As another wave of ransomware attacks hits prominent UK organisations, I am again returning to @alexmartin.bsky.social's piece from last summer about why ransomware/cyber security doesn't cut through politically. I think @tcstvns.bsky.social nailed it on the head therecord.media/uk-election-...

We held a @rusi.bsky.social event yesterday on UK ransomware policy with @kathrynwestmore.bsky.social @alexmartin.bsky.social and others. You can watch the recording back here: www.rusi.org/research-eve...

@joetidy.bsky.social kindly found this image of me reacting to a question

A welcome reminder on my way into work this morning that we are hosting @maxwsmeets.bsky.social and James Babbage tomorrow evening to discuss max’s new book on ransomware and Conti. You can still register to watch online: my.rusi.org/events/the-r...

I don’t normally ask my wife to take photos of me but I made an exception for today’s visit to Duxford

The criminal complaint against a LockBit developer that was unsealed today includes Google search history results on academic papers on ransomware, and now I'm sitting here wondering if I was one of those academics if I'd include it as 'impact' for a funder. content.govdelivery.com/attachments/...

As I argued back in 2021 in a @rusi.bsky.social commentary about the response to SolarWinds, domestic politics is an important but underestimated influence on cyber statecraft: rusi.org/explore-our-...

Although the Review does not say this, my guess would be that Category 1, 2 or 3 incidents are 'nationally significant'. I don't think we've had a Category 1 incident in the UK this year? @ciaranm.bsky.social may have views!

5. The NCSC Incident Management team is responding to more incidents every year. We need more debate and transparency about whether the NCSC is sufficiently resourced to meet the increase in incidents, and what levels of support they're providing to victims.

3. HMG/NCSC losing patience with the lack of progress on national cyber security. Voluntary guidance and best practice frameworks have failed to incentivise change.

The UK NCSC published its Annual Review today, there are a few things that stood out to me:

1. A slight softening of language on China as a strategic threat. Compare the 2024 Review in the left photo to the 2023 Review in the right photo. Potentially reflects new government's position?