2026

Securing the Frontier: Moving Past AI Fear and Toward Systemic Incentives

As AI models become more advanced, concerns over national security, cyber threats, and loss of control continue to rise. In her latest analysis for Claroty, IST’s Megan Stifel argues that we don't need to panic—we need to prepare.

AI, cyber, resilience, risk management, risk reduction

July 6, 2026

AAR, Report

Exercice de simulation de l’Initiative de lutte contre les rançongiciels: Rapport après action

L'Institute for Security and Technology (IST), en partenariat avec le Department of Home Affairs de l’Australie et le Groupe consultatif du secteur privé sur l’Initiative de lutte contre les rançongiciels (ILR), dirigé par Sécurité publique Canada et BlackBerry, a organisé un exercice de simulation multinational sur les rançongiciels pour voir comment les intervenants des secteurs public et privé se coordonnent lors d’un incident important.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

June 24, 2026

Policy Memo

Last Mile Cybersecurity

Federal funding bills rarely require cybersecurity for the infrastructure they finance, even as adversaries target U.S. water systems, power grids, and government networks. "Last Mile Cybersecurity" outlines concrete policy fixes to close that gap.

critical infrastructure, cybersecurity, energy, grants, national security, OMB, public funding, resilience, risk-mitigation, water

June 22, 2026

Markup

Democratic Governance of Frontier AI: A Markup

On June 2, OpenAI published "Democratic Governance of Frontier AI," a proposal for how the United States should govern its most capable AI systems. In the first of a series of markups, IST’s Fatima Faisal Khan unpacks the proposal for policymakers.

AI, artificial intelligence, commentary, evaluation, governance, policy, regulation, safety, standards

June 18, 2026

Policy Memo

Driving AI Transparency: Supply- and Demand-Based Paths Toward AIBOM

Understanding AI systems’ technical DNA is crucial to ensuring trust, resilience, and risk management. A new policy memo makes the case for establishing a shared vision of Artificial Intelligence Bills of Materials (AIBOMs).

artificial intelligence, bill of materials, critical infrastructure, cybersecurity, demand, resilience, risk management, supply, supply chain

June 16, 2026

Testimony

Testimony: Research-Driven Resilience: Applying Science to Secure U.S. Water Systems from Cyber Threats

IST Executive in Residence Josh Corman testified before the House Committee on Science, Space, and Technology's Subcommittee on Environment in a hearing on efforts to protect the nation's drinking water and wastewater systems from growing cyber threats. “Attacks on water utilities can start affecting worsened outcomes and even loss of life within minutes for heart conditions,” he said.

cyber threats, cybersecurity, UnDisruptable27, Volt Typhoon, water, water system

May 22, 2026

Primer, Report

The United States’ Nuclear Command, Control, and Communications (NC3) Operations

IST's Brandon Cortino and Catherine Murphy co-authored a primer that serves to create a stronger understanding of the systems comprising the U.S. NC3 network, summarize modernization plans, and explore the challenges that emerge in an increasingly uncertain threat environment.

command, communications, control, Department of Defense, deterrence, EDTs, modernization, NC3, nuclear, stability

May 7, 2026

Progress Report

The Ransomware Task Force at 5 Years: Progress… and Backsliding

As we mark the fifth anniversary of the release of the RTF report and its 48 recommendations, IST’s cyber experts took time to reflect on each of the 4 pillars, note where they’ve seen improvements since 2021, and track where progress has slowed–or even taken a step back.

blueprint, cybercrime, deter, disrupt, prepare, Ransomware, respond, RTF

April 30, 2026

Testimony

Testimony: Online Scams, Crypto Fraud & Digital Extortion: How Transnational Criminal Networks Target Americans

On Tuesday, April 21, IST Chief Strategy Officer Megan Stifel joined the House Committee on Homeland Security for a hearing on online scams, fraud, and digital extortion to examine how transnational criminal networks are targeting Americans.

congress, cybersecurity, extortion, fraud, Ransomware

April 21, 2026

In the News

How to End the Iran Crisis

For Foreign Affairs, former European Commission VP Federica Mogherini & IST Senior Fellow Sahil V. Shah examine the trajectory of the Iran-U.S. peace talks, and the future of the nuclear file.

Iran, national security, nuclear, nuclear energy, United States

April 13, 2026

AAR, Report

Counter Ransomware Initiative Tabletop Exercise: After-Action Report

IST, in partnership with the Australian Department of Home Affairs and the Counter Ransomware Initiative’s Private Sector Advisory Panel—led by Public Safety Canada and BlackBerry—held a multinational ransomware tabletop exercise on the margins of Singapore International Cyber Week and the Fifth CRI Summit. A new after action report summarizes the discussion and presents 3 key takeaways.

coordination, counter ransomware initiative, cyber, cybersecurity, disruption, information sharing, operational collaboration, Ransomware, Singapore, tabletop exercise

March 31, 2026

Report

Comparative Analysis of National and Regional Product Cybersecurity Frameworks

Author Taylor Roberts presents a structured, data-driven analysis of product cybersecurity frameworks across multiple jurisdictions for policymakers.

Australia, comparative analysis, cyber, Cyber Resilience Act, EU, FAR, product cybersecurity, South Korea

March 19, 2026

In the News, Op-ed

Imminent National Cyber Strategy May Lean on Offense at the Expense of Defense

The Trump administration’s National Cyber Strategy is imminent. Will it, as rumors suggest, prioritize cyber offense over defense in order to shape adversary behavior? In a new Claroty Nexus op-ed, IST Chief Strategy Officer Megan Stifel breaks down the history of U.S. cyber strategy and the potential drawbacks of an offense-first approach.

critical infrastructure, cyber, cyber defense, cyber offense, disruption, hack back, National Cybersecurity Strategy

February 26, 2026

Memo, Primer

A Changing Export Control Landscape: H200 Exports, Remote Access Rules, and What Comes Next

January 2026 was, in many ways, an inflection point for export controls. From the resumption of Nvidia H200 sales to China to congressional discussion on restricting remote cloud access, IST's AI Chip Export Control Initiative team unpacks what these developments mean for the future.

AI, artificial intelligence, Bureau of Industry and Security, China, chip, export control, NVIDIA, semiconductor

February 24, 2026

Report

AI Loss of Control Risk: Indications & Warning

Though technologists and policymakers alike are eager to address AI Loss of Control–a state in which an AI system diverges from authorized constraints–there are significant gaps in the ways stakeholders understand, anticipate, and perceive this risk. "AI Loss of Control Risk" proposes applying the Indications & Warning (I&W) methodology used by the intelligence community to monitor this risk.

AI, AI Loss of Control, artificial intelligence, deception, model drift, risk reduction, scheming

February 19, 2026

Featured Events

Focus Areas

Archive