The SolarWinds campaign reveals important lessons for U.S. cyber strategy.

Lawfare’s biweekly roundup of U.S.-China technology policy and national security news.

The timeline of the breach is still unfolding, but it is not too early to offer a number of high-level observations and predictions.

COVID-19 apps in the United States have been ineffective as public health tools because they are designed primarily to protect privacy. Poor design choices, effectively mandated by Google and Apple, were...

Nearly all U.S. companies should have no difficulty showing that U.S. surveillance authorities at issue will not interfere with their ability to comply with standard contractual clauses. 

Are big changes afoot at Cyber Command? What are the relevant legal constraints?

The infiltration by Russia emphasizes the importance of implementing the layered deterrence strategy recommended by the U.S. Cyber Solarium Commission.

The breach underscores the importance of integrating defend forward into a broader national cybersecurity strategy.

Inherent technical limitations mean that contact-tracing apps, at best, play a relatively small public health role and, at worst, risk doing more harm than good.