Three Buddy Problem JAGS keynote: The intricacies of wartime cyber threat intelligence
35 snips
May 9, 2025 
Juan Andres Guerrero-Saade, a security researcher at SentinelOne and an adjunct at the Alperovich Institute, offers deep insights into wartime cyber threat intelligence. He emphasizes its crucial role in bridging information gaps between adversaries, especially highlighted by the Ukraine-Russia conflict. The conversation delves into the ethical challenges faced by cybersecurity professionals and the moral responsibilities tied to intelligence-sharing. Guerrero-Saade urges the audience to reflect on the real-world implications of their work, making a case for deeper self-awareness in the field.
AI Snips
Chapters
Transcript
Episode notes
CTI as Information Hedge
- Cyber threat intelligence (CTI) serves as a hedge against information asymmetry between adversaries.
- It aims to provide situational awareness by revealing what enemies know and plan without exposing your own knowledge.
Ethics in Intelligence Brokerage
- Producing and sharing CTI means acting as an intelligence broker with ethical responsibilities.
- We must confront the moral impact of our work in intelligence dissemination and operations disruption.
Challenge Bias in Investigations
- Blindly ignoring cyber operations from friendly actors limits the effectiveness of threat intelligence.
- Attribution is complex; studying all operations, even potentially friendly ones, is necessary before deciding ethical action.