Archive

cybersecurity

Episode 46: Local Infrastructure is Critical Infrastructure

Bryson Bort sits down with NY Chief Cyber Officer Colin Ahern and Cybersecurity Strategic Advisor for the State of Ohio Kirk Herath to discuss the importance of community cybersecurity protections and what makes local infrastructure critical.

critical infrastructure, cyber, cybersecurity, resilience

August 13, 2025

Cybersecurity Considerations for Universal Service Fund Reform

As the speed, scope, and impact of cyber threats to K-12 schools continues to increase, Congress has expressed a clear desire to reinvigorate the Universal Service Fund (USF) through legislation. IST SVP for Policy Nicholas Leiserson explores how USF funding, through the FCC's E-Rate Program, could bolster cybersecurity resources for K-12 schools.

congress, cyber, cybersecurity, E-Rate, education, k-12, schools, Universal Service Fund, USF

July 25, 2025

Institute for Security and Technology Announces Renewed Support from Craig Newmark Philanthropies to Advance the Future of Digital Security

The Institute for Security and Technology (IST) is excited to announce renewed support from Craig Newmark Philanthropies for our efforts to carry out a multi-pronged approach to protect, empower, and improve overall digital security preparedness and resilience, especially that of state and local governments and small- and medium-sized businesses.

counter ransomware initiative, critical infrastructure, cybersecurity, Future of Digital Security, prepare, Ransomware, respond, SLTT

July 23, 2025

Exercise VEIL STORM I: After Action Report

In partnership with Europol, the Institute for Security and Technology and the Ransomware Task Force’s International Engagement Working Group designed and delivered Exercise VEIL STORM I, a tabletop exercise focused on operational collaboration across international law enforcement agencies and private sector firms in responding to cyber incidents. This after-action report summarizes the proceedings and key takeaways of the exercise.

cyber insurance, cybersecurity, disruption, Europol, information sharing, operational collaboration, public-private collaboration, Public-private partnerships, Ransomware

July 23, 2025

Plan directeur de défense contre les rançongiciels

En réponse à la mesure 3.1.1 du rapport du Groupe de travail sur la lutte contre les rançongiciels, qui recommande à la communauté de la cybersécurité d’« élaborer un cadre clair de mesures exécutables d’atténuation, d’intervention et de récupération relatives aux rançongiciels », le Groupe de travail sur le Plan directeur de défense contre les rançongiciels a intégré au présent document un sous-ensemble structuré de mesures de protection essentielles en matière de cyberhygiène3, puisées dans le site Web Contrôles de sécurité essentiels du contrôles du CIS® v8.

blueprint, cybersecurity, defend, protect, Ransomware, respond

July 14, 2025

Accessible and Secure: Exploring Options to Improve K-12 Cybersecurity through the Universal Service Fund

The Federal Communication Commission’s pilot program to bring cybersecurity resources to K-12 schools received over $3.7 billion in requests for assistance, more than fifteen times the program budget. Last week, IST Senior Director Michael Klein hosted a virtual event to check in on the pilot’s progress, and discuss options for updating the USF.

cybersecurity, E-Rate, FCC, k-12, Universal Service Fund, USF

July 14, 2025

July 11, 2025 2:00 pm

On the Front Lines: Utilizing the Universal Service Fund to Support K-12 Cybersecurity

Cyber incidents affecting K-12 schools are routine, but resources are scarce for communities on the front lines of the cybercrime epidemic. On July 11, IST hosted practitioners & experts to discuss how the FCC’s Universal Service Fund can be used to improve K-12 cybersecurity.

cybersecurity, E-Rate, education, FCC, k-12, schools, telecom, Universal Service Fund

July 11, 2025

What Does Ransomware Have to Do with War and Peace: IST’s Contributions to the Final UN OEWG Negotiation Session

IST joined the eleventh and final substantive session of the Open-Ended Working Group on Security of and in the Use of Information and Communications Technologies this week at the UN. While there, we participated in a side event on the Brazil Ransomware Task Force.

Brazil, cybercrime, cybersecurity, cyberspace, International engagement, law, multistakeholder, Organization of American States, Ransomware, United Nations

July 10, 2025

60 Million Reasons to Rethink Vendor Management: IST hosts experts on PowerSchool data breach

When a single data breach can affect 60 million students and 10 million teachers, what can states and districts do to protect their communities? IST Senior Director Michael Klein hosted a virtual event unpacking how state and local leaders and policymakers are rethinking their approaches to third-party vendor risk in the wake of the PowerSchool cyber incident.

cybersecurity, k-12, PowerSchool, Ransomware, third party risk, vendor management, vendor risk

July 8, 2025

IST Submits Comments to the EU Cybersecurity Act Review Consultation

In April, the European Commission opened a public consultation process for feedback on the European Union Agency for Cybersecurity (ENISA) and the implementation of the Cybersecurity Act. Drawing on engagements with a broad range of stakeholders as part of our Future of Digital Security portfolio, IST’s comments focus on harmonizing legislation and streamlining incident reporting requirements.

cyber incident harmonization, cybersecurity, European Union, incident reporting, IT, legislation, NIS-2, OT, secure-by-design

June 24, 2025

June 17, 2025 3:00 pm

Managing Third Party Risk after PowerSchool

When the largest K-12 cyber incident in history can be caused by a teenage hacker logging into a vendor’s customer service portal with just a contractor’s credentials, what can states and districts do to protect their students, teachers, and families?

contractors, cybersecurity, k-12, Ransomware, third party risk, vendor risk

June 17, 2025

Congressional Oversight on Salt Typhoon: Missing An Opportunity

The Salt Typhoon intrusion into U.S. telecom networks is “one of the greatest intelligence operations ever conducted against the United States.” How should Congress have responded? IST Senior Vice President for Policy Nicholas Leiserson unpacks the missed opportunities for oversight, and the path forward.

China, congress, cybersecurity, legislation, PRC, Salt Typhoon, SolarWinds

May 6, 2025

May 1, 2025 3:30 pm

Defeating Ransomware: A 360° Review of the RTF Four Years On

It’s been 4 years since the Ransomware Task Force first launched. The RTF helped pioneer the way policymakers approach ransomware and elevated its importance to a true national security threat. Since then, 50% of its recommendations have seen progress – but the others have not. At RSA Conference, IST Chief Strategy Officer & RTF Executive Director Megan Stifel moderates a panel to explore what's worked, and what hasn't.

cybersecurity, deter, Ransomware, respond

May 1, 2025

May 1, 2025 3:20 pm

Taking the Fight Upstream: Pursuing Systemic Defense Against Phishing

Three decades into the public internet, cybercrime is booming and phishing remains a key vector. At RSA 2025, IST Chief Trust Officer Steve Kelly joined a panel on pursuing systemic defense against phishing.

AI, cybercrime, cybersecurity, fraud, ICT, phishing, systemic defense

May 1, 2025

Q&A: The Strategic Potential of Cyber Insurance

In a new report, IST makes the case that cyber insurance has the strategic potential to be more than a passive player that uses annual renewal conversations around premiums to drive change. By becoming more active in their recommendations about cybersecurity products and services, cyber insurers can actually help their policyholders achieve better proactive, pre-incident cybersecurity.

bundling, cyber insurance, cyber resilience, cyber risk, cybersecurity, risk-mitigation, underwriting

April 29, 2025

IST at RSA 2025: Zeroing in on hybrid warfare, ransomware, phishing, and more

Core to our mission at IST is our belief that we achieve more when industry, government, and civil society come together in pursuit of a common goal. We’re proud to join the global community of cyber experts convening in San Francisco next week for RSA Conference!

artificial intelligence, critical infrastructure, cybercrime, cybersecurity, national security, phishing, Ransomware, systemic defense

April 23, 2025