Cyber Threat

The definitive account of Stuxnet, read here as an operational case study: how attackers crossed an air gap, borrowed trusted credentials, and made a control room see normal.

Two German volumes on cyber conflict, written from Berlin rather than Washington. Gaycken's argument: for European industry the threat is patient theft of technical intellectual property, not spectacular disruption.

The former NSA and CIA director on what happens when shared facts break down. We read it for the corporate lesson: confusion as an objective, credibility as a depleting asset.

Fred Kaplan's history of cyber warfare finds the threat was foreseen almost immediately and repeatedly deprioritized. Your organization probably has its own version of that pattern in a filing cabinet.