Archive

cybersecurity

Q&A: Where do we go from here? IST Reflections on RSAC ‘26

Q&A: Where do we go from here? IST Reflections on RSAC ‘26

Once a year, the cybersecurity community converges on San Francisco. From the expo floor to vendor pop ups in Yerba Buena Gardens, the SOMA neighborhood is abuzz for four days with hackers, researchers, and government policy experts eager to share insights. But this year, the din was a little different.

AI, congress, critical infrastructure, cybersecurity, K-12 Cyber Defense Coalition, K-12 Education, RSA, RSAC, UnDisruptable27

April 2, 2026

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

IST, in partnership with the Australian Department of Home Affairs and the Counter Ransomware Initiative’s Private Sector Advisory Panel—led by Public Safety Canada and BlackBerry—held a multinational ransomware tabletop exercise on the margins of Singapore International Cyber Week and the Fifth CRI Summit. A new after action report summarizes the discussion and presents 3 key takeaways.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

March 31, 2026

Announcing the Launch of the México Ransomware Task Force

Announcing the Launch of the México Ransomware Task Force

IST, in collaboration with a coalition of local and global partners, is excited to announce the launch of the México Ransomware Task Force to tackle the growing threat that ransomware poses to Mexican critical infrastructure and the country’s digital economy, made possible through the support of Mastercard, Microsoft, and Sophos.

critical infrastructure, cybersecurity, digital economy, Mexico, Ransomware, Ransomware Task Force

March 31, 2026

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

March 13, 2026 12:00 pm

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On Wednesday, March 11, a pro-Iran hacking group claimed to have wiped 200,000 devices of a major U.S. medical device manufacturer. What do we know about what happened, and who carried out this destructive attack? How should policymakers and critical infrastructure owners and operators respond?

critical infrastructure, cyber, cyber operations, cybersecurity, Iran, medical device

March 12, 2026

IST Experts Weigh in on the 2026 Cyber Strategy

IST Experts Weigh in on the 2026 Cyber Strategy

Today’s Cyber Strategy for America outlined six key priorities for the administration’s “cyber vision.” IST experts weigh in on what’s there, what isn’t, and what the plan means for cybersecurity going forward.

critical infrastructure, cyber offense, cybersecurity, deterrence, National Cybersecurity Strategy, Strategy, White House

March 6, 2026

Reflecting on the Munich Cybersecurity Conference Roller Coaster: Digital Sovereignty, Decoupling, and the Risks and Opportunities of AI

Reflecting on the Munich Cybersecurity Conference Roller Coaster: Digital Sovereignty, Decoupling, and the Risks and Opportunities of AI

IST Chief Strategy Officer Megan Stifel visited Germany in February to join cybersecurity experts from around the globe at the Munich Cyber Security Conference. From digital sovereignty to the risks and opportunities of AI, she reflects on her experience for the NatSpecs blog.

artificial intelligence, cybersecurity, decoupling, digital sovereignty, Munich, transatlantic

March 5, 2026

Episode 50: Systems Engineering for Survival: A Physician’s Guide to Emergency Management

Episode 50: Systems Engineering for Survival: A Physician’s Guide to Emergency Management

Bryson Bort welcomes Dr. Natalie Sullivan, Medical Director of the Emergency Response Medical Group and an emergency medicine physician at a D.C. area hospital. Trained in EMS and disaster and operational medicine, Natalie turned her attention to the critical intersection of clinical medicine, patient safety, and cybersecurity resilience after experiencing a prolonged ransomware attack on a major hospital.

critical infrastructure, cybersecurity, emergency management, emergency systems management, resilience, UnDisruptable27

February 17, 2026

Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

Active Defense, the Congressional Agenda, Teen Hackers, and Critical Infrastructure Resilience: IST at RSA

IST will once again join the global community of cyber experts in convening in San Francisco for RSAC this March! From active defense, to the congressional agenda, to stopping teen hackers, the IST team and adjuncts will tackle complex issues across sectors.

AI, artificial inteligence, critical infrastructure, cyber, cyber attacks, Cyber Civil Defense, cybersecurity, Ransomware, resilience, RSA

January 28, 2026

Episode 49: Bridging the IT/OT Divide in Oil and Gas

Episode 49: Bridging the IT/OT Divide in Oil and Gas

Bryson Bort is joined by Dd Budiharto, Microsoft’s Customer Security Officer for the Oil, Gas, and Energy sectors, as she shares her experience bridging the IT/OT divide in the energy sector.

CISO, cybersecurity, energy, gas, IT, oil, OT

January 20, 2026

Episode 48: AI and the Future of Maritime Cybersecurity

Episode 48: AI and the Future of Maritime Cybersecurity

In a new episode of the ICS Village and IST podcast Hack the Plan[e]t, retired maritime cybersecurity professor Gary Kessler joins Bryson Bort to walk us through the ins and outs of cybersecurity at sea, automated identification systems, and AI’s current and future role in maritime operations. What is AIS spoofing, and why is it dangerous? What are the unique challenges posed by cybersecurity at sea? Is the maritime industry ready for artificial intelligence integrations?

critical resilience, cyber, cybersecurity, martime

December 16, 2025

IST Contributes to the International Counter Ransomware Initiative Summit for the Fourth Consecutive Year: Exercises, Workshops, and Private Sector Advisory Panel

IST Contributes to the International Counter Ransomware Initiative Summit for the Fourth Consecutive Year: Exercises, Workshops, and Private Sector Advisory Panel

Over the last four years, IST has been a critical partner to the International Counter Ransomware Initiative's coalition of governments and other key partners in their effort to coordinate global actions against ransomware. This October, IST’s Steve Kelly, Elizabeth Vish, and Gigi Flores Bustamante joined the CRI’s fifth summit in Singapore to deliver IST’s research on public-private partnerships to combat cybercrime.

counter ransomware initiative, critical infrastructure, cybersecurity, international collaboration, Public-private partnerships, Ransomware, Singapore, TTX

December 10, 2025

F5, SolarWinds, and the Lethargy of the FAR Council

In the News, Op-ed

F5, SolarWinds, and the Lethargy of the FAR Council

Sources say the next national cyber strategy will address federal procurement, but secure-by-demand rules have been stuck at the FAR Council since 2022. For Lawfare, IST Senior VP Nick Leiserson argues that stopping procurement regulation vaporware is key.

cybersecurity, F5, FAR, Federal Acquisision Regulatory Council, procurement, secure by demand, SolarWinds

December 4, 2025

Fighting Cyber-Enabled Fraud: A Systemic Defense Approach

Fighting Cyber-Enabled Fraud: A Systemic Defense Approach

Phishing and cyber-enabled fraud are escalating global threats affecting users, consumers, organizations and countries alike. A new white paper, developed by the World Economic Forum’s Partnership against Cybercrime in collaboration with IST, presents a systemic defense framework to confront this challenge.

cybersecurity, DNS, fraud, ICANN, phishing, systemic defense, WEF

December 2, 2025

Scaling Disruption: What the Next Cyber Strategy Must Get Right

Scaling Disruption: What the Next Cyber Strategy Must Get Right

What should be prioritized in the White House’s forthcoming National Cyber Strategy? In an op-ed for Claroty Nexus, Megan Stifel outlined what the next strategy must get right in order to safeguard citizens and maintain America's global leadership.

cybersecurity, disruption, National Cybersecurity Strategy, operational collaboration, PPPs, Public-private partnerships, White House

December 2, 2025

Giving Tuesday 2025: IST’s Impact

Giving Tuesday 2025: IST’s Impact

Every day, the work we do at IST makes a difference, from driving Congress to consider new approaches to intractable problems, to bringing national security leaders together to ensure they consider the existential threat of AI, to arming K-12 schools with the tools they need to defend against ransomware. As a 501(c)(3) nonprofit, this is only possible because of the generous support of our partners and donors.

AI, artificial intelligence, critical infrastructure, cybersecurity, Giving Tuesday, national security, Ransomware

December 2, 2025

Cyber Threats to Water Infrastructure: Insights from Josh Corman

In the News, Podcast

Cyber Threats to Water Infrastructure: Insights from Josh Corman

IST Executive in Residence for Public Safety & Resilience Josh Corman joined host Paul Roberts on The Security Ledger podcast to discuss what UnDisruptable27 is doing to mitigate the cyber threats facing small and local water utilities.

critical infrastructure, cybersecurity, Volt Typhoon, water utility

November 26, 2025