Archive

critical infrastructure

Episode 38: Securing Embedded Systems

In this episode of Hack the Plant, host Bryson Bort sits down with MITRE EMB3D co-founder Niyo Little Thunder Pearson. For nearly 20 years, Niyo has been at the forefront of protecting critical infrastructure systems. He previously led incident response for American Express, directing the company’s Security Operations Center during the LulzSec and Anonymous attacks, and worked to develop an adversarial cyber defense program for the nation’s third largest gas utility at ONE Gas Oklahoma. Now, Niyo has co-founded MITRE EMB3D, a groundbreaking global threat network aimed at enhancing the security of embedded devices.

critical infrastructure, cybersecurity, embedded systems, hacker, MITRE EMB3D

September 25, 2024

Q&A with Josh Corman on UnDisruptable27

This month at BSides Las Vegas, IST Executive in Residence Joshua Corman announced the launch of UnDisruptable27, a new initiative that seeks to inform, influence, and inspire community action to strengthen the safety and security of our lifeline critical infrastructure systems by 2027. Director of Strategic Communications Sophia Mauro sat down with Josh to learn more about the newly-launched effort to strengthen the resilience of lifeline critical infrastructure.

China, critical infrastructure, TechnologIST

August 26, 2024

IST unveils new project, engages with White House at “Hacker Summer Camp”

The Institute for Security and Technology (IST)’s Steve Kelly and Josh Corman joined thousands of infosec experts, security professionals, journalists, government officials, and cyber enthusiasts at “hacker summer camp,” the cybersecurity conference trio of Black Hat, BSides, and DEF CON—amongst many other bespoke gatherings and meetings.

AI, BSIDESLV, critical infrastructure, cybersecurity, DEF CON

August 22, 2024

Cyber Initiative Pegs 2027 as Infrastructure Defense Deadline

“The project, which is called UnDisruptable27, wants society to prepare for near-future geopolitical conflicts in which cyber attacks are aimed at Americans’ access to water, medical care, power and food,” writes Government Technology’s Jule Pattison-Gordon.

2027, critical infrastructure, cyber attacks, geopolitical conflict

August 14, 2024

IST pilot targets preparing hospitals, water systems for China-backed cyber threats

Josh Corman sat down with Inside Cybersecurity’s Jacob Livesay to discuss the project and its aims. “For a long time, I’ve been saying we’re over-dependent on undependable things,” Josh explained.

critical infrastructure, cyber, hospital cybersecurity, water

August 14, 2024

A New Plan to Break the Cycle of Destructive Critical Infrastructure Hacks

WIRED's Lily Hay Newman interviewed Josh Corman on the launch of UnDisruptable27. "A longtime critical infrastructure security researcher is launching a project to communicate with utility operators, municipalities, and regular people in creative ways about both urgency and optimism around protecting critical infrastructure now,” writes Newman.

BSides, China, critical infrastructure, cybersecurity

August 6, 2024

Episode 37: The Case For A Cyber Force

In this episode, Bryson sits down with Mark Montgomery, Senior Director at the Foundation for Defense of Democracies. For three years, Mark served as Executive Director of the Cyberspace Solarium Commission, created by congressional mandate to develop strategic approaches to defending against cyber attacks. Now, he directs CSC 2.0, an initiative that works to implement the recommendations of the Commission.

critical infrastructure, CYBERCOM, Cyberspace Solarium Commission, force generation

July 23, 2024

Institute for Security and Technology and Cyber Threat Alliance Submit Comments on Cyber Incident Reporting for Critical Infrastructure Act

IST and the Cyber Threat Alliance, along with co-signer Chainalysis, submitted comments on July 3, 2024 in response to the Cybersecurity and Infrastructure Security Agency’s Notice of Proposed Rulemaking on the Cyber Incident Reporting for Critical Infrastructure Act.

CIRCIA, critical infrastructure, cybersecurity, incident reporting, Ransomware, RFI

July 3, 2024

Episode 36: Supporting Ukrainian Electrical Grid Resilience in Wartime

Joe Marshall is a Senior IoT Security Strategist at Cisco Talos Intelligence Group. When Russia invaded Ukraine in 2022, Joe helped coordinate a multinational, multi-company coalition of volunteers and experts to find a technological solution. Bryson and Joe sat down to discuss his efforts in Ukraine, how he got the go-ahead from Cisco leadership, and more.

critical infrastructure, GPS, grid security, Ukraine

June 21, 2024

May 30, 2024 10:00 am

Hack the Capitol 7.0

Hack the Capitol 7.0 took place in May 2024 in Washington, DC and featured 2 days of policy, strategy, and governance-focused panels and presentations, individual deep dives on corporate, legal, regulatory, technical, or operational details, and talks dedicated to peer-to-peer information sharing.

critical infrastructure, cybersecurity, hackers, ICS, Industrial Control Systems, OT

May 31, 2024

Testimony: Red Alert: Countering the Cyberthreat from China

On May 15, 2024, Chief Trust Officer Steve Kelly testified before the House Committee on Oversight and Accountability Subcommittee on Cybersecurity, Information Technology, and Government Innovation in a hearing entitled, "Red Alert: Countering the Cyberthreat from China."

China, critical infrastructure, cybersecurity

May 28, 2024

Episode 35: Preparing for the potential worst day

In this episode, Bryson Bort is joined by Paul Shaver, Global OT Security Practice Lead at Mandiant / Google Cloud to discuss the cyber threat landscape. How did Paul’s military background play a role in his decision to start working with control systems? What is the difference between an advanced persistent threat and a regular threat? What does Paul think is the best way to protect against documented threats from nation-state actors?

advanced persistent threat, critical infrastructure, cyber resilience, cybersecurity

May 21, 2024

IST Statement on President Biden’s National Security Memorandum on Critical Infrastructure Security and Resilience

The Institute for Security and Technology (IST) commends the Biden-Harris Administration for this week releasing its National Security Memorandum (NSM) 22 on Critical Infrastructure Security and Resilience. IST offers the following observations and reflections on NSM-22.

critical infrastructure, cybersecurity, national security, NSM-22

May 1, 2024

Episode 34: The ICS Hacker

In this episode of Hack the Plan[e]t, Bryson Bort sits down with Claroty director of research and industrial control system (ICS) vulnerability expert Sharon Brizinov to discuss everything ICS. What are the most common vulnerabilities threatening ICS security? What’s the impact of cybersecurity controls standardization? And if he could wave a magic wand, what is one thing he’d change in the ICS industry?

critical infrastructure, Industrial Control Systems, internet of things, Operational Technology

April 23, 2024

The Hill: The future of clean energy hinges on cybersecurity

For The Hill, IST’s Steve Kelly & CLTC Berkeley’s Sarah Powazek tackle the cybersecurity of clean energy. “As the energy grid evolves to accommodate clean electricity…the cybersecurity of these distributed technologies must evolve with it,” they write.

China, CISA, clean energy, critical infrastructure, cybersecurity

April 23, 2024

Episode 33: Securing, Defending, and Bringing Resilience to Infrastructure with Robert Shaughnessy

In this episode of Hack the Plant, Bryson sits down with Psymetis CEO Robert Shaughnessy to discuss his work with Psymetis, an Operational Technology security company that works on critical infrastructure; challenges to innovation in the private sector; and the role of government in developing new technologies.

China, critical infrastructure, electricity, Operational Technology

February 28, 2024