How can we help the states double down on the safety net of #CyberVolunteering? @cltcberkeley.bsky.social's Grace Menna and Sarah Powazek share expertise on how coordinated action can help these programs and partnerships scale. Read their insights: www.aspendigital.org/blog/states-... #AspenCyber

CLTC's Grace Menna recently joined the Center for Cyber Safety and Education to discuss the Cyber Resilience Corps and why strong partnerships & collaboration between cyber resilience efforts is essential for building a safer digital future. ​▶️​Watch the replay: www.brighttalk.com/webcast/1992...

Q3 2025 Center Stakeholders Meeting

The Center held its Q3 Stakeholders Meeting on August 20th with Trustee Carolyn Dolezal and Grace Menna, Fellow at UC Berkeley’s Center for Long-Term Cybersecurity. They discussed the power of partner...

brighttalk.com

💧The EPA's $9M grant to protect water from cyber threats leaves out the small and rural water systems who need the most support. That's where the Cyber Resilience Corps & DEF CON Franklin step in. Because cybersecurity isn’t just for big players and water is for everyone. Every tap matters. ​⬇️​

Did you miss DEF CON or BSidesLV? Check out our recap blog w/ highlights from CLTC's Public Interest Cyber team! The team showcased the Cyber Resilience Corps, a nationwide initiative mobilizing cyber volunteers to protect community orgs from cyber threats. cltc.berkeley.edu/2025/08/27/p...

Public Interest Cybersecurity at DEF CON and BSides Las Vegas - CLTC UC Berkeley Center for Long-Term Cybersecurity

This August, the CLTC Public Interest Cybersecurity team was out in full force attending “hacker summer camp”, a nickname for a collection of cybersecurity and hacking conferences held…

cltc.berkeley.edu

The states are leading expansion of #CyberVolunteering. How can we help them double down on this cyber safety net? @cltcberkeley.bsky.social's Grace Menna and @powa-sec.bsky.social share their expertise on what's needed most. Read their insights: www.aspendigital.org/blog/states-... #AspenCyber‪

🛑 Stop talking about states like they are helpless with cybersecurity. State govts are already taking the lead w/ innovative cyber volunteering programs. Read more in our piece for @aspendigital.bsky.social @cltcberkeley.bsky.social #Take9 #CyberCivilDefense www.aspendigital.org/blog/states-...

States Are Leading on Cyber Volunteering

States and communities are leading on expanding cyber volunteering programs, but we can do more to support this burgeoning cyber safety net.

aspendigital.org

Our friends @projectfranklin.bsky.social announced the next phase of cyber services for small and rural U.S. water utilities. Franklin is deploying free tools to secure our water - all powered by a scalable, volunteer-driven model. #CyberCivilDefense Read more: defconfranklin.com/water_cybers...

CLTC's @powa-sec.bsky.social was the latest guest on CyberWire, where she discussed the Cyber Resilience Corps' proposed nationwide roadmap to scale cyber defense for community organizations. 🎧​ Listen to the episode: thecyberwire.com/podcasts/dai... #CyberCivilDefense #Take9

Chasing Silicon shadows.

Two Chinese nationals are arrested for allegedly exporting sensitive Nvidia AI chips. A critical security flaw has been discovered in Microsoft’s new NLWeb protocol. Vulnerabilities in Dell laptop firmware could let attackers bypass Windows logins and install malware. Trend Micro warns of an actively exploited remote code execution flaw in its endpoint security platform. Google confirms a data breach involving one of its Salesforce databases. A lack of MFA leaves a Canadian city on the hook for ransomware recovery costs. Nvidia’s CSO denies the need for backdoors or kill switches in the company’s GPUs. CISA flags multiple critical vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) platform. DHS grants funding cuts off the MS-ISAC. Helicopter parenting officially hits the footwear aisle.

thecyberwire.com

Please join us for the inaugural Cyber Volunteering Day: an interactive, pragmatic convening for boots-on-the-ground cyber defenders to share best practices and expand services for community infrastructure. ✅​ Space is limited — save your spot today! www.eventbrite.com/e/cyber-volu...

"By seeking to deregulate the AI market at both the federal and state levels the administration is shifting the responsibility for safety and security to the end user," said @powa-sec.bsky.social. “This strategy does not work." Read the @wsj.com article: www.wsj.com/articles/fed...

Federal AI Plan Targets ‘Burdensome’ State Regulations

With Congress’s outright ban on state AI laws scrapped, the White House is wielding funding cuts to strong-arm state regulators, critics say.

wsj.com

We are capping off our #CyberCivilDefense Summit 2025 lookback with a summary blog post, "Four Key Learnings from the 2025 Cyber Civil Defense Summit," authored by CLTC's Shannon Pierson. Here are just a handful of the numerous highlights that surfaced from throughout the day:

In a new piece for @techpolicypress.bsky.social, CLTC's @srpierson.bsky.social shares her analysis of state-level legislation passed in the 2025 legislative session to surface the trends taking place across U.S. states. 🧵 Three prevailing trends surfaced: www.techpolicy.press/emerging-tre...

Emerging Trends in State Cyber Policy During the 2025 Legislative Session | TechPolicy.Press

UC Berkeley Center for Long-Term Cybersecurity's Shannon Pierson considers legislation passed in 2025 to surface the trends across states.

techpolicy.press

At the #CyberCivilDefense Summit, CLTC hosted a panel focused on the unique cybersecurity challenges facing America’s water and wastewater infrastructure. 🧵

.@consumerreports.org and @gigastacey.bsky.social, found that more smart home companies are making it easier for researchers to report security flaws—but more work is needed to build strong vulnerability disclosure programs that keep consumers safe. innovation.consumerreports.org/more-smart-h...

More Smart Home Companies Want to Hear from Security Researchers - Innovation at Consumer Reports

CR has surveyed 75 smart home device makers to understand if they provide an easy way for a researcher to report cybersecurity problems

innovation.consumerreports.org

Check out the latest blog post from our friends at @istorg.bsky.social spotlighting a #CyberCivilDefense Summit panel, "Without Washington: Rethinking Shared Responsibility for Regional Cyber Resilience.” securityandtechnology.org/blog/without...

I can't wait to join Jake Braun and Adrien Ogee on the #DEFCON33 Mainstage to talk about the Cyber Resilience Corps and DEF CON Franklin. See you there! #CyberCivilDefense #Take9 defcon.org/html/defcon-...

In June, IST's @michaelfklein.bsky.social spoke on a @cltcberkeley.bsky.social #CyberCivilDefense Summit panel addressing regional cyber resilience. @tgrossman.bsky.social reflects on the conversation, which highlighted pathways for improving state & local cybersecurity. 🖋️ From the #NatSpecs blog:

Without Washington? IST’s Michael Klein joins Panel at CLTC’s Cyber Civil Defense Summit to highlight mechanisms for bolstering state and local cyber resilience

In June, IST Senior Director Michael Klein spoke on a panel at UC Berkeley’s Center for Long Term Cybersecurity #CyberCivilDefense Summit addressing shared responsibility of regional cyber resilience....

securityandtechnology.org

At the #CyberCivilDefense Summit, @politico.com's @maggiemiller.bsky.social sat down with New York’s Chief Cyber Officer, Colin Ahern, to discuss the State’s “whole-of-state” approach to cybersecurity. 🗽⬇️Officer Ahern pinpointed several key cybersecurity trends in New York:

Congresswoman @repstaceyplaskett.bsky.social, representative of the U.S. Virgin Islands, opened the #CyberCivilDefense Summit with remarks on the need to ensure U.S. #territories are not left behind in efforts to harden the nation’s critical infrastructure against cyber threats.

🔑 Udbhav Tiwari, VP of Strategy & Global Affairs at @signal.org delivered remarks at the #CyberCivilDefense Summit on Signal's mission to uphold user privacy and defend end-to-end encryption.

OUT TODAY! Read "The Roadmap to Community Cyber Defense" from the Cyber Resilience Corps! In the report, authors Sarah Powazek & Grace Menna detail a multi-phase “roadmap” for strengthening the cybersecurity of community organizations. Read the report: cltc.berkeley.edu/publication/...

Join CLTC and the Berkeley Risk and Security Lab for a panel discussion of Dr. Elaine Korzak's new paper "Managing Commercial Spyware Through Export Controls"! 🗓️​June 18th, 10-11AM PT 🌐​Zoom Webinar ✅​Register to attend here: cltc.berkeley.edu/event/managi...

Managing Commercial Spyware Through Export Controls - CLTC UC Berkeley Center for Long-Term Cybersecurity

A round-table style discussion of Dr. Elaine Korzak’s new paper Managing Commercial Spyware Through Export Controls co-sponsored by the UC Berkeley Center for Long-Term Cybersecurity. D. Korzak will…

cltc.berkeley.edu

IST’s @michaelfklein.bsky.social was a guest on last week’s K12 Tech Talks to discuss the arrest of a 19-year-old resident of Worcester, MA for his role in the PowerSchool data breach, exposing the data of 60 mil. students and 10 mil. teachers. 🎙️ Listen to the full episode:

Episode 215 - PowerSchool Hacker Has Been Caught!

Podcast Episode · K12 Tech Talk · 05/23/2025 · 49m

podcasts.apple.com

CLTC, in partnership w/ Okta & WaTech, are expanding CyberCAN to Washington state! The partnership — an expansion of a similar project CLTC conducted in SF last year — aims to enhance cybersecurity for nonprofits too often overlooked as critical infrastructure. statescoop.com/uc-berkeley-...

UC Berkeley, WaTech to survey Washington state nonprofits on cybersecurity | StateScoop

Washington state's IT division is teaming up with UC Berkeley to secure the soft spots in the state's nonprofit organizations.

statescoop.com

In today's @washingtonpost.com, IST’s @joshcorman.bsky.social emphasized the urgent need for initiatives like #UnDisruptable27 in light of increasing threats from actors like China. 🛡️ Read more: www.washingtonpost.com/national-sec... #CyberCivilDefense #cybersecurity #criticalinfrastructure

Join Matt Holmes, CEO of NRWA, and Nicole Tisdale of Advocacy Blueprints & Aspen Digital at the #CyberCivilDefense Summit for a fireside chat on the state of rural water cybersecurity.💧​ Register here 👇 cybercivildefensesummit.org

At the #CyberCivilDefense Summit, we're bringing together state lawmakers leading the charge on cybersecurity legislation to protect schools, utilities & state agencies. Join us for a panel on cybersecurity bills passed in state legislatures & what states can learn from each other.

We are nearly sold out! Snag one of our last tickets here: cybercivildefensesummit.org

Home - Cyber Civil Defense Summit

The official website for the Cyber Civil Defense Summit, hosted by the UC Berkeley Center for Long-Term Cybersecurity.

cybercivildefensesummit.org

Cyber threats targeting US #water infrastructure are escalating. But the EPA faces budget cuts of up to 65%. Slashing funding may have serious downstream #cybersecurity impacts on an already vulnerable water sector. Read the latest from @srpierson.bsky.social: cltc.berkeley.edu/publication/...

Slashing EPA funding may have downstream cybersecurity impacts on an already vulnerable water sector - CLTC

America’s water and wastewater utilities rely on the Environmental Protection Agency for cybersecurity support and guidance. With the EPA’s funding on the Trump Administration’s chopping block, Americ...

cltc.berkeley.edu

We are thrilled to welcome 3️⃣​ keynote speakers to the #CyberCivilDefense Summit stage this year. Each will tackle an emerging topic in cyber: 🔒 Colin Ahern on NY’s whole-of-state cyber strategy 🌐 Rep. Stacey Plaskett on US territory cyber 📲 Udbhav Tiwari on secure global comms & digital rights