The Trickbot takedown and such military operations are a good idea only in cases that meet a five-part test of imminence, severity, overseas focus, nation-state adversary, and military as a last-ish reso...

Given the wide range of strategic and tactical benefits for Russia, a cyber operation with SolarWinds’ scale and sophistication should never be understood as “just espionage.” 

Executive branch action on software security is sorely needed, but should focus primarily on risk management rather than merely new reporting requirements.

Lawfare’s biweekly roundup of U.S.-China technology policy and national security news.

Stakeholders are increasingly advocating for a multilateral accord on government surveillance.

All three of President Biden’s picks for the top cyber positions in his administration are excellent choices. It would have been better, however, if one of them had experience more rooted in the private ...

We need to treat the cloud computing sector like the critical infrastructure it has become.

The U.S. Department of Justice recently announced that it undertook a law enforcement operation to remove malware from hundreds of victim systems in the United States. What’s the significance of the move?

The United States has just sanctioned various Russian entities in express response to the SolarWinds Orion exploit campaign. But what normative line, if any, is the U.S. saying that Russia crossed?

The justice’s speculations on the possibilities for regulating social media platforms are already changing the tone of the debate on the political right—but he makes a weak argument.