Independent, principal-led analysis of nation-state cyber operations, critical infrastructure, grey-zone activity and the Indo-Pacific — read from the open record, with confidence stated plainly. One issue each week.
A first data note from The Observatory: why movement between infrastructure sectors — not the raw incident count — is the measurement that matters, and where the evidence is thin.
The editorial process behind the weekly brief: what qualifies as a signal, how open sources are verified before publication, and why some developments are deliberately left out.
A short, standing reading of the cross-sector picture. It changes only when the open record does — never to manufacture activity.
Cross-sector reuse — a technique proven in one sector, then turned on another — is the clearest signal of a maturing nation-state campaign, and the reason the record is kept whole rather than sector by sector.
The open record inherits reporting bias: well-disclosed sectors are over-represented and quiet sectors are almost certainly undercounted, so precise sector ratios are held at low confidence.
Explore the recordThe weekly analysis is written by Christopher J. Braccia. The same approach is available to institutions as commissioned research.