Jamie MacColl
jamiemaccoll.bsky.social
Jamie MacColl
@jamiemaccoll.bsky.social
Senior Research Fellow @rusi.bsky.social | Senior Research Associate @virtualroutes.bsky.social | Usually researching ransomware and cybercrime | Sometime indie landfill guitarist
Reposted by Jamie MacColl
"That should make us all pause and think. Every organisation needs to identify the networks that matter to them, and how to protect them better, and then plan for how they'd cope if the network gets disrupted."

Prof Ciaran Martin Martin on JLR's recent cyber attack👇
https://ow.ly/QEMu50Xg7Zz
JLR hack 'is costliest cyber attack in UK history', experts say
The cyber attack on Jaguar Land Rover is estimated to cost £2.1bn, the Cyber Monitoring Centre says.
ow.ly
October 22, 2025 at 10:01 AM
Reposted by Jamie MacColl
My statement on the allegations of a Chinese state compromise of Britain’s most highly classified government systems in 2020

www.linkedin.com/posts/cyberc...
My statement on the allegations of a systematic Chinese state compromise of Britain’s classified information systems in 2020 STARTS “Following the reports earlier today in The Times, as the senior… ...
My statement on the allegations of a systematic Chinese state compromise of Britain’s classified information systems in 2020 STARTS “Following the reports earlier today in The Times, as the senior o...
www.linkedin.com
October 15, 2025 at 9:47 PM
We have extended the deadline to submit abstracts for a book of papers on offensive cyber operations. We’re particularly keen for more submissions from the private sector so if you’re sitting on research and want to write a paper rather than give a conference presentation format then submit it here!
🚨The deadline to submit your abstract on offensive cyber operations for the UK Cyber Effects Network has been extended to 6 October. Share your insights and submit your abstract as soon as possible - details below.
Edited Collection on Cyber Effects: Call for Abstracts
The UK Cyber Effects Network is now accepting abstract submissions for original papers that address conceptual, doctrinal, legal, policy, capability and technological aspects of offensive cyber operations.
t.co
September 29, 2025 at 5:40 PM
Reposted by Jamie MacColl
It's gonna be interesting to see how this one plays out. There's louder calls coming in to the UK gov to bail out JLR's supplies, as they've started laying off staff after JLR's ransomware/extortion incident.

But JLR made £2.5bn in profit last year.

www.bbc.co.uk/news/article...
Jaguar Land Rover: Some suppliers 'face bankruptcy' due to hack crisis
The government has been urged to
www.bbc.co.uk
September 14, 2025 at 4:15 PM
Reposted by Jamie MacColl
🚨We're excited to launch a new initiative to build a UK community focused on offensive cyber operations. The goal is to generate new ideas and develop the next generation of experts in this field. Learn more, including how to get involved, below.
UK Cyber Effects Network Launches
RUSI and the National Cyber Force are launching a new initiative to develop a UK community of interest on offensive cyber and other cyber effects operations.
www.rusi.org
September 10, 2025 at 4:08 PM
Reposted by Jamie MacColl
"I can’t see most cybercriminals taking a limited UK payment ban into account for their operating models. It would probably take a full payment ban to make the criminals sit up and take notice" notes RUSI's @jamiemaccoll.bsky.social to @thetimes.com.
.
Businesses banned from paying hackers’ ransoms to target cybercrime
New laws mark some of the strictest in the world to target hackers, requiring the private sector to seek government permission before paying cybercriminals
www.thetimes.com
July 23, 2025 at 8:22 AM
Reposted by Jamie MacColl
The British government’s proposals to overhaul its ransomware strategy reached a minor milestone on Tuesday as the Home Office published its formal response to a consultation on amending the law, but questions remain regarding how effective the measures will be...
UK moves forward with plans for mandatory reporting of ransomware attacks
Britain's Home Office wants public feedback on several anti-ransomware proposals, including a requirement for all victims to report attacks to law enforcement.
therecord.media
July 22, 2025 at 12:40 PM
Reposted by Jamie MacColl
In their latest for Binding Hook, the @nca-uk.bsky.social’s William Lyne and @rusi.bsky.social’s @jamiemaccoll.bsky.social discuss the problems with media and cyber industry descriptions of #ransomware groups’ #biggamehunting: bindinghook.com/articles-bin...
It’s time to move the ransomware conversation past big game hunting
Presenting ransomware as targeted instead of opportunistic leaves organisations that may not consider themselves prime targets at risk.
bindinghook.com
June 18, 2025 at 6:32 AM
On 7 July, 1700-1830 I’ll be moderating a discussion about @joetidy.bsky.social’s new book “Ctrl+Alt+Chaos” at RUSI. We’ll be discussing why teenage hackers have become so dangerous what we can do about the problem. Joe will also be selling and signing books: my.rusi.org/events/how-t...
How Teenage Hackers Hijack the Internet
The BBC’s Cyber Correspondent, Joe Tidy, and a panel of experts discuss the rise of teenage hackers and the consequences for society.
my.rusi.org
June 17, 2025 at 8:51 AM
Reposted by Jamie MacColl
The SDR outlines sensible steps to improve defence in the cyber domain. But it leaves details to be developed, particularly about how the UK should operate in cyberspace, writes @joedevanny.bsky.social.
Cyber and the Strategic Defence Review: All Pervasive But Light on Details
The SDR outlines a series of sensible steps to improve the coherence of defence in the cyber domain. But it leaves a lot of details to be developed in implementation, particularly about how the UK sho...
www.rusi.org
June 11, 2025 at 11:03 AM
Reposted by Jamie MacColl
I would argue that this chaos is what made the charts so much fun: trash cheek by jowl with treasure. Contrast the slow-moving homogeneity of the current Top 40. It's not that it was always good — it's that it was always interesting.
What Katie told her 19yo: "Massive Attack is the music we grew up with"

What Katie didn't tell her 19yo: "Unfinished Sympathy only peaked at number 13, in a week when the top three comprised a song from a jeans ad, a track featuring the lyrics 'stonky stonky, nose on your conky', and Bart Simpson"
Judging from my 19yo, The Kidz were very excited to see Massive Attack in hackney the other night. Looked like a belting gig
June 8, 2025 at 8:43 AM
Reposted by Jamie MacColl
Whats in the news atm currently focused on SF and the triples. However, 4 years later, my interpreter and his family are still stuck in hiding in Afghanistan. Home Office do not care about his plight - I've seen the emails - and HMG couldn't care less.
Absolutely shocking. “A UK Special Forces officer personally rejected 1,585 resettlement applications from Afghans w/ credible links to special forces…MoD told the court the officer may have been connected to the ongoing inquiry into alleged war crimes” www.bbc.co.uk/news/article...
One Special Forces officer blocked 1,585 Afghans from settling in UK
Documents shown to court by MoD show the officer rejected every application referred to him in the summer of 2023.
www.bbc.co.uk
May 23, 2025 at 8:45 PM
Reposted by Jamie MacColl
This reminds me of my favourite Chatham House rule story 🧵

Way back in the pre-crash boom period, Gordon Brown as Chancellor hosted one of his big global investment conferences at the QEII in London.

Muggins here, a junior Treasury official, had a cheap seat as one of the organisers…1/
THAT ISN'T THE CHATHAM HOUSE RULE
May 20, 2025 at 9:47 AM
Reposted by Jamie MacColl
Gareth Mott of @rusi.bsky.social highlights just how impactful the Legal Aid Agency breach could be, especially for victims of domestic violence. These crimes have a real world impact on some of the most vulnerable, and that's far too easy to forget.

Full story here: therecord.media/uk-legal-aid...
May 19, 2025 at 1:02 PM
Reposted by Jamie MacColl
The news that M&S is likely to use all of its £100 million of cyber insurance coverage underscores the challenges ransomware poses to both organisations and the insurance industry. Revisit our study that contributes to this discussion by examining the role of insurance in combating ransomware.
Cyber Insurance and the Ransomware Challenge
A study examining the role of cyber insurance in addressing the threats posed by ransomware.
www.rusi.org
May 14, 2025 at 8:37 AM
Reposted by Jamie MacColl
We are excited to launch a new program in the Netherlands. The goal is to give students hands-on experience in cybersecurity, with courses like malware reverse engineering, digital forensics, and ransomware economics.
🇳🇱 #Cybersecurity Seminars program expands to the Netherlands under the leadership of Virtual Routes! It focuses on enabling students to help local community organizations defend against #RansomwareAttacks. Learn more about the program and register interest: virtual-routes.org/initiatives/...
May 14, 2025 at 7:51 AM
It’s such a failure of the security industry that I’ve spent the last few days trying to have serious conversations with journalists and non-experts about ransomware and we have to refer to a network of destructive criminals as ‘scattered spider’ — totally undermines the gravity of the situation
May 2, 2025 at 8:52 PM
As another wave of ransomware attacks hits prominent UK organisations, I am again returning to @alexmartin.bsky.social's piece from last summer about why ransomware/cyber security doesn't cut through politically. I think @tcstvns.bsky.social nailed it on the head therecord.media/uk-election-...
May 2, 2025 at 11:48 AM
Reposted by Jamie MacColl
Eleven months on from the ransomware attack against Synnovis, the company has still not informed patients about the sensitive medical data that the cybercriminals published online.
Patients left in the dark months after cybercriminals leak testing lab data
It's been almost a year since the Qilin cybercrime group breached sensitive data from U.K. pathology services company Synnovis, and its patient information page is still short on details about what wa...
therecord.media
May 2, 2025 at 8:15 AM
Reposted by Jamie MacColl
All these retail cyber attacks - or actions to prevent cyber attacks - are being pegged to Scattered Spider also known as Starfraud, UNC3944, Scatter Swine, and (my personal favourite nickname) Muddled Libra. But does anyone have any solid evidence for this? Please get in touch!
May 2, 2025 at 7:23 AM
Reposted by Jamie MacColl
New UN report on pig butchering / crypto scamming is a comprehensive and very sad look at this multibillion dollar business. Includes analysis of human trafficking enabling these crimes, work with global organized crime, and how this threat is expanding from SE Asia.

www.unodc.org/roseap/uploa...
www.unodc.org
April 24, 2025 at 2:31 PM