Archive

cyber

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

IST, in partnership with the Australian Department of Home Affairs and the Counter Ransomware Initiative’s Private Sector Advisory Panel—led by Public Safety Canada and BlackBerry—held a multinational ransomware tabletop exercise on the margins of Singapore International Cyber Week and the Fifth CRI Summit. A new after action report summarizes the discussion and presents 3 key takeaways.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

March 31, 2026

Comparative Analysis of National and Regional Product Cybersecurity Frameworks

Comparative Analysis of National and Regional Product Cybersecurity Frameworks

Author Taylor Roberts presents a structured, data-driven analysis of product cybersecurity frameworks across multiple jurisdictions for policymakers.

Australia, comparative analysis, cyber, Cyber Resilience Act, EU, FAR, product cybersecurity, South Korea

March 19, 2026

Episode 51: Cyber-Informed Engineering: Moving Beyond the Firewall

Episode 51: Cyber-Informed Engineering: Moving Beyond the Firewall

For the last episode of season 5, host Bryson Bort sat down with Andrew Ohrt, Resilience Director at West Yost Associates to walk through the "invisible" nature of water systems, the impact of data centers on utility resilience, and how Cyber-Informed Engineering protects our most essential resource.

civil engineering, critical infrastructure, cyber, cyber-informed engineering, digital risk, resilience, UnDisruptable27, water

March 18, 2026

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On March 11, a pro-Iran regime hacking group wiped the devices of U.S. medical device manufacturer Stryker, marking the first cyber attack on domestic soil in the war in Iran. IST convened a pop-up webinar with friends and adjuncts to break down the attack, consider its implications, and answer pressing questions from the community.

attack management, critical infrastructure, cyber, cyber attacks, healthcare, Iran, resilience, webinar

March 17, 2026

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

March 13, 2026 12:00 pm

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On Wednesday, March 11, a pro-Iran hacking group claimed to have wiped 200,000 devices of a major U.S. medical device manufacturer. What do we know about what happened, and who carried out this destructive attack? How should policymakers and critical infrastructure owners and operators respond?

critical infrastructure, cyber, cyber operations, cybersecurity, Iran, medical device

March 12, 2026

Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

In the News, Op-ed

Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

The Trump administration’s National Cyber Strategy is imminent. Will it, as rumors suggest, prioritize cyber offense over defense in order to shape adversary behavior? In a new Claroty Nexus op-ed, IST Chief Strategy Officer Megan Stifel breaks down the history of U.S. cyber strategy and the potential drawbacks of an offense-first approach.

critical infrastructure, cyber, cyber defense, cyber offense, disruption, hack back, National Cybersecurity Strategy

February 26, 2026

Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

IST will once again join the global community of cyber experts in convening in San Francisco for RSAC this March! From active defense, to the congressional agenda, to stopping teen hackers, the IST team and adjuncts will tackle complex issues across sectors.

AI, artificial inteligence, critical infrastructure, cyber, cyber attacks, Cyber Civil Defense, cybersecurity, Ransomware, resilience, RSA

January 28, 2026

Episode 48: AI and the Future of Maritime Cybersecurity

Episode 48: AI and the Future of Maritime Cybersecurity

In a new episode of the ICS Village and IST podcast Hack the Plan[e]t, retired maritime cybersecurity professor Gary Kessler joins Bryson Bort to walk us through the ins and outs of cybersecurity at sea, automated identification systems, and AI’s current and future role in maritime operations. What is AIS spoofing, and why is it dangerous? What are the unique challenges posed by cybersecurity at sea? Is the maritime industry ready for artificial intelligence integrations?

critical resilience, cyber, cybersecurity, martime

December 16, 2025

Q&A: On Disrupting the Ransomware Ecosystem

Q&A: On Disrupting the Ransomware Ecosystem

What is a tabletop exercise, or TTX? How can TTXs be deployed in the ransomware context? In the latest edition of The TechnologIST, IST's Sophia Mauro sits down with Director for Digital Security Taylor Grossman to learn more about a recent TTX and IST's efforts to support disruption of the ransomware ecosystem.

blockchain, cryptocurrency, cyber, cybersecurity, disruption, Ransomware, TTX

October 21, 2025

What Cyber Policy Needs Next: Through the Looking Glass of the Ransomware Task Force – Megan Stifel at CyberNextDC

What Cyber Policy Needs Next: Through the Looking Glass of the Ransomware Task Force – Megan Stifel at CyberNextDC

Megan Stifel delivered keynote remarks at CyberNextDC on October 8, 2025 to view cyber policy 'through the looking glass.' "I think the White House, and Director Cairncross in particular, have a unique opportunity in their forthcoming strategy to let the good flourish, push the bureaucracy to overcome the bad, and lead the country to tackle the ugly," she said.

critical infrastructure, cyber, international collaboration, national security, policy, Ransomware, Salt Typhoon, secure-by-design

October 8, 2025

Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

Including Cybersecurity in the E-Rate and Rural Healthcare Programs: IST Submits Comments to Congress on Potential Reforms to the Universal Service Fund

In comments to the Congressional Universal Service Fund Working Group, Nicholas Leiserson and Michael Klein urge Congress to include cybersecurity as a fundable activity for the E-Rate and Rural Healthcare programs as part of any Universal Service Fund reform effort.

congress, cyber, cybersecurity, E-Rate, education, k-12, RFI, schools, Universal Service Fund

September 16, 2025

Michael Klein joins press conference announcing $3.7 million grant for Kentucky school cybersecurity

Michael Klein joins press conference announcing $3.7 million grant for Kentucky school cybersecurity

IST Senior Director for Preparedness and Response Michael Klein joined a Jefferson County Public Schools press conference in Louisville, Kentucky to announce a $3.7 million award from the Federal Communications Commission to bolster the district’s cybersecurity defenses.

cyber, cybersecurity, E-Rate, education, FCC, k-12, Universal Service Fund, USF

August 20, 2025

A Roadmap for Improving Cyber Victim Notification

A Roadmap for Improving Cyber Victim Notification

Building off the Cyber Safety Review Board’s recommendation that cloud service providers work with mobile device platform vendors to develop an “amber alert”-style notification mechanism, IST Adjunct Advisor Rob Knake explores the challenges to developing the native-notification concept.

Amber Alert, cyber, Victim Notification

August 14, 2025

Improving Private Sector Cyber Victim Notification and Support

Improving Private Sector Cyber Victim Notification and Support

Building off the Cyber Safety Review Board’s recommendation that cloud service providers work with mobile device platform vendors to develop an “amber alert”-style notification mechanism, IST Adjunct Advisor Rob Knake explores the challenges to developing the native-notification concept and lays out a roadmap for overcoming them.

cyber, incident response, Victim Notification

August 14, 2025

Episode 46: Local Infrastructure is Critical Infrastructure

Episode 46: Local Infrastructure is Critical Infrastructure

Bryson Bort sits down with NY Chief Cyber Officer Colin Ahern and Cybersecurity Strategic Advisor for the State of Ohio Kirk Herath to discuss the importance of community cybersecurity protections and what makes local infrastructure critical.

critical infrastructure, cyber, cybersecurity, resilience

August 13, 2025

Cybersecurity Considerations for Universal Service Fund Reform

Cybersecurity Considerations for Universal Service Fund Reform

As the speed, scope, and impact of cyber threats to K-12 schools continues to increase, Congress has expressed a clear desire to reinvigorate the Universal Service Fund (USF) through legislation. IST SVP for Policy Nicholas Leiserson explores how USF funding, through the FCC's E-Rate Program, could bolster cybersecurity resources for K-12 schools.

congress, cyber, cybersecurity, E-Rate, education, k-12, schools, Universal Service Fund, USF

July 25, 2025