The DISARM Foundation runs cognitive security training courses. …

I cover these things in the first week of cognitive security class: History of cognitive security Working definitions of information operations, disinformation, and cognitive security Disinformation examples and common myths Where to find more information Potential risks to influence operations investigators, and mitigations for them. Automation and AI This is…

I’ve been a little quiet of late. To be honest, in just the last year, I’ve done a bunch of stuff including designing a pilot system (including how to do disinformation assessments) for the UNDP to use in elections around the world, setting up WHO Europe’s infodemic response, and moving…

Risk is just something that happens in life. We drive, we could crash; we cook, we might burn ourselves. Risk is also something that’s been big in my life, although for me it’s not so much managing the things that could go wrong when I work and travel, but more…

I swear my best posts come from random conversations on the internet. The Pyramid of Pain describes the types of indicators you can use to make sense of / detect a cyber attack. …

The cloud is someone else’s computer. Free apps are someone else’s resources. I relearnt a lesson this morning: never rely on something that someone else owns. We do research at Threet, so we have a set of shared datastores, some paid for, some using free apps. …

I got into a twitter thread, and it got big enough to post. It started with https://twitter.com/QuinnyPig/status/1344467144008863744 — musing that they’re not convinced that anyone in tech has ever been asked “How would you design our products to reduce the potential they’re abused?” Tech organizations have definitely been asked this…

[co-written with Pablo Breuer] Yesterday talking to someone, mentioned the Disinformation SOC, and they went “yeah, those things”. So it’s mainstream now, and we’re well overdue talking about it (and what we’ve done to run distributed disinformation SOCs). Questions. When does a group of people tracking disinformation turn into a…

I spoke recently at Disclosure — a conference started by Marc Rogers, bringing together interesting systems thinkers across information security. Last year, I spoke about how to adapt infosec to disinformation defense; this year about what the CogSecCollab leads have learnt from running the CTI League’s Disinformation response team. 2020…