Can generative AI help hackers? By deconstructing the question into attack phases and actor profiles, this report analyzes the risks, the realities, and their implications for policy.

How Strategic and Regulatory Confusion Around TikTok Prevent an Effective National Security Response

Software liability—resurgent in the policy debate since its mention in the 2023 US National Cybersecurity Strategy—describes varied potential structures to create legal accountability for vendors of insecure software. This report identifies key design questions for such regimes and tracks their discussion through the decades-long history of the debate.

In Myanmar, cybercrime has become an effective vehicle through which nonstate actors can fund and perpetuate conflict.

A year-long project on protecting users’ data and privacy that analyzes the growing use of point-to-point messaging platforms in the United States and the implications their design and governing policies have for user privacy and free speech.

An examination of the time from December 2018, when protests against then-president Omar al-Bashir first broke out, and December 2022, when a framework agreement between civilian and military leaders came into play.

An examination of China’s online and offline channels for the dissemination of “discourse power” and the mechanisms of oversight on which such communications rely.

Critical infrastructure increasingly depends upon cloud computing. Policy must adapt its approach to risk management accordingly.

A look at West Africa’s information environment, with particular emphasis on local and international disinformation campaigns targeting the region and beyond.