Institute for Security and Technology

Reflecting the rapidly evolving global security landscape and the org's own significant growth, IST is launching two new Centers: 🌐 the Perry-Shultz Center for Technology & Strategic Stability and 🛡️ the Center for Advancing Cybersecurity. ➡️ Learn more: securityandtechnology.org/blog/ist-lau...

How can we turn collective cyber defense into action? On Tuesday, October 27, IST CfAC President Nicholas Leiserson joins the #CharterofTrust in D.C. for a panel on the next generation of cyber threats and the role of public-private cooperation in building resilience. 🛡️ Request to attend:

#PHP2Shell threatening 70% of websites, 60M+ sites exposed by weak CA keys, and Storm-0940 using agentic AI to scale attacks—cyber defenders had a brutal week. Is this the start of the "AI vulnpocalypse"? Join a pop-up webinar today for hot takes, questions & more: us02web.zoom.us/webinar/regi...

A cyberattack targeted internet-connected refrigeration systems in supermarkets across France. In the latest #HackthePlant, food security expert @kristinmking.bsky.social told @brysonbort.bsky.social that she anticipates a cyber incident affecting American food systems. 🚀 Listen: bit.ly/4zLsRw6

Between two remote code execution PHP vulnerabilities and new reports of a China-state-aligned hacking campaign that leveraged AI, it's been a long week for cyber defenders. Tomorrow at 12 PM ET/9 AM PT, join IST experts for the latest edition of Vulns + AI = Oh My! 🛡️ Register now: bit.ly/3VOqGtn

EVENT TODAY: AI is poised to reshape the technical foundation of nuclear crisis communications. On the margins of the UN First Committee, IST is convening researchers, diplomats & more to evaluate the risks & opportunities of AI in nuclear crisis comms. reachingcriticalwill.org/disarmament-...

AI is poised to reshape the technical foundation of nuclear crisis comms as both a source of resilience & a catalyst for failure. Tomorrow, at the UN First Committee, IST convenes researchers, diplomats & more to evaluate the risks & opportunities of AI in NC3. 🌐 Learn more: bit.ly/4yy349M

AI-driven threats are outpacing traditional vulnerability management strategies. In August, NIST published a RFI on modernizing the National Vulnerability Database. In their response, Nick Leiserson, Bob Lord & Lauren Zabierek offer four structural changes to rebuild the CVE ecosystem. 🛡️ Read more:

After recent breaches, can schools trust third-party vendors with their data? Not unless edtech companies set clear cybersecurity priorities. For #RSA tomorrow, 10/16 at 1 PM, IST's @michaelfklein.bsky.social joins cyber experts to unpack non-negotiable security baselines for districts. 🛡️ Register:

"We are creating the potential for a foodborne illness to happen from a cyber attack.” For @hacktheplant.bsky.social, @brysonbort.bsky.social sits down with @kristinmking.bsky.social on why food and agriculture remain a dangerously overlooked piece of critical infrastructure. 🚀 Listen now:

The admin’s latest NSPM aims to enlist private contractors to execute offensive cyber ops. But the companies best positioned to disrupt criminals aren’t likely to take on ill-defined risks. In an IST Commentary, Leonard Bailey argues that the NSPM's solutions only raise new questions. 🛡️ Read more:

AI in schools isn’t just about schoolwork; it’s about defending vulnerable systems. On the #AIEducator podcast, IST’s @michaelfklein.bsky.social argues that, with the right support and resources, AI could help target-rich, cyber-poor districts address network vulnerabilities. 🎧 Listen now:

A breach of the Pentagon’s database exposed data on 3M+ employees & military personnel. IST’s @joshcorman.bsky.social joined WJLA to discuss how AI is accelerating cyberattacks & what everyday citizens can do: “Take a healthy level of skepticism, pause, and #Take9 seconds to think.” 🛡️ Watch more:

AI models developed in China have become a favorite among hackers. Chinese state-linked groups have more than doubled their attack volume in recent months, putting AI at the center of the geopolitical contest between the U.S. & China, IST’s Kang Lee argues in an op-ed for @theins.press. ❇️ Read more:

AI-powered cyber threats are increasingly exposing the vulnerabilities in our critical infrastructure. For @claroty.bsky.social, IST CFAC President Nicholas Leiserson argues we can narrow the gap between malicious actors & defenders with efforts like IST’s #FragileFoundationsSprint. 🛡️ Read more:

IST’s Nuclear Policy team attended the U.S. STRATCOM Deterrence Symposium this summer to discuss emerging findings from IST’s ongoing work on the integration of AI into nuclear command, control & communications. IST’s Brandon Cortino reflects on the trip for the #NatSpecs blog. 🌐 Read more:

The FCC's Schools and Libraries Cybersecurity Pilot Program set out to bring cyber resources to K-12 schools — is it succeeding? Tomorrow, the SHLB Coalition hosts cybersecurity experts, including @michaelfklein.bsky.social, to break down the program, potential gaps & what comes next. 🛡️ Register:

“Our educational institutions are critical infrastructure.” In IST’s webinar with members of the Future of Universal Service Fund Reform Task Force, @innovateedunyc.bsky.social CEO Erin Mote explained why the group included #cybersecurity in their recommendations. 🛡️ Watch: tinyurl.com/2wu9uhrn

As cyber threats to schools & libraries grow, the FCC's Cybersecurity Pilot is a step towards getting schools the resources they need. On 9/30, IST’s @michaelfklein.bsky.social joins the SHLB Coalition for a conversation on where the program stands today & what’s possible for the future. 🛡️ Register:

Today, Presidents Trump and Xi wrapped their summit w/o a formal AI agreement. Before the leaders sat down, US officials announced plans for an incident line on AI risk. IST’s Steve Kelly, Sylvia Mishra & Catherine Murphy unpack what it means for the future of the US-China AI relationship. 🌐 Read:

President Trump announced plans to create an AI Force to boost development of emerging AI tech, likening the effort to the Space Force. However, as IST CEO @philreiner.bsky.social told #NextGov, the reference was ambiguous: “you get the shape of an answer, but without the substance.” ❇️ Read more:

How should security practitioners be thinking about AI supply chain risk? What exactly is an AI Bill of Materials? In a #RSAC webinar, IST Senior Technical Advisor @allanfriedman.bsky.social explains where AIBOM efforts stand today & what's next. 🛡️ Watch: portal.onersac.com/link/share/l...

Schools across the country have become a target for malicious actors, but they still lack the #cyber resources to defend themselves. IST brought together members of the Future of Universal Service Fund Reform Task Force to unpack their recs for the next evolution of the E-Rate program. 🛡️ Read more:

As threat actors increasingly use AI to bolster their attacks, the Pentagon reports a “tenfold” increase in cybersecurity vulnerabilities in DoD computer systems. The Pentagon is in a race against time to modernize its systems, IST’s Nicholas Leiserson told @washingtonpost.com. 🛡️ Read more:

SAVE THE DATE: The Fourth Annual Cyber Policy Awards™ will take place on the evening of Thursday, February 4, 2027, at the National Press Club in Washington DC! Hosted by IST, the event recognizes & celebrates those whose work defined the cybersecurity landscape in 2026. 🏆 Learn more: bit.ly/3TddOf7

As IST develops a focused body of work to better understand the conditions that could precede AI loss of control & identify opportunities for intervention, we are seeking two Senior Advisors to join our team to translate complex technical risks into actionable crisis response. ➡️ Learn more & apply:

In IST’s first-of-its-kind survey of current and former national security officials, respondents said the likelihood of an AI catastrophe has already reached or exceeded acceptable risk levels. For NextGov, @ddimolfetta.bsky.social unpacks key takeaways from the survey. 🛡️ Read more:

Following a week in the Bay Area with the inaugural cohort of the Andrew Carnegie AI-Nuclear Accelerator, IST’s Catherine Murphy stresses the need to build shared literacy between AI innovators & nuclear policymakers: "AI decisions are a black box. So is AI-nuclear decisionmaking.” ⚠️ Read more: