Archive

cybersecurity

Exercice de simulation de l’Initiative de lutte contre les rançongiciels: Rapport après action

L'Institute for Security and Technology (IST), en partenariat avec le Department of Home Affairs de l’Australie et le Groupe consultatif du secteur privé sur l’Initiative de lutte contre les rançongiciels (ILR), dirigé par Sécurité publique Canada et BlackBerry, a organisé un exercice de simulation multinational sur les rançongiciels pour voir comment les intervenants des secteurs public et privé se coordonnent lors d’un incident important.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

June 24, 2026

Last Mile Cybersecurity

Federal funding bills rarely require cybersecurity for the infrastructure they finance, even as adversaries target U.S. water systems, power grids, and government networks. "Last Mile Cybersecurity" outlines concrete policy fixes to close that gap.

critical infrastructure, cybersecurity, energy, grants, national security, OMB, public funding, resilience, risk-mitigation, water

June 22, 2026

Driving AI Transparency: Supply- and Demand-Based Paths Toward AIBOM

Understanding AI systems’ technical DNA is crucial to ensuring trust, resilience, and risk management. A new policy memo makes the case for establishing a shared vision of Artificial Intelligence Bills of Materials (AIBOMs).

artificial intelligence, bill of materials, critical infrastructure, cybersecurity, demand, resilience, risk management, supply, supply chain

June 16, 2026

June 8, 2026 10:30 am

A Policy Response to the Mythos Moment: Breaking down the AI and Cybersecurity EO

What does the newly-released AI and cybersecurity Executive Order mean for cyber defenders? How does it respond to the "Mythos moment"? On June 8, IST hosts a pop-up webinar to explore these questions and more.

artificial intelligence, critical infrastructure, CVE, cybersecurity, Executive Order, national security, vulnerability disclosure

June 5, 2026

UnDisruptable27 Newsletter: “The threat comes from cyber, but the solutions come from engineering. It’s not shields up. It’s connections down.”

In the latest edition of the UnDisruptable27 newsletter, the team reflects on Josh's testimony before Congress, surfacing some of the most surprising takeaways, key insights from his fellow witnesses, and what the community can do next.

cascading failures, congress, critical infrastructure, cyber-informed engineering, cybersecurity, risk reduction, water, water utilities

May 28, 2026

Episode 52: Kindness and Critical Infrastructure: Rethinking OT Security

“Security is not convenient. Nobody likes change. But at the same time, we have to be secure. Finding that middle ground is the challenge in my position.” In Hack the Plan[e]t episode 52, "Kindness and Critical Infrastructure," Andrea Haddad sits down with host Bryson Bort to discuss how to rethink OT security.

authentication, critical infrastructure, cybersecurity, firewall, IT, network security, OT, remote access

May 27, 2026

Testimony: Research-Driven Resilience: Applying Science to Secure U.S. Water Systems from Cyber Threats

IST Executive in Residence Josh Corman testified before the House Committee on Science, Space, and Technology's Subcommittee on Environment in a hearing on efforts to protect the nation's drinking water and wastewater systems from growing cyber threats. “Attacks on water utilities can start affecting worsened outcomes and even loss of life within minutes for heart conditions,” he said.

cyber threats, cybersecurity, UnDisruptable27, Volt Typhoon, water, water system

May 22, 2026

May 21, 2026 2:00 pm

Hearing: Research-Driven Resilience: Applying Science to Secure U.S. Water Systems from Cyber Threats

On May 21, 2026, UnDisruptable27's Joshua Corman testified before the House Science, Space, and Technology's subcommittee on Environment to share lessons learned on protecting U.S. water and wastewater from cyber threats.

congress, cyber-informed engineering, cybersecurity, public safety, resilience, science, water utility

May 19, 2026

May 14, 2026 3:30 pm

When the Classroom Gets Hacked: Securing Schools Before the Next Breach

A massive breach just hit more than 8,800 schools, exposing students' private data as millions of students prepare for final exams. Join RSAC and IST to discuss how to protect "target rich, cyber poor" institutions before the next attack.

cybersecurity, data breach, education, k-12, schools

May 14, 2026

Testimony: Online Scams, Crypto Fraud & Digital Extortion: How Transnational Criminal Networks Target Americans

On Tuesday, April 21, IST Chief Strategy Officer Megan Stifel joined the House Committee on Homeland Security for a hearing on online scams, fraud, and digital extortion to examine how transnational criminal networks are targeting Americans.

congress, cybersecurity, extortion, fraud, Ransomware

April 21, 2026

Q&A: Where do we go from here? IST Reflections on RSAC ‘26

Once a year, the cybersecurity community converges on San Francisco. From the expo floor to vendor pop ups in Yerba Buena Gardens, the SOMA neighborhood is abuzz for four days with hackers, researchers, and government policy experts eager to share insights. But this year, the din was a little different.

AI, congress, critical infrastructure, cybersecurity, K-12 Cyber Defense Coalition, K-12 Education, RSA, RSAC, UnDisruptable27

April 2, 2026

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

IST, in partnership with the Australian Department of Home Affairs and the Counter Ransomware Initiative’s Private Sector Advisory Panel—led by Public Safety Canada and BlackBerry—held a multinational ransomware tabletop exercise on the margins of Singapore International Cyber Week and the Fifth CRI Summit. A new after action report summarizes the discussion and presents 3 key takeaways.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

March 31, 2026

Announcing the Launch of the México Ransomware Task Force

IST, in collaboration with a coalition of local and global partners, is excited to announce the launch of the México Ransomware Task Force to tackle the growing threat that ransomware poses to Mexican critical infrastructure and the country’s digital economy, made possible through the support of Mastercard, Microsoft, and Sophos.

critical infrastructure, cybersecurity, digital economy, Mexico, Ransomware, Ransomware Task Force

March 31, 2026

March 13, 2026 12:00 pm

The Fight Comes to Our Shores: Breaking Down the Cyber Attack on Stryker

On Wednesday, March 11, a pro-Iran hacking group claimed to have wiped 200,000 devices of a major U.S. medical device manufacturer. What do we know about what happened, and who carried out this destructive attack? How should policymakers and critical infrastructure owners and operators respond?

critical infrastructure, cyber, cyber operations, cybersecurity, Iran, medical device

March 12, 2026

IST Experts Weigh in on the 2026 Cyber Strategy

Today’s Cyber Strategy for America outlined six key priorities for the administration’s “cyber vision.” IST experts weigh in on what’s there, what isn’t, and what the plan means for cybersecurity going forward.

critical infrastructure, cyber offense, cybersecurity, deterrence, National Cybersecurity Strategy, Strategy, White House

March 6, 2026

Reflecting on the Munich Cybersecurity Conference Roller Coaster: Digital Sovereignty, Decoupling, and the Risks and Opportunities of AI

IST Chief Strategy Officer Megan Stifel visited Germany in February to join cybersecurity experts from around the globe at the Munich Cyber Security Conference. From digital sovereignty to the risks and opportunities of AI, she reflects on her experience for the NatSpecs blog.

artificial intelligence, cybersecurity, decoupling, digital sovereignty, Munich, transatlantic

March 5, 2026