IST Chief Strategy Officer @megans.bsky.social joined TechSoup EVP Shruti Ramaswami for a new episode of #TechSoupTalks to shed light on both public policy and civil society responses to cyber threats, and what it takes to build stronger collective defenses across sectors. 🛡️ Watch the discussion:

AI is reshaping vulnerability management, and policy debates along with it. From Anthropic’s suspension of Fable5 & Mythos to the proposal to codify the CVE program in a defense policy bill, it's a lot to unpack. Join IST friends & adjunct advisors on 7/1 to learn more. 🛡️Register: bit.ly/4ePII45

In the wrong hands, AI models like Anthropic’s Mythos could set off an onslaught of #cyber attacks. To prepare, states must push vendors to vet software and, importantly, establish protocols for how to respond if something goes wrong, IST’s @michaelfklein.bsky.social told Governing. 🛡️ Read more:

Billions of federal dollars are being spent on upgrading America's critical infrastructure systems, but are we funding vulnerable systems? IST’s Nicholas Leiserson spoke to @federalnewsnetwork.com on IST’s latest policy memo on taking IT/OT cybersecurity the “last mile.” 🛡️ Read more:

En tant que membre du Groupe consultatif public-privé de l'#ILR, l’IST a organisé un exercice sur table en marge de la #SICW25, en partenariat avec le ministère des Affaires intérieures de l’AUS et avec le soutien de Sécurité publique CA. ⬇️

As a member of the #CRI Private Sector Advisory Panel, IST convened a tabletop exercise on the sidelines of #SICW25, in partnership with AUS Home Affairs and with the support of Public Safety CA. Today, we are pleased to publish the after-action report of the tabletop in French. 🛡️ Learn more:

As AI scales, how do we secure its complex supply chain? IST’s latest memo tackles the next frontier: AI Bills of Materials. IST Adjunct @allanfriedman.bsky.social spoke to @cyberscoop.bsky.social on why a fragmented approach to AI transparency will stall progress before it even starts. 🛡️ Read more:

🚨 NEW: Congress earmarks billions for critical infrastructure, but bills rarely address #cybersecurity risk. Meanwhile, foreign adversaries are inside our systems. Today’s memo outlines opportunities for policymakers to finally achieve the "last mile" cybersecurity for IT/OT systems. 🛡️ Read more:

On 6/2, OpenAI published "Democratic Governance of Frontier AI," a proposal for how the U.S. should govern its most capable AI systems. But what would be required to make the framework work? In the first of a series of markups, IST’s Fatima Faisal Khan unpacks the recs for policymakers. ❇️ Read more:

🚀 #CriticalEffectDC ended with the annual #CyberPolicySharkTank, hosted by @beauwoods.com! After Stacey Myers, John Cavanaugh & Nicholas Carroll pitched our Sharks, Nicholas took home first place for Albert for Water, a cybersecurity playbook for under-resourced water utilities. Congratulations!

🚀 AI is transforming both #cyber for both attackers and defenders. At #CriticalEffectDC, Evan Wolf & Megan Stifel sat down with Charles Carmakal & Steve Elovitz to learn the latest: “We're very positive and bullish on how well AI is going to help defend organizations," Charles said.

🚀 Moderated by IST’s Stephanie Ross, this #CriticalEffectDC panel brought together #CyberCivilDefense experts, Matt Altomare, Paul Chang, Jessica Walton & Netta Squires, to share more about their work, why it matters, and what we can do to protect our critical infrastructure systems.

🚀 #CriticalEffect DC day 2 is off to a strong start! @craignewmark.bsky.social joined us for a keynote on philanthropy’s role in #cyber, from #Take9 on Sesame Street to #UnDisruptable27. "The solution requires smart people of goodwill to work together,” he said.

🚀 “The goal here is really understanding: in a crisis, we can't afford to be asking questions.” At #CriticalEffectDC, Matt Rogers presented CI Fortify, an emergency planning and resilience effort to ensure the continued operations of our critical infrastructure systems during major cyber incidents.

🚀 At #CriticalEffectDC, @lzxdc.bsky.social makes the case for #SecurebyDesign reforms across manufacturers, integrators, and policymakers to protect our critical infrastructure: “The root cause of our infrastructure vulnerability...is a market that has never had to pay the price of security."

🚀 No water, no hospitals, no kidding. At #CriticalEffectDC, IST’s @joshcorman.bsky.social moderated a panel with Dean Ford, Mark Montgomery, Natalie Sullivan, and Chuck Weissenborn to highlight water as a cyber‑physical weak point.

🚀 At #CriticalEffectDC, NY Acting Chief Cyber Officer Michaela Lee joined a discussion with other state cyber leaders on building resilience into Target-Rich, Cyber-Poor sectors: "Unless you have tabletop exercises & conversations in advance, you aren’t able to be prepared in...a crisis."

I'm at @istorg.bsky.social's #CriticalEffectDC event today. Looking forward to some good sessions on OT cybersecurity — and, of course, talking to Paul Roberts, @snlyngaas.bsky.social, @kimzetter.bsky.social, and @maggiemiller.bsky.social during our panel about covering this era of cyber threats.

🚀 #CriticalEffect DC has kicked off in Washington! Acting CISA Director Nick Andersen delivered a keynote address on the threats to our critical infrastructure systems: “Each and every one of us is operating right now on the front lines of a war that is never going to be declared,” he said.

🚨NEW: From #cybersecurity to #natsec, AI is now a core component of critical infrastructure. Our society & gov’s dependence makes understanding the technical DNA of AI systems crucial to risk management. Today’s memo makes the case for a shared vision of AI Bills of Materials. ❇️ Read: bit.ly/4eKMjkZ

🚀 As the U.S. spends billions to modernize our energy infrastructure, our systems remain dependent on China for the underlying "electrotech stack." At #CriticalEffectDC, this session explores how the U.S. can secure its energy future & achieve maximum strategic return. ➡️ Register: bit.ly/49n0jyo

🚀 Modern digital infrastructure is often designed to support both civilian & military users, making civilians vulnerable to disruptions during conflict. Jonathan Horowitz presents practical solutions with the goal of improving civilian protection at #CriticalEffectDC. ➡️ Register now: bit.ly/49n0jyo

How can we fight back when adversaries know our defenses? At #CriticalEffect, Andrew Krapf explores how bad actors with a strong knowledge of cyber-physical systems could manipulate systems to cause damage, create uncertainty & evade detection in an under-protected system. ➡️ Register: bit.ly/49n0jyo

🚀 Malicious actors targeting national critical infrastructure often leverage proxies of local devices. At #CriticalEffectDC, Joe Slowik analyzes the technical nature of these networks, implications for monitoring & defense, and considerations for response & mitigation. ➡️ Register: bit.ly/49n0jyo

🚀 As PRC-linked actors pre-position inside U.S. critical infrastructure, Target-Rich, Cyber-Poor sectors still lack defensive resources. This #CriticalEffectDC panel brings together senior cyber leaders to map out a strategy that focuses on both survival and resilience. ➡️ Register: bit.ly/49n0jyo

🚀 You've seen Congressional hearings on TV, in newspapers, and seen the impact of laws. But what's it like behind the scenes? In this #CriticalEffectDC session, IST’s Nick Leiserson sits down with House staffers to discuss priorities, #natsec challenges & more. ➡️ Register to attend: bit.ly/49n0jyo

🚀 Don’t miss this #CriticalEffectDC session! Journalists Paul Roberts, @snlyngaas.bsky.social, @kimzetter.bsky.social, @ericjgeller.com & @maggiemiller.bsky.social join our annual press panel to share their perspectives on the narratives surrounding digital typhoons. ➡️ Register now: bit.ly/49n0jyo

Automox’s Jason Kikta responds to the admin’s latest Executive Order on AI & cybersecurity: “discovery was never the bottleneck,” yet the EO focused on it. He joined IST’s panel of practitioners in a webinar to assess what it gets right, what it could leave exposed & more. ▶️ Watch: bit.ly/4eept3Q

🚀 The countdown to #CriticalEffectDC is on! We're just 9️⃣ days away from gathering policymakers, the media, the IT/OT community & more. Want a sneak peek at the agenda? The Run of Show preview is live! Check out the lineup, pick your must-see sessions – and don’t forget to register! bit.ly/4avQzlR

📺 IN ONE HOUR: The new AI & cybersecurity Executive Order has important implications for cybersecurity and critical infrastructure. Are we ready for what's next? Join @megans.bsky.social, Katie Noble, @kikta.net, and Jen Ellis for a pop-up discussion: us02web.zoom.us/webinar/regi...

📢 POP-UP WEBINAR MONDAY: Breaking Down the AI & Cybersecurity Executive Order The Trump administration's new EO is one of the first major policy responses to the "Mythos moment." What does it get right, and what gaps remain? Register now: securityandtechnology.org/event/a-poli...

What impact will the Trump Admin's new EO on AI have? In a rapid reaction, IST experts weighed in with their initial takes. For IST CEO Philip Reiner, "Today’s EO is the first step we’ve seen from the U.S. government in a while to make AI more trustworthy and secure. Let’s keep the momentum going.”

🚀 Cyber Policy Shark Tank is returning to #CriticalEffectDC! Led by @iamthecavalry.org & @hackersonthehill.org @beauwoods.com, cyber policy innovators will have the opportunity to pitch a specific, actionable policy idea to Congressional staffers. ➡️ Apply by 6/8: docs.google.com/forms/d/e/1F...

🚀#CriticalEffectDC SPEAKER UPDATE! Johan Chamucero, Pedro Umbelino, Oleg Shakirov, Josh Ross & Michaela Lee will be joining us to unpack the effects of protracted disruptions, OT’s cyber needs, the convergence of IT/OT in hospitals, and more. ➡️ Register now: www.eventbrite.com/e/critical-e...

Too often, attackers aren’t even ‘hacking in’—they’re just logging in, IST’s Michael Klein told Governing's Jule Pattison-Gordon. “There are more stealthy ways... but the vast majority of situations we see are those kinds of basic cyber hygiene challenges." For more, see pausetake9.org! #PauseTake9

Meet the 8 Executive Committee members, 5 Chairs and Co-Chairs, and Working Group members of the AI and Nuclear Command, Control, and Communications (AI-NC3) Initiative who are helping to guide its recommendations for decision-makers: securityandtechnology.org/blog/meet-th...

In a new #UnDisruptable27 newsletter, @joshcorman.bsky.social & team reflect on last week's hearing: "From the outset, it was clear that our message was getting through. Nearly every Congressperson referenced the connection between water & healthcare." securityandtechnology.org/blog/undisru...

How can we better bridge the IT & OT worlds? With continuous communication and learning, says technology & infrastructure architecture leader Andrea Haddad on the latest episode of Hack the Plan[e]t with host @brysonbort.bsky.social. Tune in: podcasts.apple.com/us/podcast/k... #HackthePlant

How can we strengthen water cybersecurity? What can we learn from OT security policy in emerging markets? Why might current OT vulnerability management approaches fall short? Learn the answers to these and more from our next round of #CriticalEffectDC speakers: www.eventbrite.com/e/critical-e...

"A clear-eyed understanding of China’s system, neither inflated into inevitability nor dismissed as structurally constrained, is a prerequisite," write Jennifer Tang & Fatima Faisal Khan in their recap of the event, How China Builds AI Power. ➡️ Read more: securityandtechnology.org/blog/how-chi...

"When it comes to medical care, time matters...In 2 hours, a hospital will cease to function without water pressure." @joshcorman.bsky.social testified before Congress yesterday on how to fight back against disruptive, destructive attacks on our water systems, drawing lessons from #UnDisruptable27.

🚨 Hearing UPDATE: What should Congress be doing to help protect the more than 148k water & wastewater systems in the US against cyber threats? On Thursday, 4/21 at 2 PM, the House Science Committee will hear from Josh Corman, Virginia Wright, Nicole Tisdale & David Hinchman. Tune in on YouTube:

🚀 #CriticalEffectDC is excited to welcome @craignewmark.bsky.social, Mark Bristow, Bob Kolasky & Lauren Zabierek to this year’s lineup! #CriticalEffectDC connects policymakers, think tanks, media & more with the experts securing our lifeline critical infrastructure. ➡️ Register now: bit.ly/49n0jyo

U.S. officials have testified to hackers’ capability & intent to disrupt domestic infrastructure. In June, ICS Village, in partnership with IST’s #UnDisruptable27 & Akin, present #CriticalEffectDC, the only conference focused on the nexus of national security, public safety & human life. 🚀 Register:

Pro-Russia hackers disabled operations at multiple water utilities in Poland, cutting off water supply to local populations. The same kind of hybrid warfare also threatens U.S. infrastructure, IST Exec in Residence @joshcorman.bsky.social told Bank Info Security. 🛡️ Read more:

Chinese military hackers known as #VoltTyphoon are pre-positioning in U.S. power grids, water plants & transit systems. IST’s Elizabeth Vish makes the case that getting hackers out of U.S. critical infrastructure should start at this week’s Trump-Xi meeting, but it can’t end there. 🛡️ Read more:

🎬EVENT TODAY: "When the Classroom Gets Hacked" What do we know so far about the Canvas hack that exposed the data of millions of students, and what should "target rich, cyber poor" orgs be doing next? Join IST's Michael Klein & RSAC's Kacy Zurkus today at 3:30 ET: www.linkedin.com/events/whent...

The widely-used digital learning platform Canvas has been the victim of both a data breach and extortion by hackers in recent weeks. IST's @michaelfklein.bsky.social spoke to @politico.com's #MorningCybersecurity newsletter on why the education sector continues to suffer from #cyber threats.

Glad to see @interpol.int's update on the #SilverNotice pilot! Global cooperation on tracing & seizing assets helps make such crimes like #ransomware unprofitable. This pilot is featured in our CRI tabletop exercise as a possible way for “jurisdictions to request the seizure or freeze of funds.”

IST’s #CATALINK Initiative has launched a new website! The #CATALINK communications system is an internationally-driven, secure, and resilient communications solution that has the potential to avert catastrophes amidst rising tensions between adversaries. 🌐 Learn more: catalink.org