Hacking

The definitive account of Stuxnet, read here as an operational case study: how attackers crossed an air gap, borrowed trusted credentials, and made a control room see normal.

Two German volumes on cyber conflict, written from Berlin rather than Washington. Gaycken's argument: for European industry the threat is patient theft of technical intellectual property, not spectacular disruption.

Fred Kaplan's history of cyber warfare finds the threat was foreseen almost immediately and repeatedly deprioritized. Your organization probably has its own version of that pattern in a filing cabinet.

A seventy-five-cent accounting error at Berkeley in 1986 led Clifford Stoll to a KGB-linked intruder. The founding text of intrusion investigation, and still the best argument against ignoring small anomalies.