McCrary Institute
@mccrarycyber.bsky.social
Fusing theory with practice, and policy with technology, to protect and advance U.S. interests in the areas of cyber and critical infrastructure security.
65% of data breaches come from third-party compromise.
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
November 12, 2025 at 8:37 PM
65% of data breaches come from third-party compromise.
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
On Cyber Focus, SecurityScorecard CEO Aleksandr Yampolskiy calls supply chain risk “the new epidemic" in cybersecurity—and warns it’s only getting worse.
Full Episode: mccraryinstitute.com/podcast/cybe...
#Cybersecurity #SupplyChainSecurity
CVE has quietly underpinned global cybersecurity for 26 years—tracking vulnerabilities across systems we all depend on.
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
November 5, 2025 at 3:15 PM
CVE has quietly underpinned global cybersecurity for 26 years—tracking vulnerabilities across systems we all depend on.
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
But on the Cyber Focus podcast @istorg.bsky.social's Nick Leiserson says that foundation is cracking.
Find us on Spotify, Apple, or YT
youtu.be/jYXxlDWF7hw
#Cybersecurity #CVE
This week's episode of Cyber Focus features the Co-Chairs of our China Task Force Mark Montgomery, Brad Medairy and William Evanina. They share what you need to know about the various Typhoon cyber campaigns.
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
October 30, 2025 at 11:40 PM
This week's episode of Cyber Focus features the Co-Chairs of our China Task Force Mark Montgomery, Brad Medairy and William Evanina. They share what you need to know about the various Typhoon cyber campaigns.
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
🎙️Watch and listen the full podcast here: mccraryinstitute.com/podcast/cybe...
As the world focuses on the US-China relationship, we released a paper raising the alarm on the sophisticated cyber threat posed by the People’s Republic of China. It lays out -in simple terms- the sustained, coordinated assault on our national and economic security www.threatbeat.com/ChinaThreat
October 29, 2025 at 10:50 AM
As the world focuses on the US-China relationship, we released a paper raising the alarm on the sophisticated cyber threat posed by the People’s Republic of China. It lays out -in simple terms- the sustained, coordinated assault on our national and economic security www.threatbeat.com/ChinaThreat
An adversary doesn’t need missiles to weaken U.S. power—just the ability to disrupt fuel logistics. On this week's Cyber Focus podcast, Chris Cleary explains how cyber pressure could slow military movement.
Full episode: youtu.be/vBqBMgLihBo
Full episode: youtu.be/vBqBMgLihBo
October 22, 2025 at 3:34 PM
An adversary doesn’t need missiles to weaken U.S. power—just the ability to disrupt fuel logistics. On this week's Cyber Focus podcast, Chris Cleary explains how cyber pressure could slow military movement.
Full episode: youtu.be/vBqBMgLihBo
Full episode: youtu.be/vBqBMgLihBo
Next Thursday, join us for a conversation with new
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
October 20, 2025 at 7:32 PM
Next Thursday, join us for a conversation with new
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is filling up so RSVP today at auburn.qualtrics.com/jfe/form/SV_...
Exclusively on #ThreatBeat: a piece from our senior fellow Bob Kolasky on the recent F5 breach.
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
October 20, 2025 at 7:12 PM
Exclusively on #ThreatBeat: a piece from our senior fellow Bob Kolasky on the recent F5 breach.
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
"Cyber supply chain attacks seem to be running wild," he writes, so what are the layers of protection and what is an organization to do? Read the full piece on Threat Beat threatbeat.com/f5-breach-un...
Join us on October 30 for a conversation with new House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is limited so RSVP mccraryinstitute.com/event/protec...
October 16, 2025 at 5:02 PM
Join us on October 30 for a conversation with new House Homeland Security Committee Chairman Andrew Garbarino. We're excited to get the new Chairman's thoughts on the growing cyber threat from the People's Republic of China. Space is limited so RSVP mccraryinstitute.com/event/protec...
We’re weeks from a report that could recommend creating a sixth branch of the military: Cyber Force.
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
October 15, 2025 at 1:30 PM
We’re weeks from a report that could recommend creating a sixth branch of the military: Cyber Force.
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
Josh Stiefel says it’s time to move from reaction to readiness:
“How cataclysmic does an incident have to be to get us to actually move?”
Full episode: youtu.be/2YTNYNI0by4
“We’re dramatically under invested in cyber defenses.”
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
October 8, 2025 at 2:26 PM
“We’re dramatically under invested in cyber defenses.”
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
Katie Gray of In-Q-Tel says the U.S. is falling behind as AI changes the threat landscape—and private industry holds 85% of the nation’s critical systems. #
🎙️ Full Cyber Focus episode: youtu.be/5cHlKQvE2xE
#cybersecurityawarenessmonth
This October, we're celebrating #cybersecurityawarenessmonth with a special page on #ThreatBeat with exclusive content and tips Americans need to stay safe online. Check it out! threatbeat.com/project/cybe...
October 2, 2025 at 5:48 PM
This October, we're celebrating #cybersecurityawarenessmonth with a special page on #ThreatBeat with exclusive content and tips Americans need to stay safe online. Check it out! threatbeat.com/project/cybe...
New on #ThreatBeat: The Energy ISAC writes that forums such as 4chan play a role in promoting violence against the electric sector.
threatbeat.com/extremist-so...
threatbeat.com/extremist-so...
October 2, 2025 at 5:05 PM
New on #ThreatBeat: The Energy ISAC writes that forums such as 4chan play a role in promoting violence against the electric sector.
threatbeat.com/extremist-so...
threatbeat.com/extremist-so...
Scammers call it pig butchering—a chilling term from China for scams that "fatten up" victims with fake crypto gains before stealing everything.
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
October 1, 2025 at 2:56 PM
Scammers call it pig butchering—a chilling term from China for scams that "fatten up" victims with fake crypto gains before stealing everything.
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
As we kick off #CybersecurityAwarenessMonth Lisa Plaggemier of the National Cybersecurity Alliance explains how these long cons work
youtu.be/TUz-fjGJK6c
Out now: A new, quick episode of our Cyber Focus podcast called To The Point. Frank sits down with Matt Hayden to discuss the under the radar risk of letting counter-drone authorities expire unless Congress acts today. threatbeat.com/podcast/cybe...
September 30, 2025 at 4:41 PM
Out now: A new, quick episode of our Cyber Focus podcast called To The Point. Frank sits down with Matt Hayden to discuss the under the radar risk of letting counter-drone authorities expire unless Congress acts today. threatbeat.com/podcast/cybe...
In a new op-ed in NextGov, Frank Cilluffo and Kyle Klein warn that without congressional action, the federal government will lose capacity to mitigate threats from drones and it's happening as drones are becoming a larger part of our adversary's playbook. www.nextgov.com/ideas/2025/0...
September 29, 2025 at 2:52 PM
In a new op-ed in NextGov, Frank Cilluffo and Kyle Klein warn that without congressional action, the federal government will lose capacity to mitigate threats from drones and it's happening as drones are becoming a larger part of our adversary's playbook. www.nextgov.com/ideas/2025/0...
New on #ThreatBeat: Southern states hit by 911 outage after ‘major fiber cut’ in Mississippi threatbeat.com/southern-sta...
September 25, 2025 at 10:40 PM
New on #ThreatBeat: Southern states hit by 911 outage after ‘major fiber cut’ in Mississippi threatbeat.com/southern-sta...
New on #ThreatBeat: Food and ag sector ‘will almost certainly be more intensely targeted’ by attacks
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
September 19, 2025 at 2:03 PM
New on #ThreatBeat: Food and ag sector ‘will almost certainly be more intensely targeted’ by attacks
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
Read the full recap of the House hearing raising alarms at threatbeat.com/food-and-ag-...
New on #ThreatBeat: Minerals security measures will be needed to withstand growing demand in critical sectors, warns a new report. threatbeat.com/minerals-sec...
September 18, 2025 at 9:32 PM
New on #ThreatBeat: Minerals security measures will be needed to withstand growing demand in critical sectors, warns a new report. threatbeat.com/minerals-sec...
New on #ThreatBeat: When it comes to cyber insurance, industry and government should not give up on a federal cyber backstop writes Matthew McCabe in a Threat Beat exclusive threatbeat.com/enhancing-cy...
September 18, 2025 at 5:37 PM
New on #ThreatBeat: When it comes to cyber insurance, industry and government should not give up on a federal cyber backstop writes Matthew McCabe in a Threat Beat exclusive threatbeat.com/enhancing-cy...
In a new op-ed, Frank Cilluffo writes that Congress has until the end of September to prevent two pillars of America’s cyber defense from collapsing. It's out now in @federalnewsnetwork.com
Read the full piece here: federalnewsnetwork.com/commentary/2...
Read the full piece here: federalnewsnetwork.com/commentary/2...
September 15, 2025 at 7:55 PM
In a new op-ed, Frank Cilluffo writes that Congress has until the end of September to prevent two pillars of America’s cyber defense from collapsing. It's out now in @federalnewsnetwork.com
Read the full piece here: federalnewsnetwork.com/commentary/2...
Read the full piece here: federalnewsnetwork.com/commentary/2...
At this week's Billington Cybersecurity Conference, Frank Cilluffo joined Tom Fanning, David Luber, Daniel Reese and Felipe Fernandez for a robust conversation on the state of US critical infrastructure. Thanks to Andy Boyd for moderating and the Billington team for a fantastic week of conversations
September 12, 2025 at 3:16 PM
At this week's Billington Cybersecurity Conference, Frank Cilluffo joined Tom Fanning, David Luber, Daniel Reese and Felipe Fernandez for a robust conversation on the state of US critical infrastructure. Thanks to Andy Boyd for moderating and the Billington team for a fantastic week of conversations
“If CISA 2015 lapses… America would be in the dark.” – Cynthia Kaiser, Halcyon SVP & former FBI cyber leader.
On the Cyber Focus podcast, she explains how failure to reauthorize would cripple info-sharing and put small businesses at greater ransomware risk.
Full episode: youtu.be/vaQsg-rBzRI
On the Cyber Focus podcast, she explains how failure to reauthorize would cripple info-sharing and put small businesses at greater ransomware risk.
Full episode: youtu.be/vaQsg-rBzRI
September 11, 2025 at 1:51 PM
“If CISA 2015 lapses… America would be in the dark.” – Cynthia Kaiser, Halcyon SVP & former FBI cyber leader.
On the Cyber Focus podcast, she explains how failure to reauthorize would cripple info-sharing and put small businesses at greater ransomware risk.
Full episode: youtu.be/vaQsg-rBzRI
On the Cyber Focus podcast, she explains how failure to reauthorize would cripple info-sharing and put small businesses at greater ransomware risk.
Full episode: youtu.be/vaQsg-rBzRI
“You actually end up saving money by investing in this kind of protection.” – @peters.senate.gov
In Cyber Focus, Sen. Gary Peters explains why local cyber grants matter and lays out the urgent cyber priorities Congress must address before the end of the month.
🎧 Full episode: youtu.be/ucJ2S16eTkA
In Cyber Focus, Sen. Gary Peters explains why local cyber grants matter and lays out the urgent cyber priorities Congress must address before the end of the month.
🎧 Full episode: youtu.be/ucJ2S16eTkA
September 8, 2025 at 2:22 PM
“You actually end up saving money by investing in this kind of protection.” – @peters.senate.gov
In Cyber Focus, Sen. Gary Peters explains why local cyber grants matter and lays out the urgent cyber priorities Congress must address before the end of the month.
🎧 Full episode: youtu.be/ucJ2S16eTkA
In Cyber Focus, Sen. Gary Peters explains why local cyber grants matter and lays out the urgent cyber priorities Congress must address before the end of the month.
🎧 Full episode: youtu.be/ucJ2S16eTkA
Letting CISA 2015 expire “will be catastrophic,” warns @peters.senate.gov.
In this Cyber Focus episode, Peters explains why liability protections are essential for real-time threat sharing—and how Congressional inaction could put national security at risk.
Watch or listen: youtu.be/ucJ2S16eTkA
In this Cyber Focus episode, Peters explains why liability protections are essential for real-time threat sharing—and how Congressional inaction could put national security at risk.
Watch or listen: youtu.be/ucJ2S16eTkA
September 3, 2025 at 2:26 PM
Letting CISA 2015 expire “will be catastrophic,” warns @peters.senate.gov.
In this Cyber Focus episode, Peters explains why liability protections are essential for real-time threat sharing—and how Congressional inaction could put national security at risk.
Watch or listen: youtu.be/ucJ2S16eTkA
In this Cyber Focus episode, Peters explains why liability protections are essential for real-time threat sharing—and how Congressional inaction could put national security at risk.
Watch or listen: youtu.be/ucJ2S16eTkA
As lawmakers tackle AI, the question isn’t whether to act—but how.
Sarah Beth Jansen urges Congress to avoid rigid rules that could limit innovation:
“They shouldn’t be over-prescriptive… just give the chance for the technology to work and to grow.”
Full episode: youtu.be/29oYBE9KGwo
#AIpolicy
Sarah Beth Jansen urges Congress to avoid rigid rules that could limit innovation:
“They shouldn’t be over-prescriptive… just give the chance for the technology to work and to grow.”
Full episode: youtu.be/29oYBE9KGwo
#AIpolicy
August 29, 2025 at 9:21 PM
As lawmakers tackle AI, the question isn’t whether to act—but how.
Sarah Beth Jansen urges Congress to avoid rigid rules that could limit innovation:
“They shouldn’t be over-prescriptive… just give the chance for the technology to work and to grow.”
Full episode: youtu.be/29oYBE9KGwo
#AIpolicy
Sarah Beth Jansen urges Congress to avoid rigid rules that could limit innovation:
“They shouldn’t be over-prescriptive… just give the chance for the technology to work and to grow.”
Full episode: youtu.be/29oYBE9KGwo
#AIpolicy