James Sullivan
banner
mrjamessullivan.bsky.social
James Sullivan
@mrjamessullivan.bsky.social
Director, Cyber, RUSI
Reposted by James Sullivan
What is the reality of the cyber threat to the UK? We hear from @mrjamessullivan.bsky.social Director of Cyber and Tech at the Royal United Services Institute- definitely worth a listen @thisisnotadrillpod.bsky.social
NEW EPISODE

@gavinesler.bsky.social talks to @mrjamessullivan.bsky.social, Director of Cyber and Tech at RUSI, the Royal United Services Institute to discuss scale and nature of cyber attacks, and assess how governments can respond 👉 linktr.ee/DrillPod

#cyber #tech #podcast
October 16, 2025 at 6:04 AM
Reposted by James Sullivan
NEW EPISODE

@gavinesler.bsky.social talks to @mrjamessullivan.bsky.social, Director of Cyber and Tech at RUSI, the Royal United Services Institute to discuss scale and nature of cyber attacks, and assess how governments can respond 👉 linktr.ee/DrillPod

#cyber #tech #podcast
October 16, 2025 at 6:00 AM
Reposted by James Sullivan
🚨 Applications now open for the UK Cyber Effects Network Fellowship Programme! Early-career professionals, don't miss this chance to deepen your knowledge of offensive cyber operations. Submit your application now. (Only open to NATO member citizens)
Cyber Effects Fellowship Programme: Call for Applications
The UK Cyber Effects Network is now accepting applications for the inaugural cohort of its Cyber Effects Fellowship Programme.
my.rusi.org
September 15, 2025 at 7:07 PM
Reposted by James Sullivan
I've had it confirmed by my own sources now that it is DragonForce. Not 100% sure on Scattered Spider but looks like it might be hackers with links to them at least. But who's left from the group after all the arrests?! Also fascinating nugget- DragonForce's website has been hacked itself it seems!
April 29, 2025 at 2:58 PM
Reposted by James Sullivan
Ransomware is becoming a huge problem – not just to private companies but to national infrastructure too. What can be done?

@rusi.bsky.social's @jamiemaccoll.bsky.social explains the issue to @snellarthur.bsky.social and tries to Order the Disorder in this week's episode.

Listen 👉 tr.ee/ksicr-3Wty
April 1, 2025 at 6:25 PM
We are looking for a motivated Research Analyst to join our cyber and tech team at @rusi.bsky.social. You need to be able to work in London. Full job spec below 👇

royalunitedservicesinstitute.peoplehr.net/Pages/JobBoa...
Research Analyst
This position sits in RUSI’s Cyber and Tech Research group, which seeks to shine a light on UK and international cyber and technology issues. We take what can sometimes be complex and technical subjec...
royalunitedservicesinstitute.peoplehr.net
March 23, 2025 at 5:06 PM
Reposted by James Sullivan
@ciaranm.bsky.social is the opposite of a fearmonger, so it's important to listen when he concludes: "amidst all the noise and hype about cyber threats one thing has changed: the threat from China is significantly more serious than at any point in the digital age." rusi.org/explore-our-...
Typhoons in Cyberspace
The transformation of China’s digital attack capabilities is the most important change in the cyber threat to the West in more than a decade, writes Ciaran Martin.
rusi.org
March 21, 2025 at 9:25 AM
New on @rusi.bsky.social on the profound change in China as a cyber threat actor. @ciaranm.bsky.social outlines its new political, strategic and active footing in cyberspace that has laid the grounds for disruptive operations vs western critical infrastructure. Read how 👇

rusi.org/explore-our-...
Typhoons in Cyberspace
The transformation of China’s digital attack capabilities is the most important change in the cyber threat to the West in more than a decade, writes Ciaran Martin.
rusi.org
March 21, 2025 at 9:22 AM
Excellent piece on the relationship between the government and the private sector on technology and national security. With comments from @piahuesch.bsky.social @rusi.bsky.social
My piece on how the British intelligence & nat. sec. community is reaching out to the private sector in new ways: describing its problems in unclassified terms, more venture capital, more innovation ‘clusters’. But not easy to bridge secret & tech worlds. www.economist.com/britain/2025...
Why British spooks are reaching out to the private sector
It is not always easy to bridge the secret and commercial worlds
www.economist.com
March 19, 2025 at 6:56 PM
Reposted by James Sullivan
We're hosting a panel event at RUSI at 0900 on 3 April to discuss the UK government's ongoing consultation on ransomware legislation. I'll be joined by:

@alexmartin.bsky.social
@kathrynwestmore.bsky.social
Verona Hulse-Johnstone (NCC Group)
Edward Lewis, CyXcel

my.rusi.org/events/asses...
Assessing UK Ransomware Policy
Join an expert panel to discuss the UK government’s approach to ransomware.
my.rusi.org
March 17, 2025 at 9:00 AM
Excellent write up from @kimzetter.bsky.social here on the nuances behind some of the recent headlines on US cyber security and cyber operations.
I updated my story again. DoD denied reports that an order was issued to CyberCom, but Washington Post stands by story that order occurred Feb 24. But a Post reporter says the ops impacted were low-level, since US has not been conducting anything against Russia that rises to level of "use of force"
Two stories published Friday reporting that Trump admin had ordered US Cyber Command and CISA to "stand down" on their work to detect/counter Russian cyber threats. But new info has come out to contradict them. I dug into what we know and don't know. www.zetter-zeroday.com/did-trump-ad...
March 5, 2025 at 7:05 PM
Reposted by James Sullivan
apparently CISA analysts have also been told not to follow or report Russian cyber threats, according to the @theguardian.com

www.theguardian.com/us-news/2025...
Trump administration retreats in fight against Russian cyber threats
Recent incidents indicate US is no longer characterizing Russia as a cybersecurity threat, marking a radical departure: ‘Putin is on the inside now’
www.theguardian.com
February 28, 2025 at 8:50 PM
New from @lmhurel.bsky.social @rusi.bsky.social and Gatra Priyandita from @aspi-org.bsky.social on responsible cyber behaviour in the Indo-Pacific. Case studies comprise Cambodia, Fiji, India, Indonesia, Japan, Pakistan and Taiwan - exploring how they pursue their interests in cyberspace. See 👇🌏
🚨 NEW REPORT 🚨

In 'Responsible cyber behaviour in the Indo-Pacific', Gatra Priyandita and Louise Marie Hurel urge the international community to broaden its understanding of responsible cyber behaviour by incorporating diverse perspectives from the Indo-Pacific.

🔖 Read it now ↪️ bit.ly/40sHoNq
January 29, 2025 at 12:21 PM
Reposted by James Sullivan
UK proposes to ban public bodies (schools, hospitals, etc) from paying cyber criminal ransoms. As others have said - this is a tangible and progressive move but these kinds of orgs don't pay up anyway. Also, as
@jamiemaccoll.bsky.social says - these gangs don't pick targets based on public policy.
January 14, 2025 at 9:04 AM
New opinion piece from @piahuesch.bsky.social and @tashbuckley.bsky.social on how the UK can balance competing ideological and regulatory approaches to technology in an unpredictable global political environment.

bindinghook.com/articles-bin...
What does Trump 2.0 mean for UK tech ambitions?
Trump’s relationship with Elon Musk highlights his strategic but fragile friendship with the US tech sector. However, his unpredictable approach to allies means the UK should invest in developing a st...
bindinghook.com
January 14, 2025 at 8:14 AM
Turns out that just focusing on Huawei did not fully address the inherent vulnerabilities in legacy telecommunications networks…

www.politico.com/news/2024/12...
Chinese hackers used broad telco access to geolocate millions of Americans and record phone calls
The number of telecommunication providers impacted by the massive Salt Typhoon breach is now up to nine, deputy national security adviser for cyber and emerging technology Anne Neuberger confirmed.
www.politico.com
December 28, 2024 at 2:23 PM
Reposted by James Sullivan
The United States is already one of the most globally aggressive, methodical, and pervasive threat actors in cyber.
The addition of capital letters means it’ll definitely work this time 🙄

(Honestly God knows where these ideas come from that:

(A) the US has been only on defense; or

(B) there’s some sort of magical cost waiting for us to
impose that’ll change everything but we’ve just been too cowardly to use)
December 26, 2024 at 8:30 PM
Reposted by James Sullivan
For the latest analysis on defence, security and international affairs, here is a list of RUSI staff members to follow on BlueSky (will be updated regularly as user base expands).
November 26, 2024 at 9:56 AM
Reposting this fine write-up by @kathrynwestmore.bsky.social and @jamiemaccoll.bsky.social on Operation Destablise. A compendium of national security threats, showing the clear links between organised crime, sanctions evasion and hostile state activity. Read👇

www.rusi.org/explore-our-...
Operation Destabilise: Russia, Organised Crime and Illicit Finance
A Russian-speaking money laundering network uncovered by the UK’s National Crime Agency shows the clear links between organised crime, sanctions evasion and hostile state activity.
www.rusi.org
December 23, 2024 at 4:59 PM
A thoughtful piece from @selenalarson.bsky.social for @rusi.bsky.social on how we (mis)categorise cyber crime groups compared to nation-state actors. Professional cyber crime groups are just as persistent as traditional APTs 'making them equally devastating in today’s threat landscape.' Read why 👇
Once reserved for nation-state actors, advanced and persistent cyber tactics are now common among cybercriminals, making them equally devastating in today’s threat landscape. Read the latest RUSI Commentary from @selenalarson.bsky.social.
Why Biasing Advanced Persistent Threats over Cybercrime is a Security Risk
Once reserved for nation-state actors, advanced and persistent cyber tactics are now common among cybercriminals, making them equally devastating in today’s threat landscape.
bit.ly
December 17, 2024 at 12:07 PM
Reposted by James Sullivan
Perhaps a bit early for this, but wanted to pick out a few of my favourite pieces from the year. I started 2024 looking at ransomware: “...doing as much harm to UK national security as anything Russia, China, Iran or North Korea does in cyberspace.” www.economist.com/internationa...
How ransomware could cripple countries, not just companies
Experts think 2023 was a record year for digital attacks
www.economist.com
December 12, 2024 at 1:56 PM
A significant law enforcement operation has showcased the clear links between organised crime, sanctions evasion and hostile state activity. This includes laundering the proceeds of ransomware. Read more from @rusi.bsky.social colleagues @kathrynwestmore.bsky.social and @jamiemaccoll.bsky.social 👇
December 6, 2024 at 4:53 PM
Reposted by James Sullivan
Punchy intro to CDS Xmas lecture at RUSI from @MTSavill: “last month's announcement of cuts… is emblematic of a dept. that is struggling to reconcile people and money with existing commitments at a very time when the threats that we face are growing in scale and complexity”
December 4, 2024 at 6:41 PM