…

THREAD | A groundbreaking espionage operation targeting USG, the #Sunburst incident was also software supply chain compromise similar to 31 attacks observed since 2010. Using our Breaking Trust report @Cyberstatecraft walks through the incident. 1/16

atlanticcouncil.org/in-depth-resea… COMPROMISE BUILD: Malicious code inserted into a SolarWinds software library compromised the Orion software in development. Here, we track the compromise along a visualization of 115 software supply chain attacks and vulnerability disclosures since 2010. 2/16