Insights & Research

Cybersecurity

FinCEN: Ransomware Payments Peaked in 2023

Ransomware payments peaked in 2023 at $1.1 billion with 1,512 reported incidents and dropped by a third to $734 million on 1,476 incidents in 2024, according to FinCEN.

Europe’s DMA: A Cybercriminal's Paradise?

Mobile devices serve many purposes and a single vulnerability can wreak havoc. This paper focuses on the DMA provisions around mobile OS's, identifies the key risks, and makes makes recommendations to void weakening the mobile ecosystem.

Cybersecurity Awareness Month Series: The CVE Program

The Common Vulnerabilities and Exposures (CVE) program is the global standard for identifying and naming software vulnerabilities.

Cybersecurity Awareness Month Series: Quantum Computing

This one-pager outlines what quantum computing is, why it poses both extraordinary opportunities and serious risks, and what steps policymakers and industry leaders must take to prepare.

Cybersecurity Awareness Month Series: CISA 2015

October is Cybersecurity Awareness Month, and we’re launching an educational one-pager series spotlighting the policies and frameworks that shape our collective defense.

CyberNext DC 2025 Recap

The Cybersecurity Coalition and the Cyber Threat Alliance hosted the 9th annual CyberNext DC, convening innovators, policymakers, and security experts to explore the pressing challenges and innovative responses shaping the cybersecurity space.

Shoring Up Subsea Security: A Comprehensive Action Plan to Promote Submarine Cable Resiliency, Security, & Governance

Submarine cables are the essential infrastructure enabling the global economy. This paper recommends enhancing the resilience of the ecosystem through greater route diversity and redundancy, rapid repair capacity, and secure supply chain.

Connect the Terms: The Cyber Policy Watchlist

Challenge yourself to connect words into four mystery categories.

Recap - Offensive Cyber Operations: Charting a Legal and Strategic Path Forward

The discussion around offensive cyber operation may be quickly moving from theoretical to practical and CCPL’s “Offensive Cyber Operations: Charting a Legal and Strategic Path Forward,” looked at the challenges around this topic.

Center’s New Amicus Brief in Epic v. Google: Competition Should Not Come at the Expense of Cybersecurity

In too many competition cases, cybersecurity has become an afterthought - the Center is seeking to halt this trend filing a series of amicus briefs seeking to educate the courts about core security consideration to correct lower-court overreach.