OODAcon 2024: China – Current Threats and Emerging Risks

Panel Description

Founder of the cybersecurity research conference ChinaCon Kristin Del Rosso will lead a discussion with security researchers Charity Wright, Eugenio Benincasa, and Judy Ng. The discussion will include insights from the latest ChinaCon and focus on the nature of current risks emanating from China.

Moderator: Kristin Del Rosso, Co-Founder & Managing Director, DEVSEC LLC

Kristin Del Rosso has a background in security product management and threat intelligence. With a range of corporate experience, she has successfully launched and grown a variety of security and intelligence offerings. She has also focused on hands-on malware reverse engineering, malicious actor tracking, vulnerability research, and OSINT investigations. Kristin is also the Founder of the ChinaCon event series.

X: @kristindelrosso | LinkedIn

Charity Wright, Principal Threat Intelligence Consultant, Recorded Future

Charity Wright is a cyber threat Intelligence expert with over 17 years of experience in the US Army/NSA and the private sector. She has extensive experience in tracking, assessing, and reporting on global strategic threats, state-sponsored cyber threats, and malign influence operations (especially from the PRC). Charity now specializes in dark web cyber threat intelligence, counter-disinformation, and strategic intelligence at Recorded Future. Her analysis has provided deep insights into a variety of incidents, activities, and strategic moves by well-resourced adversaries, primarily actors operating in China.

Charity Wright is a cyber threat Intelligence expert with over 17 years of experience in the US Army/NSA and the private sector. She has extensive experience in tracking, assessing and reporting on global strategic threats, state-sponsored cyber threats, and malign influence operations (especially from PRC).

X: @CharityW4CTI | LinkedIn

Eugenio Benincasa, Senior Cyber Defense Researcher, Center for Security Studies (CSS) at ETH Zurich

Eugenio Benincasa is a Senior Researcher in the Cyberdefense Project with the Risk and Resilience Team at the Center for Security Studies (CSS) at ETH Zurich. Prior to joining CSS, he worked as a Government Officer at the Italian Presidency of the Council of Ministers in Rome and as a Research Fellow at the research institute Pacific Forum in Honolulu, where he focused on cybersecurity issues. He also worked as a Crime Analyst at the New York City Police Department (NYPD) and completed internships at the Delegation of the European Union to the United Nations, Morgan Stanley’s Financial Crimes Unit, and the Asia-Pacific Center for Security Studies. His research interests include China’s offensive cyber ecosystem, the applicability of international law to cyberspace, and cyber non-proliferation.

X: @eubenincasa | LinkedIn

Judy Ng, Microsoft

Judy Ng is a senior threat intelligence analyst with Microsoft Threat Intelligence. She has over a decade of experience analyzing and tracking nation-state activity in the commercial space and previously supported the United States government.

X: @MsftSecIntel

By or Featuring Panelists from this OODAcon Session

• Ghost in the Breach: Using breach intelligence to hunt hidden Russian assets
• Sleight of hand: How China weaponizes software vulnerabilities
• How China Demands Tech Firms Reveal Hackable Flaws in Their Products
• A Conversation with OODA Network Expert Kristin Del Rosso on Cybersecurity and National Vulnerability Database Research
• Sophos’ Kristin Del Rosso on the US National Vulnerability Database (NVD) and the Chinese NVD (CNNVD)
• Using Geopolitical Conflicts for Threat Hunting

• ODNI Selects Recorded Future as Intelligence Cornerstone for Sentinel Horizon
• Charity Wright on China’s Digital Colonialism
• Recorded Future: From Risk to Intelligence: Operationalizing Threat Intelligence in Your Organization

• Capture the (red) flag: An inside look into China’s hacking Contest ecosystem
• Benincasa, Eugenio (2024) ‘From Vegas to Chengdu: Hacking Contests, Bug Bounties, and China’s Offensive Cyber Ecosystem’ CSS Cyberdefense Report
• Benincasa, Eugenio (2023) ‘Making Cyber Attribution More Transparent’, CSS Policy Perspective
• external pageBenincasa, Eugenio (2023) ‘Artificial Intelligence-Enhanced Disinformation and International Law: Rethinking Coercion’, Columbia University Journal of International Affairs

• On the frontlines: Decoding Chinese threat actor tactics and techniques
• The NSA Seems Pretty Stressed About the Threat of Chinese Hackers in US Critical Infrastructure