Archive

cyber

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives

As AI models become more advanced, concerns over national security, cyber threats, and loss of control continue to rise. In her latest analysis for Claroty, IST’s Megan Stifel argues that we don't need to panic—we need to prepare.

AI, cyber, resilience, risk management, risk reduction

July 6, 2026

What’s in a Norm?

What’s in a norm? The New York Times’s recent reporting linked last year’s cyber attack on Jaguar Land Rover to Russia-based actors, but the UK government has remained silent. IST’s Nicholas Leiserson calls on policymakers to act lest their silence encourage future attacks.

cyber, cyber attacks, Russia, UK

July 6, 2026

Exercice de simulation de l’Initiative de lutte contre les rançongiciels: Rapport après action

L'Institute for Security and Technology (IST), en partenariat avec le Department of Home Affairs de l’Australie et le Groupe consultatif du secteur privé sur l’Initiative de lutte contre les rançongiciels (ILR), dirigé par Sécurité publique Canada et BlackBerry, a organisé un exercice de simulation multinational sur les rançongiciels pour voir comment les intervenants des secteurs public et privé se coordonnent lors d’un incident important.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

June 24, 2026

Rapid Reaction: IST Experts on the Artificial Intelligence Executive Order

Team members from across IST’s artificial intelligence security portfolios shared their initial thoughts on what the Trump administration's Executive Order on artificial intelligence gets right, where there is room for improvement, and how it stands to impact the AI ecosystem and AI security more broadly.

AI, artificial intelligence, cyber, data poisoning, frontier AI, LLMs, security, vulnerability disclosure

June 2, 2026

What Anthropic’s Mythos Preview Tells Us About AI Loss of Control Risk

The release of Claude Mythos Preview has made cyber headlines. But instead of viewing it through the lens of misuse, policymakers should actually be approaching Mythos through the lens of AI Loss of Control, argue Ritika Verma and Mariami Tkeshelashvili.

AI, artificial intelligence, cyber, loss of control, Mythos, system card

April 29, 2026

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

IST, in partnership with the Australian Department of Home Affairs and the Counter Ransomware Initiative’s Private Sector Advisory Panel—led by Public Safety Canada and BlackBerry—held a multinational ransomware tabletop exercise on the margins of Singapore International Cyber Week and the Fifth CRI Summit. A new after action report summarizes the discussion and presents 3 key takeaways.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

March 31, 2026

Comparative Analysis of National and Regional Product Cybersecurity Frameworks

Author Taylor Roberts presents a structured, data-driven analysis of product cybersecurity frameworks across multiple jurisdictions for policymakers.

Australia, comparative analysis, cyber, Cyber Resilience Act, EU, FAR, product cybersecurity, South Korea

March 19, 2026

Episode 51: Cyber-Informed Engineering: Moving Beyond the Firewall

For the last episode of season 5, host Bryson Bort sat down with Andrew Ohrt, Resilience Director at West Yost Associates to walk through the "invisible" nature of water systems, the impact of data centers on utility resilience, and how Cyber-Informed Engineering protects our most essential resource.

civil engineering, critical infrastructure, cyber, cyber-informed engineering, digital risk, resilience, UnDisruptable27, water

March 18, 2026

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On March 11, a pro-Iran regime hacking group wiped the devices of U.S. medical device manufacturer Stryker, marking the first cyber attack on domestic soil in the war in Iran. IST convened a pop-up webinar with friends and adjuncts to break down the attack, consider its implications, and answer pressing questions from the community.

attack management, critical infrastructure, cyber, cyber attacks, healthcare, Iran, resilience, webinar

March 17, 2026

March 13, 2026 12:00 pm

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On Wednesday, March 11, a pro-Iran hacking group claimed to have wiped 200,000 devices of a major U.S. medical device manufacturer. What do we know about what happened, and who carried out this destructive attack? How should policymakers and critical infrastructure owners and operators respond?

critical infrastructure, cyber, cyber operations, cybersecurity, Iran, medical device

March 12, 2026

In the News, Op-ed

Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

The Trump administration’s National Cyber Strategy is imminent. Will it, as rumors suggest, prioritize cyber offense over defense in order to shape adversary behavior? In a new Claroty Nexus op-ed, IST Chief Strategy Officer Megan Stifel breaks down the history of U.S. cyber strategy and the potential drawbacks of an offense-first approach.

critical infrastructure, cyber, cyber defense, cyber offense, disruption, hack back, National Cybersecurity Strategy

February 26, 2026

Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

IST will once again join the global community of cyber experts in convening in San Francisco for RSAC this March! From active defense, to the congressional agenda, to stopping teen hackers, the IST team and adjuncts will tackle complex issues across sectors.

AI, artificial inteligence, critical infrastructure, cyber, cyber attacks, Cyber Civil Defense, cybersecurity, Ransomware, resilience, RSA

January 28, 2026

Episode 48: AI and the Future of Maritime Cybersecurity

In a new episode of the ICS Village and IST podcast Hack the Plan[e]t, retired maritime cybersecurity professor Gary Kessler joins Bryson Bort to walk us through the ins and outs of cybersecurity at sea, automated identification systems, and AI’s current and future role in maritime operations. What is AIS spoofing, and why is it dangerous? What are the unique challenges posed by cybersecurity at sea? Is the maritime industry ready for artificial intelligence integrations?

critical resilience, cyber, cybersecurity, martime

December 16, 2025

Q&A: On Disrupting the Ransomware Ecosystem

What is a tabletop exercise, or TTX? How can TTXs be deployed in the ransomware context? In the latest edition of The TechnologIST, IST's Sophia Mauro sits down with Director for Digital Security Taylor Grossman to learn more about a recent TTX and IST's efforts to support disruption of the ransomware ecosystem.

blockchain, cryptocurrency, cyber, cybersecurity, disruption, Ransomware, TTX

October 21, 2025

What Cyber Policy Needs Next: Through the Looking Glass of the Ransomware Task Force – Megan Stifel at CyberNextDC

Megan Stifel delivered keynote remarks at CyberNextDC on October 8, 2025 to view cyber policy 'through the looking glass.' "I think the White House, and Director Cairncross in particular, have a unique opportunity in their forthcoming strategy to let the good flourish, push the bureaucracy to overcome the bad, and lead the country to tackle the ugly," she said.

critical infrastructure, cyber, international collaboration, national security, policy, Ransomware, Salt Typhoon, secure-by-design

October 8, 2025

Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

In comments to the Congressional Universal Service Fund Working Group, Nicholas Leiserson and Michael Klein urge Congress to include cybersecurity as a fundable activity for the E-Rate and Rural Healthcare programs as part of any Universal Service Fund reform effort.

congress, cyber, cybersecurity, E-Rate, education, k-12, RFI, schools, Universal Service Fund

September 16, 2025