McCrary Institute
@mccrarycyber.bsky.social
Fusing theory with practice, and policy with technology, to protect and advance U.S. interests in the areas of cyber and critical infrastructure security.
Pinned
Have you heard about #ThreatBeat? It's the new one-stop site for news, analysis, alerts and context on the issues shaping cyber policy and infrastructure protection. Find stories from leading journalists plus original commentary all powered by the McCrary Institute. Visit threatbeat.com
65% of data breaches come from third-party compromise.
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
November 12, 2025 at 8:37 PM
65% of data breaches come from third-party compromise.
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
We're so proud to have Aiden Anderson as a member of our McCrary team hunting for vulnerabilities in America's power grid. Here's his story ‘I lost my sight, but gained vision.’ Truly inspirational! www.eng.auburn.edu/news/2025/10...
‘I lost my sight, but gained vision’: Senior in CSSE named Student of the Year from the Governor's Committee on Employment of People with Disabilities
Aidan Anderson works as a research and development engineer at the McCrary Institute for Cyber and Critical Infrastructure Security.
www.eng.auburn.edu
November 5, 2025 at 10:48 PM
We're so proud to have Aiden Anderson as a member of our McCrary team hunting for vulnerabilities in America's power grid. Here's his story ‘I lost my sight, but gained vision.’ Truly inspirational! www.eng.auburn.edu/news/2025/10...
CVE has quietly underpinned global cybersecurity for 26 years—tracking vulnerabilities across systems we all depend on.
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
November 5, 2025 at 3:15 PM
CVE has quietly underpinned global cybersecurity for 26 years—tracking vulnerabilities across systems we all depend on.
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
November is #InfrastructureSecurityMonth, a perfect time to check in with some of our sector leaders. Exclusively on #ThreatBeat, thoughts from leaders of the water, electricity, space, food and agriculture, health sectors and more on their most concerning threats.
threatbeat.com/critical-inf...
threatbeat.com/critical-inf...
Critical infrastructure sectors on the most concerning threats – and needed solutions
SYMPOSIUM: Threat Beat asked ISACs/ISAOs: 1) What is the most pressing short-term security concern in your sector? 2) What is one thing the public and/or industry/gov can do now to address this?
threatbeat.com
November 3, 2025 at 10:51 PM
November is #InfrastructureSecurityMonth, a perfect time to check in with some of our sector leaders. Exclusively on #ThreatBeat, thoughts from leaders of the water, electricity, space, food and agriculture, health sectors and more on their most concerning threats.
threatbeat.com/critical-inf...
threatbeat.com/critical-inf...
It seems like you hear about a new cyber threat everyday. So how can you make sense of the threat coming from our biggest cyber adversary: China. Here's a quick video featuring McCrary Institute experts explaining each of the Typhoon cyber campaigns and why they matter. youtu.be/iTC-YCbILrI?...
Code Red: A Guide to Understanding China’s Sophisticated Typhoon Cyber Campaigns
YouTube video by McCrary Institute
youtu.be
November 3, 2025 at 10:49 PM
It seems like you hear about a new cyber threat everyday. So how can you make sense of the threat coming from our biggest cyber adversary: China. Here's a quick video featuring McCrary Institute experts explaining each of the Typhoon cyber campaigns and why they matter. youtu.be/iTC-YCbILrI?...
This week's episode of Cyber Focus features the Co-Chairs of our China Task Force Mark Montgomery, Brad Medairy and William Evanina. They share what you need to know about the various Typhoon cyber campaigns.
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
October 30, 2025 at 11:40 PM
This week's episode of Cyber Focus features the Co-Chairs of our China Task Force Mark Montgomery, Brad Medairy and William Evanina. They share what you need to know about the various Typhoon cyber campaigns.
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
As the world focuses on the US-China relationship, we released a paper raising the alarm on the sophisticated cyber threat posed by the People’s Republic of China. It lays out -in simple terms- the sustained, coordinated assault on our national and economic security www.threatbeat.com/ChinaThreat
October 29, 2025 at 10:50 AM
As the world focuses on the US-China relationship, we released a paper raising the alarm on the sophisticated cyber threat posed by the People’s Republic of China. It lays out -in simple terms- the sustained, coordinated assault on our national and economic security www.threatbeat.com/ChinaThreat
Quick Event Update: Our upcoming event - Protecting Against the PRC, a conversation on the threat from the People’s Republic of China with Chairman of the House Homeland Security Committee Andrew Garbarino - needs to be rescheduled. Stay tuned for a new date for this important conversation!
October 27, 2025 at 2:42 PM
Quick Event Update: Our upcoming event - Protecting Against the PRC, a conversation on the threat from the People’s Republic of China with Chairman of the House Homeland Security Committee Andrew Garbarino - needs to be rescheduled. Stay tuned for a new date for this important conversation!
Exclusively on #ThreatBeat: Former General Counsel of the White House Office of Management and Budget Ilona Cohen warns that a "perfect storm of events has weakened America’s cybersecurity defenses when they are most needed."
Read the full piece on Threat Beat: threatbeat.com/federal-shut...
Read the full piece on Threat Beat: threatbeat.com/federal-shut...
Federal shutdown and expiration of key laws weaken America’s cybersecurity defenses
As the federal government shutdown persists with no immediate end in sight, the news coverage echoes that of prior shutdowns, highlighting unpaid federal employees, delayed flyers…
threatbeat.com
October 22, 2025 at 8:22 PM
Exclusively on #ThreatBeat: Former General Counsel of the White House Office of Management and Budget Ilona Cohen warns that a "perfect storm of events has weakened America’s cybersecurity defenses when they are most needed."
Read the full piece on Threat Beat: threatbeat.com/federal-shut...
Read the full piece on Threat Beat: threatbeat.com/federal-shut...
An adversary doesn’t need missiles to weaken U.S. power—just the ability to disrupt fuel logistics. On this week's Cyber Focus podcast, Chris Cleary explains how cyber pressure could slow military movement.
Full episode: youtu.be/vBqBMgLihBo
Full episode: youtu.be/vBqBMgLihBo
October 22, 2025 at 3:34 PM
An adversary doesn’t need missiles to weaken U.S. power—just the ability to disrupt fuel logistics. On this week's Cyber Focus podcast, Chris Cleary explains how cyber pressure could slow military movement.
Full episode: youtu.be/vBqBMgLihBo
Full episode: youtu.be/vBqBMgLihBo
Next Thursday, join us for a conversation with new
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
October 20, 2025 at 7:32 PM
Next Thursday, join us for a conversation with new
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
Exclusively on #ThreatBeat: a piece from our senior fellow Bob Kolasky on the recent F5 breach.
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
October 20, 2025 at 7:12 PM
Exclusively on #ThreatBeat: a piece from our senior fellow Bob Kolasky on the recent F5 breach.
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
Join us on October 30 for a conversation with new House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is limited so RSVP mccraryinstitute.com/event/protec...
October 16, 2025 at 5:02 PM
Join us on October 30 for a conversation with new House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is limited so RSVP mccraryinstitute.com/event/protec...
We’re weeks from a report that could recommend creating a sixth branch of the military: Cyber Force.
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
October 15, 2025 at 1:30 PM
We’re weeks from a report that could recommend creating a sixth branch of the military: Cyber Force.
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
“We’re dramatically under invested in cyber defenses.”
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
October 8, 2025 at 2:26 PM
“We’re dramatically under invested in cyber defenses.”
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
This October, we're celebrating #cybersecurityawarenessmonth with a special page on #ThreatBeat with exclusive content and tips Americans need to stay safe online. Check it out! threatbeat.com/project/cybe...
October 2, 2025 at 5:48 PM
This October, we're celebrating #cybersecurityawarenessmonth with a special page on #ThreatBeat with exclusive content and tips Americans need to stay safe online. Check it out! threatbeat.com/project/cybe...
New on #ThreatBeat: The Energy ISAC writes that forums such as 4chan play a role in promoting violence against the electric sector.
threatbeat.com/extremist-so...
threatbeat.com/extremist-so...
October 2, 2025 at 5:05 PM
New on #ThreatBeat: The Energy ISAC writes that forums such as 4chan play a role in promoting violence against the electric sector.
threatbeat.com/extremist-so...
threatbeat.com/extremist-so...
Scammers call it pig butchering—a chilling term from China for scams that "fatten up" victims with fake crypto gains before stealing everything.
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
October 1, 2025 at 2:56 PM
Scammers call it pig butchering—a chilling term from China for scams that "fatten up" victims with fake crypto gains before stealing everything.
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
Out now: A new, quick episode of our Cyber Focus podcast called To The Point. Frank sits down with Matt Hayden to discuss the under the radar risk of letting counter-drone authorities expire unless Congress acts today. threatbeat.com/podcast/cybe...
September 30, 2025 at 4:41 PM
Out now: A new, quick episode of our Cyber Focus podcast called To The Point. Frank sits down with Matt Hayden to discuss the under the radar risk of letting counter-drone authorities expire unless Congress acts today. threatbeat.com/podcast/cybe...
In a new op-ed in NextGov, Frank Cilluffo and Kyle Klein warn that without congressional action, the federal government will lose capacity to mitigate threats from drones and it's happening as drones are becoming a larger part of our adversary's playbook. www.nextgov.com/ideas/2025/0...
September 29, 2025 at 2:52 PM
In a new op-ed in NextGov, Frank Cilluffo and Kyle Klein warn that without congressional action, the federal government will lose capacity to mitigate threats from drones and it's happening as drones are becoming a larger part of our adversary's playbook. www.nextgov.com/ideas/2025/0...
New on #ThreatBeat: Southern states hit by 911 outage after ‘major fiber cut’ in Mississippi threatbeat.com/southern-sta...
September 25, 2025 at 10:40 PM
New on #ThreatBeat: Southern states hit by 911 outage after ‘major fiber cut’ in Mississippi threatbeat.com/southern-sta...
CISA has lost about a third of its workforce — roughly 1,000 people since spring. The full impact isn't yet clear.
@federalnewsnetwork.com's Justin Doubleday unpacks what’s at stake in the new Cyber Focus podcast.
Full episode: youtu.be/hspGAreR-sY
@federalnewsnetwork.com's Justin Doubleday unpacks what’s at stake in the new Cyber Focus podcast.
Full episode: youtu.be/hspGAreR-sY
September 24, 2025 at 6:50 PM
CISA has lost about a third of its workforce — roughly 1,000 people since spring. The full impact isn't yet clear.
@federalnewsnetwork.com's Justin Doubleday unpacks what’s at stake in the new Cyber Focus podcast.
Full episode: youtu.be/hspGAreR-sY
@federalnewsnetwork.com's Justin Doubleday unpacks what’s at stake in the new Cyber Focus podcast.
Full episode: youtu.be/hspGAreR-sY
OUT NOW: A new podcast from our friends at @darkreading.bsky.social featuring our own Frank Cilluffo and Booz Allen's Dave Forbes. They talk candidly about the challenges facing those on the front lines defending America's critical infrastructure. www.darkreading.com/cyber-risk/d...
Cyber Pros Protecting US Critical Infrastructure
The job of protecting US systems from nation-state cyberattacks is falling to cybersecurity professionals across a vast swath of organizations.
www.darkreading.com
September 23, 2025 at 10:40 PM
OUT NOW: A new podcast from our friends at @darkreading.bsky.social featuring our own Frank Cilluffo and Booz Allen's Dave Forbes. They talk candidly about the challenges facing those on the front lines defending America's critical infrastructure. www.darkreading.com/cyber-risk/d...
New on #ThreatBeat: Food and ag sector ‘will almost certainly be more intensely targeted’ by attacks
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
September 19, 2025 at 2:03 PM
New on #ThreatBeat: Food and ag sector ‘will almost certainly be more intensely targeted’ by attacks
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
New on #ThreatBeat: Minerals security measures will be needed to withstand growing demand in critical sectors, warns a new report. threatbeat.com/minerals-sec...
September 18, 2025 at 9:32 PM
New on #ThreatBeat: Minerals security measures will be needed to withstand growing demand in critical sectors, warns a new report. threatbeat.com/minerals-sec...