What will it take for Washington to impose real costs on China for targeting U.S. infrastructure? The first Cyber Focus: Unplugged roundtable debates America’s willingness to use its economic leverage—and whether our cyber defenses can keep pace with AI. Watch: mccraryinstitute.com/cyber-focus-...
McCrary Institute
@mccrarycyber.bsky.social
Fusing theory with practice, and policy with technology, to protect and advance U.S. interests in the areas of cyber and critical infrastructure security.
New at Threat Beat - Europe is the warning: Russia’s shadow campaign and the defense of North American infrastructure threatbeat.com/commentary-a...
Europe is the warning: Russia’s shadow campaign and the defense of North American infrastructure
Imagine presenting today’s European security environment to a room of security professionals in 2010. There is a major land war on the continent. Governments have attributed ammunition-depot…
threatbeat.com
New federal cybersecurity requirements are coming to America’s ports and we're proud to help the Alabama Port Authority prepare. Great story by our friends at Auburn Engineering eng.auburn.edu/news/2026/10...
McCrary Institute for Cyber and Critical Infrastructure Security lands $1.55 million project to reinforce cybersecurity measures for the Alabama Port Authority
McCrary Institute researchers and cybersecurity experts will join key technology partners to assess cybersecurity readiness, identify vulnerabilities and help address security gaps.
eng.auburn.edu
When essential services go down, people care about getting them back, no matter what caused the disruption. On the Cyber Focus podcast, CISA Acting Director Nick Andersen joins Frank Cilluffo to discuss the agency’s new strategy and what resilience means for communities.
Today the Cybersecurity and Infrastructure Security Agency released CISA 2030: Defend, Harden, Prevail. Our director Frank Cilluffo applauded the strategy for “recognizing the realities of today’s threat environment.” Read his statement here mccraryinstitute.com/mccrary-inst...
Thanks to the National Cybersecurity Alliance for another tremendous #CybersecurityAwarenessMonth event at the NYSE. Our own Frank Cilluffo moderated a discussion that spotlighted instances where public and private sector partners are successfully collaborating in a time of tremendous change.
Patching a critical vulnerability in four to eight hours sounds fast. Until an AI-driven attacker exploits it in four to six minutes. Booz Allen’s Brad Medairy joins Frank Cilluffo on Cyber Focus to discuss what that gap means for cyber defense.
NEW: Iran hackers vow to turn Americans ‘into hamburger meat,’ ‘blow up’ facilities over U.S. threats threatbeat.com/adversaries/...
Iran hackers vow to turn Americans ‘into hamburger meat,’ ‘blow up’ facilities over U.S. threats
The Iran hacking group that claimed responsibility for recent breaches of U.S. water systems and a communications outage in Texas threatened Monday to turn Americans “into hamburger meat” while…
threatbeat.com
A familiar face. A convincing voice. But is it really them? For Cybersecurity Awareness Month, iProov CTO Dominic Forrest joins Cyber Focus to show how deepfakes fool us and why protecting people takes more than awareness training. #CyberSecurityAwarnessMonth
When cyber defenses fail, how do essential services keep running? On Cyber Focus, Australia’s Stephanie Crowe and CISA’s Nick Andersen join Frank Cilluffo to discuss planning to operate through a breach.
NEW - Iran hackers offer bounty for Americans: $15K if alive, $2.5K if dead threatbeat.com/adversaries/...
Iran hackers offer bounty for Americans: $15K if alive, $2.5K if dead
In a message highlighted with emojis of a coffin and an American flag, the same Iran hacking group that claimed responsibility for recent breaches of U.S. water systems offered a bounty for dead or…
threatbeat.com
Can CISA defend U.S. critical infrastructure despite losing roughly 1,000 employees over the past 18 months? On Cyber Focus, @repwalkinshaw.bsky.social joins Frank Cilluffo to discuss those CISA staffing cuts, the stakes for critical infrastructure, and responsible AI adoption in government.
Today kicked off a two-day cybersecurity training event welcoming more than 100 water and wastewater professionals, technology leaders and cybersecurity experts from across Alabama. Here's a recap of an impactful first day. caw-al.gov/water-utilit...
Water utilities participate in cybersecurity response training - Central Alabama Water
Prepares water utilities to prevent and respond to cyber incidents
caw-al.gov
We joined Booz Allen convening government and critical infrastructure leaders from across the Southeast for a tabletop exercise in Huntsville, AL. Here are 3 takeaways and clear advice on how organizations can protect themselves from AI-enabled attacks mccraryinstitute.com/ai-enabled-t...
In a new op-ed, our Frank Cilluffo and Nick Sellers call for an AI Assurance Compact, a framework for action among the makers of AI models, government, and owners and operators of our nation’s most critical digital systems. Full piece in @cyberscoop.bsky.social cyberscoop.com/president-ai...
Who’s responsible when an AI agent goes rogue? On Cyber Focus, Frank Cilluffo, Bill Evanina, and Matt Hayden discuss AI as an insider threat, the limits of accountability, and how to build safeguards while competing with China.
Cybersecurity researchers are saying the artificial intelligence industry is unprepared for the security risks created by the growing power of its own technology. The @washingtonpost.com turned to our Director Frank Cilluffo for his thoughts. Full story: www.washingtonpost.com/technology/2...
Yesterday, our Director Frank Cilluffo was on Bloomberg News's Balance of Power talking about China's cyber capabilities and the AI race ahead of President Xi's visit to the U.S. 📺 You can watch the full segment here www.bloomberg.com/news/videos/...
What does it take to fundamentally change our approach to critical infrastructure defense? Frank Cilluffo speaks with Armadin's Stacy O’Mara about moving past business-as-usual in public-private collaboration, and what recent White House directives mean for industry.
To mark 25 years since the terrorist attacks of September 11, 2001, @threatbeatnews.bsky.social turned to more than a dozen experts to understand how our security landscape has changed. Leaders who are protecting us sector-by-sector share great insight. Read the series threatbeat.com/project/25-y...
EXCLUSIVE: After AT&T denies that breach was behind Texas outage, Iran hackers declare that "idiots don’t even know what we tampered with, what we have access to" threatbeat.com/attacks-and-...
Iran hackers after denial of Texas AT&T claim: ‘Idiots don’t even know what we tampered with’
Iranian hackers pushed back after Wednesday’s denial of their claim that they hit AT&T service in major Texas cities on Labor Day, declaring that those rebuffing their claim “don’t even know what we…
threatbeat.com
EXCLUSIVE: Iranian hackers who recently took credit for an array of attacks on U.S. water systems claimed that they were behind an AT&T outage across major Texas cities on Monday and vowed to “intensify” critical infrastructure attacks before 9/11 threatbeat.com/attacks-and-...
Iran hackers claim Texas AT&T outage, vow to ‘intensify’ attacks before 9/11
Iranian hackers who recently took credit for an array of attacks on U.S. water systems claimed that they were behind an AT&T outage across major Texas cities on Monday and vowed to “intensify”…
threatbeat.com
“The problem has not gone away. It’s simply altered and modified and evolved.” Twenty-five years after 9/11, former Homeland Security Secretary Michael Chertoff joins Cyber Focus to examine what America learned, what changed and what we risk forgetting. Listen: mccraryinstitute.com/cyber-focus-...
25 Years After 9/11: What We Learned and What We Risk Forgetting with Michael Chertoff
mccraryinstitute.com
If you're at the Billington week, be sure to watch out for great panels and discussions featuring our own Kyle Klein and senior fellows Cheri Caddy, Katherine DiEmidio, Laura Galante, Matt Hayden, Brad Medairy and Mark Montgomery. #BillingtonSummit
Yesterday, Frank Cilluffo testified to House Permanent Select Committee on Intelligence and said our counterintelligence posture remains too reactive and must evolve. We must protect America’s strategic advantage, not just its secrets. Read his testimony www.congress.gov/119/meeting/...
NEW: Iran hackers vow ‘numerous’ U.S. infrastructure attacks in response to strike that hit wedding threatbeat.com/threats/iran...
Iran hackers vow ‘numerous’ U.S. infrastructure attacks in response to strike that hit wedding
Iranian hackers doubled down on recent threats to launch more attacks on U.S. critical infrastructure sectors, vowing that “the American people will face numerous problems” in response to a Tuesday…
threatbeat.com
Happening now: McCrary Institute Director Frank Cilluffo is testifying before the House Permanent Select Committee on Intelligence, sharing his insights on the future of the nation’s counterintelligence mission and how the U.S. must adapt to fast-evolving threats.
Cybersecurity has spent decades in a cat-and-mouse game: find a vulnerability, patch it and wait for the next one. @darpa.mil's Dr. Patrick Lincoln joins Frank Cilluffo to discuss breaking that cycle by building systems that are secure from the start.
Great piece in @newsweek.com about the cyber threat posed by Iran. Our director Frank Cilluffo weighed in. Read the full article www.newsweek.com/iran-hidden-...
We released a report with the Chamber of Commerce calling for a more coordinated, commonsense approach to federal cybersecurity regulations. Layers of well-meaning regs built up over time. Now they're more than just a regulatory burden. They're a security problem mccraryinstitute.com/mccrary-inst...