Among the lessons from the Sony hack was that conventional cybersecurity measures don't always stop intruders. What more corporations need to apply is an active defense to better understand and stop future threats. 

I highly recommend that Lawfare readers peruse the annual the Worldwide Threat Assessment of the US Intelligence Community, as well as DNI Clapper’s opening statement before the SASC yesterday.  I read both quickly (though I did not watch the hearing).  Both seem less watered-down than usual.

Paul Gregory talks about the rebel army in Ukraine.

Thank you Chairman Thornberry, Ranking Member Smith, and members of the committee for inviting me to present my views on the President’s proposed Authorization for the Use of Military Force against the Islamic State of Iraq and the Levant.