Sign Up for Our Newsletter
Donate

Archive

The Ransomware Task Force (RTF)

Combating the ransomware threat with a cross-sector approach

The Ransomware Task Force (RTF) is a multistakeholder effort with participation from across government, industry, and civil society.

Project page
Counter Ransomware Initiative Tabletop Exercise: After-Action Report

AAR, Report

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

IST, in partnership with the Australian Department of Home Affairs and the Counter Ransomware Initiative’s Private Sector Advisory Panel—led by Public Safety Canada and BlackBerry—held a multinational ransomware tabletop exercise on the margins of Singapore International Cyber Week and the Fifth CRI Summit. A new after action report summarizes the discussion and presents 3 key takeaways.
coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise
March 31, 2026
Announcing the Launch of the México Ransomware Task Force

Blog

Announcing the Launch of the México Ransomware Task Force

IST, in collaboration with a coalition of local and global partners, is excited to announce the launch of the México Ransomware Task Force to tackle the growing threat that ransomware poses to Mexican critical infrastructure and the country’s digital economy, made possible through the support of Mastercard, Microsoft, and Sophos.
critical infrastructure, cybersecurity, digital economy, Mexico, Ransomware, Ransomware Task Force
March 31, 2026
The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

Blog

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On March 11, a pro-Iran regime hacking group wiped the devices of U.S. medical device manufacturer Stryker, marking the first cyber attack on domestic soil in the war in Iran. IST convened a pop-up webinar with friends and adjuncts to break down the attack, consider its implications, and answer pressing questions from the community.
attack management, critical infrastructure, cyber, cyber attacks, healthcare, Iran, resilience, webinar
March 17, 2026
IST Experts Weigh in on the 2026 Cyber Strategy

Blog

IST Experts Weigh in on the 2026 Cyber Strategy

Today’s Cyber Strategy for America outlined six key priorities for the administration’s “cyber vision.” IST experts weigh in on what’s there, what isn’t, and what the plan means for cybersecurity going forward.
critical infrastructure, cyber offense, cybersecurity, deterrence, National Cybersecurity Strategy, Strategy, White House
March 6, 2026
Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

In the News, Op-ed

Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

The Trump administration’s National Cyber Strategy is imminent. Will it, as rumors suggest, prioritize cyber offense over defense in order to shape adversary behavior? In a new Claroty Nexus op-ed, IST Chief Strategy Officer Megan Stifel breaks down the history of U.S. cyber strategy and the potential drawbacks of an offense-first approach.
critical infrastructure, cyber, cyber defense, cyber offense, disruption, hack back, National Cybersecurity Strategy
February 26, 2026
Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

Blog

Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

IST will once again join the global community of cyber experts in convening in San Francisco for RSAC this March! From active defense, to the congressional agenda, to stopping teen hackers, the IST team and adjuncts will tackle complex issues across sectors.
AI, artificial inteligence, critical infrastructure, cyber, cyber attacks, Cyber Civil Defense, cybersecurity, Ransomware, resilience, RSA
January 28, 2026
IST Contributes to the International Counter Ransomware Initiative Summit for the Fourth Consecutive Year: Exercises, Workshops, and Private Sector Advisory Panel

Blog

IST Contributes to the International Counter Ransomware Initiative Summit for the Fourth Consecutive Year: Exercises, Workshops, and Private Sector Advisory Panel

Over the last four years, IST has been a critical partner to the International Counter Ransomware Initiative's coalition of governments and other key partners in their effort to coordinate global actions against ransomware. This October, IST’s Steve Kelly, Elizabeth Vish, and Gigi Flores Bustamante joined the CRI’s fifth summit in Singapore to deliver IST’s research on public-private partnerships to combat cybercrime.
counter ransomware initiative, critical infrastructure, cybersecurity, international collaboration, Public-private partnerships, Ransomware, Singapore, TTX
December 10, 2025
Scaling Disruption: What the Next Cyber Strategy Must Get Right

Op-ed

Scaling Disruption: What the Next Cyber Strategy Must Get Right

What should be prioritized in the White House’s forthcoming National Cyber Strategy? In an op-ed for Claroty Nexus, Megan Stifel outlined what the next strategy must get right in order to safeguard citizens and maintain America's global leadership. 
cybersecurity, disruption, National Cybersecurity Strategy, operational collaboration, PPPs, Public-private partnerships, White House
December 2, 2025
Governance and Cyber Risk for SMEs: Remapping the Blueprint for Ransomware Defense

Blog

Governance and Cyber Risk for SMEs: Remapping the Blueprint for Ransomware Defense

In 2022, the Ransomware Task Force developed the Blueprint for Ransomware Defense to provide SMEs with an actionable framework to defend against the most common attacks, aligning with NIST’s Cybersecurity Framework 1.0. Today, IST releases the Blueprint remapped to the NIST Cybersecurity Framework 2.0, incorporating a new core function and updating key considerations for the most vulnerable SMEs.
blueprint, cybersecurity, defense, governance, Ransomware, SMEs, Take9
November 6, 2025
Q&A: On Disrupting the Ransomware Ecosystem

Blog

Q&A: On Disrupting the Ransomware Ecosystem

What is a tabletop exercise, or TTX? How can TTXs be deployed in the ransomware context? In the latest edition of The TechnologIST, IST's Sophia Mauro sits down with Director for Digital Security Taylor Grossman to learn more about a recent TTX and IST's efforts to support disruption of the ransomware ecosystem.
blockchain, cryptocurrency, cyber, cybersecurity, disruption, Ransomware, TTX
October 21, 2025
Building Cyber Resilience: International Counter Ransomware Initiative Endorses Blueprint for Ransomware Defense

Blog

Building Cyber Resilience: International Counter Ransomware Initiative Endorses Blueprint for Ransomware Defense

As the world’s largest international cyber partnership, the International Counter Ransomware Initiative (CRI) brings together over 74 member states and organizations to build international resilience to the global problem of ransomware. Ahead of its fifth gathering, IST is pleased to announce the CRI’s has endorsed the Ransomware Task Force’s Blueprint for Ransomware Defense.
announcement, Blueprint for Ransomware Defense, counter ransomware initiative, Ransomware, RTF
October 21, 2025
What Cyber Policy Needs Next: Through the Looking Glass of the Ransomware Task Force – Megan Stifel at CyberNextDC

Blog

What Cyber Policy Needs Next: Through the Looking Glass of the Ransomware Task Force – Megan Stifel at CyberNextDC

Megan Stifel delivered keynote remarks at CyberNextDC on October 8, 2025 to view cyber policy 'through the looking glass.' "I think the White House, and Director Cairncross in particular, have a unique opportunity in their forthcoming strategy to let the good flourish, push the bureaucracy to overcome the bad, and lead the country to tackle the ugly," she said.
critical infrastructure, cyber, international collaboration, national security, policy, Ransomware, Salt Typhoon, secure-by-design
October 8, 2025
Nick Leiserson and Michael Klein: Urgent Changes Needed to Update the E-Rate Program

In the News, Op-ed

Nick Leiserson and Michael Klein: Urgent Changes Needed to Update the E-Rate Program

For Broadband Breakfast, IST Senior VP for Policy Nicholas Leiserson and Senior Director for Preparedness and Response Michael Klein make the case for expanding the FCC’s E-Rate program to bolster the cybersecurity resilience of K-12 schools.
cybersecurity, E-Rate, K-12 Education, Ransomware, Universal Service Fund
October 1, 2025
Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

Blog

Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

In comments to the Congressional Universal Service Fund Working Group, Nicholas Leiserson and Michael Klein urge Congress to include cybersecurity as a fundable activity for the E-Rate and Rural Healthcare programs as part of any Universal Service Fund reform effort.
congress, cyber, cybersecurity, E-Rate, education, k-12, RFI, schools, Universal Service Fund
September 16, 2025
Reauthorization of CISA ’15: 10 Years Later, New Threats, Exigent Urgency

In the News, Op-ed

Reauthorization of CISA ’15: 10 Years Later, New Threats, Exigent Urgency

In an op-ed for Claroty Nexus, IST Chief Strategy Officer Megan Stifel calls on Congress to reauthorize the Cybersecurity Information Sharing Act of 2015 (CISA ’15), which improves and incentivizes the sharing of cyber threat indicators and information about defensive measures taken against cyber threats between public and private sectors.
CISA 15, congress, cybersecurity, information sharing, public-private collaboration
September 15, 2025
Law Enforcement Strikes BlackSuit (Royal) Ransomware, Seizing Funds and Infrastructure

Blog

Law Enforcement Strikes BlackSuit (Royal) Ransomware, Seizing Funds and Infrastructure

This summer, U.S. and international law enforcement agencies carried out a coordinated operation against the BlackSuit (formerly Royal) ransomware group, confiscating over $1M in illicit cryptocurrency. IST Senior Associate for the Future of Digital Security Gigi Flores Bustamante unpacks the takedown.
cybercrime, cybersecurity, Ransomware, Ransomware Task Force
August 28, 2025
MENU

HOME PAGE

GET IN TOUCH

Email: [email protected]
Send us a message: Contact

JOIN THE CATALINK MAILING LIST