Archive

cybersecurity

Episode 47: Creating a Cyber Aware Culture for Local Water Utilities

Bryson Bort and Cyber Readiness Institute Deputy Managing Director Lessie Skiba sit down to discuss the CRI’s new program connecting cyber experts with small and medium sized water utilities to bolster their cybersecurity and resilience.

critical infrastructure, cyber resilience, cybersecurity, water

September 9, 2025

Law Enforcement Strikes BlackSuit (Royal) Ransomware, Seizing Funds and Infrastructure

This summer, U.S. and international law enforcement agencies carried out a coordinated operation against the BlackSuit (formerly Royal) ransomware group, confiscating over $1M in illicit cryptocurrency. IST Senior Associate for the Future of Digital Security Gigi Flores Bustamante unpacks the takedown.

cybercrime, cybersecurity, Ransomware, Ransomware Task Force

August 28, 2025

Michael Klein joins press conference announcing $3.7 million grant for Kentucky school cybersecurity

IST Senior Director for Preparedness and Response Michael Klein joined a Jefferson County Public Schools press conference in Louisville, Kentucky to announce a $3.7 million award from the Federal Communications Commission to bolster the district’s cybersecurity defenses.

cyber, cybersecurity, E-Rate, education, FCC, k-12, Universal Service Fund, USF

August 20, 2025

Institute for Security and Technology Suggests Revising E-Rate

In a recent memo, IST Senior VP Nicholas Leiserson recommended policy changes to make the USF a resource for school cybersecurity, including expanding E-Rate coverage. The E-Rate program has already helped to close the internet connectivity gap, but connectivity without security leaves school districts vulnerable to attacks, IST Senior Director Michael Klein explained to Government Technology.

cybersecurity, K-12 Cyber Defense Coalition, Universal Service Fund

August 19, 2025

What to Make of the U.S. Federal Court Breach(es)

IST Senior VP for Policy Nicholas Leiserson examines the latest breach of the U.S. federal court systems. “As a nation founded on the rule of law, this incident (or series of incidents) presents a host of challenges for policymakers and the broader public,” he writes, pointing out three: the balance between confidentiality and availability, the impact of transparency, and the downsides of investments in treading water.

availability, confidentiality, courts, cybersecurity, integrity, justice system

August 15, 2025

Episode 46: Local Infrastructure is Critical Infrastructure

Bryson Bort sits down with NY Chief Cyber Officer Colin Ahern and Cybersecurity Strategic Advisor for the State of Ohio Kirk Herath to discuss the importance of community cybersecurity protections and what makes local infrastructure critical.

critical infrastructure, cyber, cybersecurity, resilience

August 13, 2025

Cybersecurity Considerations for Universal Service Fund Reform

As the speed, scope, and impact of cyber threats to K-12 schools continues to increase, Congress has expressed a clear desire to reinvigorate the Universal Service Fund (USF) through legislation. IST SVP for Policy Nicholas Leiserson explores how USF funding, through the FCC's E-Rate Program, could bolster cybersecurity resources for K-12 schools.

congress, cyber, cybersecurity, E-Rate, education, k-12, schools, Universal Service Fund, USF

July 25, 2025

Institute for Security and Technology Announces Renewed Support from Craig Newmark Philanthropies to Advance the Future of Digital Security

The Institute for Security and Technology (IST) is excited to announce renewed support from Craig Newmark Philanthropies for our efforts to carry out a multi-pronged approach to protect, empower, and improve overall digital security preparedness and resilience, especially that of state and local governments and small- and medium-sized businesses.

counter ransomware initiative, critical infrastructure, cybersecurity, Future of Digital Security, prepare, Ransomware, respond, SLTT

July 23, 2025

Exercise VEIL STORM I: After Action Report

In partnership with Europol, IST and the RTF’s International Engagement Working Group designed and delivered Exercise VEIL STORM I. This after-action report summarizes the proceedings and key takeaways of the exercise.

cyber insurance, cybersecurity, disruption, Europol, information sharing, operational collaboration, public-private collaboration, Public-private partnerships, Ransomware

July 23, 2025

Plan directeur de défense contre les rançongiciels

En réponse à la mesure 3.1.1 du rapport du Groupe de travail sur la lutte contre les rançongiciels, qui recommande à la communauté de la cybersécurité d’« élaborer un cadre clair de mesures exécutables d’atténuation, d’intervention et de récupération relatives aux rançongiciels », le Groupe de travail sur le Plan directeur de défense contre les rançongiciels a intégré au présent document un sous-ensemble structuré de mesures de protection essentielles en matière de cyberhygiène3, puisées dans le site Web Contrôles de sécurité essentiels du contrôles du CIS® v8.

blueprint, cybersecurity, defend, protect, Ransomware, respond

July 14, 2025

Accessible and Secure: Exploring Options to Improve K-12 Cybersecurity through the Universal Service Fund

The Federal Communication Commission’s pilot program to bring cybersecurity resources to K-12 schools received over $3.7 billion in requests for assistance, more than fifteen times the program budget. Last week, IST Senior Director Michael Klein hosted a virtual event to check in on the pilot’s progress, and discuss options for updating the USF.

cybersecurity, E-Rate, FCC, k-12, Universal Service Fund, USF

July 14, 2025

July 11, 2025 2:00 pm

On the Front Lines: Utilizing the Universal Service Fund to Support K-12 Cybersecurity

Cyber incidents affecting K-12 schools are routine, but resources are scarce for communities on the front lines of the cybercrime epidemic. On July 11, IST hosted practitioners & experts to discuss how the FCC’s Universal Service Fund can be used to improve K-12 cybersecurity.

cybersecurity, E-Rate, education, FCC, k-12, schools, telecom, Universal Service Fund

July 11, 2025

What Does Ransomware Have to Do with War and Peace: IST’s Contributions to the Final UN OEWG Negotiation Session

IST joined the eleventh and final substantive session of the Open-Ended Working Group on Security of and in the Use of Information and Communications Technologies this week at the UN. While there, we participated in a side event on the Brazil Ransomware Task Force.

Brazil, cybercrime, cybersecurity, cyberspace, International engagement, law, multistakeholder, Organization of American States, Ransomware, United Nations

July 10, 2025

60 Million Reasons to Rethink Vendor Management: IST hosts experts on PowerSchool data breach

When a single data breach can affect 60 million students and 10 million teachers, what can states and districts do to protect their communities? IST Senior Director Michael Klein hosted a virtual event unpacking how state and local leaders and policymakers are rethinking their approaches to third-party vendor risk in the wake of the PowerSchool cyber incident.

cybersecurity, k-12, PowerSchool, Ransomware, third party risk, vendor management, vendor risk

July 8, 2025

IST Submits Comments to the EU Cybersecurity Act Review Consultation

In April, the European Commission opened a public consultation process for feedback on the European Union Agency for Cybersecurity (ENISA) and the implementation of the Cybersecurity Act. Drawing on engagements with a broad range of stakeholders as part of our Future of Digital Security portfolio, IST’s comments focus on harmonizing legislation and streamlining incident reporting requirements.

cyber incident harmonization, cybersecurity, European Union, incident reporting, IT, legislation, NIS-2, OT, secure-by-design

June 24, 2025

June 17, 2025 3:00 pm

Managing Third Party Risk after PowerSchool

When the largest K-12 cyber incident in history can be caused by a teenage hacker logging into a vendor’s customer service portal with just a contractor’s credentials, what can states and districts do to protect their students, teachers, and families?

contractors, cybersecurity, k-12, Ransomware, third party risk, vendor risk

June 17, 2025