Cyber Statecraft Initiative

Tackling the Spyware Crisis Domestic investment in spyware is undermining national security at all levels of society.

We can’t afford to fund the tools that spy on us. US investment in spyware is a slow-rolling threat to national security. nationalinterest.org/blog/techlan...

Elmo Let The Challenge Commence GIF ALT: Elmo Let The Challenge Commence GIF

After reviewing a record number of applications, we've confirmed 42 teams for the DC #Cyber912 Strategy Challenge, held with Johns Hopkins SAIS!

What's next?

Teams from 35 universities across 9 countries are now developing policy recommendations in response to Intelligence Report I.

Mythical Beasts: Diving into the depths of the global spyware market The second edition of the Mythical Beasts project assess how the global spyware market has developed and changed over the past year.

Spyware vendors continue to operate from jurisdictions with limited corporate transparency. The report argues for structural reforms to global registry systems: www.atlanticcouncil.org/in-depth-res...

The impact of corruption on cybersecurity: Rethinking national strategies across the Global South As the Global South prepares for the next stage in ICT development, governments must prioritize policies that reduce corruption in critical network software procurement to protect those countries'…

Across those in the Global South, not one of the 23 existing national cybersecurity strategies contain the terms “corruption” or “pirated software"—neither do the leading security roadmaps. Robert Peacock addresses this crucial missing policy area here: www.atlanticcouncil.org/in-depth-res...

Tackling the Spyware Crisis Domestic investment in spyware is undermining national security at all levels of society.

The US has long led efforts to constrain spyware proliferation, but US capital is quietly keeping it alive. Paragon Solutions and Candiru have recently been procured by US firms— that’s a national security contradiction we can’t ignore. More below: nationalinterest.org/blog/techlan...

🎊That's a wrap on Day 1 of the 2026 Paris #Cyber912 Strategy Challenge.🎊

Congrats to all the teams moving forward to Day 2!

2026 Washington, DC Cyber 9/12 Strategy Challenge Registration Please click the link to complete this form.

Deadline extended!

Sign up to compete at the 15th annual #Cyber912 Strategy Challenge on Mar 7–8, 2026 at Johns Hopkins SAIS or virtually.
Register by Feb 4: form.jotform.com/Cyber_Statec...

Curious how policy leaders respond to cyber crises?

At the #Cyber912 Strategy Challenge, students brief experts on a fictional scenario in an immersive simulation.

Join us and Johns Hopkins SAIS as a competitor or judge on March 7-8, 2026 by signing up: form.jotform.com/Cyber_Statec...

The 15th annual #Cyber912 Strategy Challenge is back on March 7–8, 2026 in Washington, DC with Johns Hopkins SAIS.

Test your skills in a live cyber crisis simulation and win prizes in the process. Teams registration ends January 26, 2026.

Register here: form.jotform.com/Cyber_Statec...

Mythical Beasts: Diving into the depths of the global spyware market The second edition of the Mythical Beasts project assess how the global spyware market has developed and changed over the past year.

️6️⃣ core trends from the first Mythical Beasts report such as jurisdictional arbitrage, serial entrepreneurship, & vendor obfuscation remain highly consistent. This predictability presents opportunities for policy-action. Read how in: www.atlanticcouncil.org/in-depth-res...

The impact of corruption on cybersecurity: Rethinking national strategies across the Global South As the Global South prepares for the next stage in ICT development, governments must prioritize policies that reduce corruption in critical network software procurement to protect those countries'…

A benefit that few could have predicted in 2016, says Robert Peacock, is the role that the return of licensed software vendors would have in countering the much larger volume of cyberattacks that accompanied the 2022 Russian invasion.
www.atlanticcouncil.org/in-depth-res...

Since 2017, Ukraine has adopted a range of anti-corruption initiatives including ProZorro, an e-government tool for public procurement. Ukraine's continued commitment to this tool helped foster a digital environment newly hospitable to global software developers.

What do we know about cyber operations during militarized crises? Policymakers must critically examine assumptions and claims that cyber operations can serve as de-escalatory crisis offramps.

How can cyber capabilities support crisis & contingency operations? Not just through independent operation during a crisis "but through continuous campaigning in day-to-day strategic competition."

Read the full Michael Fischerkeller piece here: www.atlanticcouncil.org/in-depth-res...

Tackling the Spyware Crisis Domestic investment in spyware is undermining national security at all levels of society.

US investment not only funds these companies—it legitimizes them. More money. More talent. More risk to Americans. Overview of this issue set and how to combat it in: nationalinterest.org/blog/techlan...

The #Cyber912 Strategy Challenge is a leading cyber policy competition where students work in teams to tackle a realistic cyber crisis.

Want in for 2026?

Sign up to join us and Johns Hopkins SAIS as a competitor or a judge: form.jotform.com/Cyber_Statec...

The 15th annual #Cyber912 Strategy Challenge returns on March 7–8, 2026 in Washington, DC with Johns Hopkins SAIS.

Registration is open for both student teams & judges--don't miss out!

Learn more here: form.jotform.com/Cyber_Statec...

The 15th annual Washington, DC #Cyber912 Strategy Challenge will be held on March 7–8, 2026 in partnership with Johns Hopkins SAIS.

This competition will be hybrid and registration is open for student teams & judges. Register by January 26, 2026!

Sign up here: form.jotform.com/Cyber_Statec...

From simulation to strategy: How Cyber 9/12 prepares students for real-world cyber crises Competitors and judges from the 2025 New York City Cyber 9/12 Strategy Challenge share their reflections on the competition's scenario and cyber workforce development.

How does #Cyber912 equip students with the skills needed for policy analysis, teamwork, and communication?  

We gathered perspectives from competitors and judges of the 10th annual New York City Cyber 9/12 Strategy Challenge with Columbia SIPA here: www.atlanticcouncil.org/content-seri...

What do you mean you haven’t registered for #cyber912 Austin yet? Time is running out! Grab your team and secure your spot by tonight. See you in Austin on Jan. 31–Feb. 1, 2026!
Register now: form.jotform.com/252924286666...

Ready to test yourself against the cyber crises of tomorrow? Registration for #Cyber912 Paris closes next week. Secure your spot today! See you at University of Paris 8 on Jan 28–30, 2026! Register here: form.jotform.com/252715245052...

What do we know about cyber operations during militarized crises? Policymakers must critically examine assumptions and claims that cyber operations can serve as de-escalatory crisis offramps.

“Inadvertent escalation in a militarized crisis could result from the application of any instrument of national power or any military capability” – Could cyber operations be considered an inadvertent escalation? Michael Fischerkeller examines:

www.atlanticcouncil.org/in-depth-res...

Mythical Beasts: Diving into the depths of the global spyware market The second edition of the Mythical Beasts project assess how the global spyware market has developed and changed over the past year.

US policy actions like sanctions, visa bans, and executive orders have not prevented US capital from sustaining spyware firms. The contradiction is stark and needs to be addressed: www.atlanticcouncil.org/in-depth-res...

The impact of corruption on cybersecurity: Rethinking national strategies across the Global South As the Global South prepares for the next stage in ICT development, governments must prioritize policies that reduce corruption in critical network software procurement to protect those countries'…

In his piece, fellow Robert Peacock highlights the dangers facing countries with outdated and corrupt software acquisition practices - and offers recommendations for how governments should address these challenges.
www.atlanticcouncil.org/in-depth-res...

Tackling the Spyware Crisis Domestic investment in spyware is undermining national security at all levels of society.

US Congress members were targeted by Predator spyware in 2023. Guess who helped fund the developers? American investors. Both Paragon Solutions and Candiru have recently been procured by US firms. It's time we rethink who our dollars empower: nationalinterest.org/blog/techlan...

Did you know @BlackHatEvents.bsky.social has gifted passes to their conferences in Asia, the US, and Europe for winning teams of the 2024-25 #Cyber912 competition season? Through this gift, students from around the world will access timely infosec debates and networking opportunities.

Black Hat Europe 2025 Black Hat Europe 2025

Next week our #Cyber912 competition winners from Dundee, Geneva, and Paris will be heading to the ExCeL London for Black Hat Europe 2025! Comment below if we’ll see you there! www.blackhat.com/eu-25/

Join us in Paris, France on Jan 28–30, 2026 for #Cyber912 Paris! Collaborate with your peers, tackle complex scenarios, and sharpen your cyber policy acumen – the perfect way to start 2026. Register now!

form.jotform.com/252715245052...

Dreaming of Paris lights, cafés, and croissants? We’ll see you all in Paris, France on Jan 28–30, 2026 for #Cyber912 Paris! Strategy, networking, and pastries, what more could you want to kick off your school year? Register now!

form.jotform.com/252715245052...

Mythical Beasts: Diving into the depths of the global spyware market The second edition of the Mythical Beasts project assess how the global spyware market has developed and changed over the past year.

Brokers and resellers obscure vendor-client relationships and distort pricing in the spyware market 🏛 Their influence in shaping this market warrants far greater scrutiny. More in: www.atlanticcouncil.org/in-depth-res...

The impact of corruption on cybersecurity: Rethinking national strategies across the Global South As the Global South prepares for the next stage in ICT development, governments must prioritize policies that reduce corruption in critical network software procurement to protect those countries'…

As more and more countries develop national cyber strategies, they must look outside traditional 'cybersecurity' issues areas and, for the first time, says Robert Peacock, identify procurement corruption as a cybersecurity risk. www.atlanticcouncil.org/in-depth-res...