Archive

cybersecurity

IST Welcomes Microsoft as Presenting Partner for the Second Annual Cyber Policy Awards™

The Institute for Security and Technology (IST) is proud to announce Microsoft as the Presenting Partner for the upcoming Cyber Policy Awards™. The Second Annual Cyber Policy Awards™ presented by Microsoft will be held on the evening of Thursday, February 6, 2025 at the United States Chamber of Commerce in Washington, DC.

Cyber Policy Awards, cybersecurity

December 17, 2024

Navigating AI Compliance, Part 1: Tracing Failure Patterns in History

What is the risk of compliance failure in AI foundation models, and how can it be mitigated? The AI Risk Reduction Initiative’s latest report analyzes the history of failures across industries in an effort to avoid future pitfalls, and offers practical frameworks and definitions for practitioners navigating the complex compliance landscape. The first of a two-part series, this report examines 11 case studies from AI-adjacent industries to identify three distinct failure categories: institutional, procedural, and performance.

artificial inteligence, compliance, cybersecurity, Future of Digital Security

December 10, 2024

Delivering results requires a critical action think tank

Our role as a 501(c)(3) critical action think tank has never been more crucial. As technology empowers us, it also brings incredible challenges. We help accelerate its benefits while keeping individuals, businesses, governments, and society safe from harm. On Giving Tuesday, we extend our sincere thanks to all of our supporters. Our work would not be possible without you. To celebrate, IST CEO Philip Reiner shares his reflections on the last year, our impact, and why what we do is so important.

artificial intelligence, critical action, critical infrastructure, cybersecurity, public-private, Ransomware

December 3, 2024

Episode 39: Reliability and Risks of the North American Power Grid

This month on Hack the Plan[e]t, host Bryson Bort is joined by Sara Patrick, President and CEO at the Midwest Reliability Organization to learn more about the organization’s mission to identify and mitigate security risks facing the North American bulk power system.

critical infrastructure, cybersecurity, ICS, power grid

November 26, 2024

Cybersecurity Awareness Month at IST: Tips, Tricks, and Takes from the Team

Last month, we shared the IST team’s best tips, tricks, and takes in honor of Cybersecurity Awareness Month. IST Comms Associate Lillian Ilsley-Greene sat down with the team to get their insights on the most pressing cyber issues facing our world.

AI, cybersecurity, incentives, MFA, online safety, Ransomware, software

November 4, 2024

IST Experts Weigh in on President Biden’s Artificial Intelligence National Security Memorandum

We commend the Biden-Harris Administration for releasing its National Memorandum on Advancing the United States’ Leadership in Artificial Intelligence. IST has long supported the nation’s security priorities and technological objectives through our investigation into AI and machine learning in NC3, AI risk reduction, and AI in cybersecurity. We call for safe, secure, and trustworthy AI innovation.

artificial intelligence, cybersecurity, memorandum, national security

October 30, 2024

Q&A: IST at the International Counter Ransomware Initiative

In this month’s edition of The TechnologIST, we sat down with Ransomware Task Force colleagues Future of Digital Security Associate Trevaughn Smith, Deputy Director for Digital Security Taylor Grossman, Senior Director for International Cyber Engagement Elizabeth Vish, and Chief Strategy Officer and RTF Executive Director Megan Stifel to learn about the Ransomware Task Force's ongoing support for the International Counter Ransomware Initiative.

CRI, cybersecurity, Public-private partnerships, Ransomware

October 25, 2024

Cybersecurity and the Clean Energy Transition

The time to start preparing for a clean energy transition is now. In October, IST and the Berkeley Center for Long-Term Cybersecurity hosted an in person dialogue to discuss how cybersecurity can support a new renewable energy infrastructure.

cybersecurity, electricity, energy grid, energy security

October 22, 2024

The Implications of Artificial Intelligence in Cybersecurity: Shifting the Offense-Defense Balance

Advances in AI present key cybersecurity opportunities, but how might malicious actors utilize the same technology? IST’s latest report investigates the state of existing and potential integrations of AI in cybersecurity based on our research & interviews with industry stakeholders and puts forward 7 priority recommendations.

agentic, AI, artificial intelligence, cyber, cybersecurity, deepfakes, offense-defense balance, software

October 10, 2024

Episode 38: Securing Embedded Systems

In this episode of Hack the Plant, host Bryson Bort sits down with MITRE EMB3D co-founder Niyo Little Thunder Pearson. For nearly 20 years, Niyo has been at the forefront of protecting critical infrastructure systems. He previously led incident response for American Express, directing the company’s Security Operations Center during the LulzSec and Anonymous attacks, and worked to develop an adversarial cyber defense program for the nation’s third largest gas utility at ONE Gas Oklahoma. Now, Niyo has co-founded MITRE EMB3D, a groundbreaking global threat network aimed at enhancing the security of embedded devices.

critical infrastructure, cybersecurity, embedded systems, hacker, MITRE EMB3D

September 25, 2024

IST unveils new project, engages with White House at “Hacker Summer Camp”

The Institute for Security and Technology (IST)’s Steve Kelly and Josh Corman joined thousands of infosec experts, security professionals, journalists, government officials, and cyber enthusiasts at “hacker summer camp,” the cybersecurity conference trio of Black Hat, BSides, and DEF CON—amongst many other bespoke gatherings and meetings.

AI, BSIDESLV, critical infrastructure, cybersecurity, DEF CON

August 22, 2024

A New Plan to Break the Cycle of Destructive Critical Infrastructure Hacks

WIRED's Lily Hay Newman interviewed Josh Corman on the launch of UnDisruptable27. "A longtime critical infrastructure security researcher is launching a project to communicate with utility operators, municipalities, and regular people in creative ways about both urgency and optimism around protecting critical infrastructure now,” writes Newman.

BSides, China, critical infrastructure, cybersecurity

August 6, 2024

Institute for Security and Technology and Cyber Threat Alliance Submit Comments on Cyber Incident Reporting for Critical Infrastructure Act

IST and the Cyber Threat Alliance, along with co-signer Chainalysis, submitted comments on July 3, 2024 in response to the Cybersecurity and Infrastructure Security Agency’s Notice of Proposed Rulemaking on the Cyber Incident Reporting for Critical Infrastructure Act.

CIRCIA, critical infrastructure, cybersecurity, incident reporting, Ransomware, RFI

July 3, 2024

May 30, 2024 10:00 am

Hack the Capitol 7.0

Hack the Capitol 7.0 took place in May 2024 in Washington, DC and featured 2 days of policy, strategy, and governance-focused panels and presentations, individual deep dives on corporate, legal, regulatory, technical, or operational details, and talks dedicated to peer-to-peer information sharing.

critical infrastructure, cybersecurity, hackers, ICS, Industrial Control Systems, OT

May 31, 2024

Testimony: Red Alert: Countering the Cyberthreat from China

On May 15, 2024, Chief Trust Officer Steve Kelly testified before the House Committee on Oversight and Accountability Subcommittee on Cybersecurity, Information Technology, and Government Innovation in a hearing entitled, "Red Alert: Countering the Cyberthreat from China."

China, critical infrastructure, cybersecurity

May 28, 2024

Episode 35: Preparing for the potential worst day

In this episode, Bryson Bort is joined by Paul Shaver, Global OT Security Practice Lead at Mandiant / Google Cloud to discuss the cyber threat landscape. How did Paul’s military background play a role in his decision to start working with control systems? What is the difference between an advanced persistent threat and a regular threat? What does Paul think is the best way to protect against documented threats from nation-state actors?

advanced persistent threat, critical infrastructure, cyber resilience, cybersecurity

May 21, 2024