Sign in

UC Berkeley Center for Long-Term Cybersecurity

@cltcberkeley.bsky.social
618 followers 86 following 111 posts

Helping society anticipate and address tomorrow's information security challenges, in order to amplify and extend the upside of the digital revolution.

PostsRepliesMedia
Reposted by UC Berkeley Center for Long-Term Cybersecurity
Aspen Digital @aspendigital.bsky.social · 08/09/2025
How can we help the states double down on the safety net of #CyberVolunteering? @cltcberkeley.bsky.social's Grace Menna and Sarah Powazek share expertise on how coordinated action can help these programs and partnerships scale. Read their insights: www.aspendigital.org/blog/states-... #AspenCyber
An aerial photo of an intersection in a small town neighborhood.
052
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 03/09/2025
CLTC's Grace Menna recently joined the Center for Cyber Safety and Education to discuss the Cyber Resilience Corps and why strong partnerships & collaboration between cyber resilience efforts is essential for building a safer digital future. ​▶️​Watch the replay: www.brighttalk.com/webcast/1992...
brighttalk.com
Q3 2025 Center Stakeholders Meeting
The Center held its Q3 Stakeholders Meeting on August 20th with Trustee Carolyn Dolezal and Grace Menna, Fellow at UC Berkeley’s Center for Long-Term Cybersecurity. They discussed the power of partner...
031
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/09/2025
Learn more about the Cyber Resilience Corps: cltc.berkeley.edu/program/cybe... And learn how our Cyber Volunteers network is helping to seal the leak: www.cybervolunteers.us/en #CyberCivilDefense #Take9
cltc.berkeley.edu
Cyber Resilience Corps - CLTC
The Cyber Resilience Corps is mobilizing a nationwide force of cyber volunteers to defend the organizations that power our communities—nonprofits, rural hospitals, schools, municipalities, and small b...
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/09/2025
💧The EPA's $9M grant to protect water from cyber threats leaves out the small and rural water systems who need the most support. That's where the Cyber Resilience Corps & DEF CON Franklin step in. Because cybersecurity isn’t just for big players and water is for everyone. Every tap matters. ​⬇️​
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 27/08/2025
Did you miss DEF CON or BSidesLV? Check out our recap blog w/ highlights from CLTC's Public Interest Cyber team! The team showcased the Cyber Resilience Corps, a nationwide initiative mobilizing cyber volunteers to protect community orgs from cyber threats. cltc.berkeley.edu/2025/08/27/p...
cltc.berkeley.edu
Public Interest Cybersecurity at DEF CON and BSides Las Vegas - CLTC UC Berkeley Center for Long-Term Cybersecurity
This August, the CLTC Public Interest Cybersecurity team was out in full force attending “hacker summer camp”, a nickname for a collection of cybersecurity and hacking conferences held…
010
Reposted by UC Berkeley Center for Long-Term Cybersecurity
Aspen Digital @aspendigital.bsky.social · 25/08/2025
The states are leading expansion of #CyberVolunteering. How can we help them double down on this cyber safety net? @cltcberkeley.bsky.social's Grace Menna and @powa-sec.bsky.social share their expertise on what's needed most. Read their insights: www.aspendigital.org/blog/states-... #AspenCyber‪
An aerial photo of an intersection in a small town neighborhood.
022
Reposted by UC Berkeley Center for Long-Term Cybersecurity
Sarah Powazek @powa-sec.bsky.social · 20/08/2025
🛑 Stop talking about states like they are helpless with cybersecurity. State govts are already taking the lead w/ innovative cyber volunteering programs. Read more in our piece for @aspendigital.bsky.social @cltcberkeley.bsky.social #Take9 #CyberCivilDefense www.aspendigital.org/blog/states-...
aspendigital.org
States Are Leading on Cyber Volunteering
States and communities are leading on expanding cyber volunteering programs, but we can do more to support this burgeoning cyber safety net.
123
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 11/08/2025
Our friends @projectfranklin.bsky.social announced the next phase of cyber services for small and rural U.S. water utilities. Franklin is deploying free tools to secure our water - all powered by a scalable, volunteer-driven model. #CyberCivilDefense Read more: defconfranklin.com/water_cybers...
defconfranklin.com
DEF CON Franklin
011
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/08/2025
Learn more about the “The Roadmap to Community Cyber Defense: A Path Forward from the Cyber Resilience Corps” 🗺️​ cltc.berkeley.edu/publication/...
live-cltc.pantheon.berkeley.edu
The Roadmap to Community Cyber Defense: A Path Forward from the Cyber Resilience Corps - CLTC
Community organizations — including nonprofits, hospitals, schools, local utilities, city governments, and small businesses — deliver vital services to the public, but they are often the least prepare...
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/08/2025
CLTC's @powa-sec.bsky.social was the latest guest on CyberWire, where she discussed the Cyber Resilience Corps' proposed nationwide roadmap to scale cyber defense for community organizations. 🎧​ Listen to the episode: thecyberwire.com/podcasts/dai... #CyberCivilDefense #Take9
thecyberwire.com
Chasing Silicon shadows.
Two Chinese nationals are arrested for allegedly exporting sensitive Nvidia AI chips. A critical security flaw has been discovered in Microsoft’s new NLWeb protocol. Vulnerabilities in Dell laptop firmware could let attackers bypass Windows logins and install malware. Trend Micro warns of an actively exploited remote code execution flaw in its endpoint security platform. Google confirms a data breach involving one of its Salesforce databases. A lack of MFA leaves a Canadian city on the hook for ransomware recovery costs. Nvidia’s CSO denies the need for backdoors or kill switches in the company’s GPUs. CISA flags multiple critical vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) platform. DHS grants funding cuts off the MS-ISAC. Helicopter parenting officially hits the footwear aisle.
132
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 06/08/2025
Please join us for the inaugural Cyber Volunteering Day: an interactive, pragmatic convening for boots-on-the-ground cyber defenders to share best practices and expand services for community infrastructure. ✅​ Space is limited — save your spot today! www.eventbrite.com/e/cyber-volu...
031
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 30/07/2025
"By seeking to deregulate the AI market at both the federal and state levels the administration is shifting the responsibility for safety and security to the end user," said @powa-sec.bsky.social. “This strategy does not work." Read the @wsj.com article: www.wsj.com/articles/fed...
wsj.com
Federal AI Plan Targets ‘Burdensome’ State Regulations
With Congress’s outright ban on state AI laws scrapped, the White House is wielding funding cuts to strong-arm state regulators, critics say.
010
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 24/07/2025
Thank you once again to all of our fantastic speakers and everyone who made this event possible, especially @craignewmark.bsky.social and Craig Newmark Philanthropies, Okta for Good, and Google. org!!
020
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 24/07/2025
Read the full recap to discover more key insights and quotes from our fantastic roster of Summit speakers: cltc.berkeley.edu/2025/07/23/f...
cltc.berkeley.edu
Four Key Learnings from the 2025 Cyber Civil Defense Summit - CLTC UC Berkeley Center for Long-Term Cybersecurity
On June 11, 2025, CLTC hosted its third annual Cyber Civil Defense Summit at the Ronald Reagan Building and International Trade Center in Washington, D.C. This was CLTC’s…
110
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 24/07/2025
📢 3) More outreach is needed to raise awareness and convey the value of free cybersecurity resources available to under-resourced public agencies. 🔐​ 4) Private companies can play a greater role in cyber civil defense, including by embracing secure-by-design principles.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 24/07/2025
🤝​1) A ‘one-size-fits-all’ approach to cybersecurity standards and resourcing often leaves smaller, underserved communities behind. 🏛️ 2) Cybersecurity regulation remains a rare area of bipartisan agreement within state legislatures, but funding remains the largest barrier. (cont)
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 24/07/2025
We are capping off our #CyberCivilDefense Summit 2025 lookback with a summary blog post, "Four Key Learnings from the 2025 Cyber Civil Defense Summit," authored by CLTC's Shannon Pierson. Here are just a handful of the numerous highlights that surfaced from throughout the day:
111
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 22/07/2025
Read the full article to learn more about the cybersecurity solutions becoming law in 2025 as well as Pierson's predictions for what's next in state-level cybersecurity policy: www.techpolicy.press/emerging-tre...
techpolicy.press
Emerging Trends in State Cyber Policy During the 2025 Legislative Session | TechPolicy.Press
UC Berkeley Center for Long-Term Cybersecurity's Shannon Pierson considers legislation passed in 2025 to surface the trends across states.
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 22/07/2025
🏛️ 1. State government agencies were the primary focus of 2025 cybersecurity legislation. 🚌 2. K-12 cybersecurity is receiving greater legislative attention and investment. 🧑‍⚖️​ 3. Strengthening consumer protections is becoming a legislative priority, with some caveats.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 22/07/2025
In a new piece for @techpolicypress.bsky.social, CLTC's @srpierson.bsky.social shares her analysis of state-level legislation passed in the 2025 legislative session to surface the trends taking place across U.S. states. 🧵 Three prevailing trends surfaced: www.techpolicy.press/emerging-tre...
techpolicy.press
Emerging Trends in State Cyber Policy During the 2025 Legislative Session | TechPolicy.Press
UC Berkeley Center for Long-Term Cybersecurity's Shannon Pierson considers legislation passed in 2025 to surface the trends across states.
182
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
💸 Read CLTC Senior Fellow @srpierson.bsky.social's analysis, “Slashing EPA funding may have downstream cybersecurity impacts on an already vulnerable water sector”: cltc.berkeley.edu/publication/...
cltc.berkeley.edu
Slashing EPA funding may have downstream cybersecurity impacts on an already vulnerable water sector - CLTC
America’s water and wastewater utilities rely on the Environmental Protection Agency for cybersecurity support and guidance. With the EPA’s funding on the Trump Administration’s chopping block, Americ...
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
Want to learn more? 💡 Read Aspen Digital’s latest blog, “Cybersecurity on Tap: Protecting Local Water Utilities from Digital Threats”: www.aspendigital.org/blog/water-u...
aspendigital.org
Cybersecurity on Tap
As nation-state cyberattacks increase, small and rural water utilities in the US need urgent cybersecurity assistance and scalable support.
111
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
🤷 However, several panelists pointed out that many water utilities are unaware of these free resources or that some programs are tailored specifically for them. More work is needed to raise awareness and to convey the value of these free cybersecurity resources available to water systems.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
Dragos’s Community Defense Program: www.dragos.com/community/co... The EPA’s Water Sector Cybersecurity Evaluation Program: www.epa.gov/waterresilie... The EPA’s Cybersecurity Technical Assistance Program: www.epa.gov/waterresilie...
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
What Can be done? 🤝Speakers spotlighted initiatives that support water systems by providing free or discounted cybersecurity services. These included: Cybersecurity Circuit Rider Program: nrwa.org/cybersecurit... DEF CON Franklin: defconfranklin.com (cont.)
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
🆘 Such disruptions to the water supply can also cripple critical services since virtually every sector depends on reliable access to clean water.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
What are the risks? ❤️‍🩹 Cyber attacks on water & wastewater systems pose serious health & safety risks to consumers. Hackers may manipulate chemical dosing in treatment processes to make water unsafe to drink, or sabotage flow control equipment to cause damage to pipes & control systems.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
⚡Volt Typhoon, a Chinese state-sponsored hacking group, continues to target US water utilities via covert living-off-the-land techniques to facilitate lateral movements to OT assets that may cause service disruptions and/or facility damage in the event of a geopolitical conflict with the US.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
✊ Iran and Russia are increasingly using hacktivist groups as proxies to target US water and wastewater systems by providing them with resources and direction to carry out attacks while maintaining plausible deniability.
110
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
The conversation focused on emerging threats, the serious risks to public safety, and the urgent need to raise awareness of cybersecurity resources tailored to water utilities. What threats are trending?
101
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
Moderated by Sasha Cohen O’Connell of @aspendigital.bsky.social, the panel featured a discussion between, Dawn Cappelli of Dragos, Jennifer Lyn Walker of Water-ISAC, Gus Serino of I&C Secure Inc., and Brandon Carter of the EPA.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 16/07/2025
At the #CyberCivilDefense Summit, CLTC hosted a panel focused on the unique cybersecurity challenges facing America’s water and wastewater infrastructure. 🧵
121
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 14/07/2025
.@consumerreports.org and @gigastacey.bsky.social, found that more smart home companies are making it easier for researchers to report security flaws—but more work is needed to build strong vulnerability disclosure programs that keep consumers safe. innovation.consumerreports.org/more-smart-h...
innovation.consumerreports.org
More Smart Home Companies Want to Hear from Security Researchers - Innovation at Consumer Reports
CR has surveyed 75 smart home device makers to understand if they provide an easy way for a researcher to report cybersecurity problems
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
Read the full panel recap: securityandtechnology.org/blog/without... CLTC is grateful to each of these fantastic speakers for joining us at the Summit and bringing their expertise to this important conversation. #CyberCivilDefense
securityandtechnology.org
Without Washington? IST’s Michael Klein joins Panel at CLTC’s Cyber Civil Defense Summit to highlight mechanisms for bolstering state and local cyber resilience
In June, IST Senior Director Michael Klein spoke on a panel at UC Berkeley’s Center for Long Term Cybersecurity #CyberCivilDefense Summit addressing shared responsibility of regional cyber resilience....
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
🤝 David Batz, Managing Director of Cyber & Infrastructure Security at Edison Electric Institute, highlighted the importance of building mutual assistance programs.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
🛠️ Netta S.quires, President of Government Affaris, Cybersecurity, & Resilience at Open District Solutions, discussed a "whole-of-state" approach to growing the broader cybersecurity workforce.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
🧑‍🎓​ Tony Sauerhoff, CISO of the State of Texas, shared how the state funds regional security operation centers #SOCs where students provide hands-on support to businesses and organizations in their communities.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
✏️​ Michael Klein, Senior Director for Preparedness and Response at IST and Non-Resident Fellow at CLTC, shared insights and lessons learned from bolstering the cyber resilience of K-12 schools and #edtech vendors.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
In this panel, moderator Sean Frazier, Federal CSO at @okta.dev, facilitated a lively discussion examining the shifting role of the federal government, the impact on state and local cybersecurity, and how public sector agencies need to reexamine priorities to do more with less federal support.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 08/07/2025
Check out the latest blog post from our friends at @istorg.bsky.social spotlighting a #CyberCivilDefense Summit panel, "Without Washington: Rethinking Shared Responsibility for Regional Cyber Resilience.” securityandtechnology.org/blog/without...
141
Reposted by UC Berkeley Center for Long-Term Cybersecurity
Sarah Powazek @powa-sec.bsky.social · 07/07/2025
I can't wait to join Jake Braun and Adrien Ogee on the #DEFCON33 Mainstage to talk about the Cyber Resilience Corps and DEF CON Franklin. See you there! #CyberCivilDefense #Take9 defcon.org/html/defcon-...
011
Reposted by UC Berkeley Center for Long-Term Cybersecurity
Institute for Security and Technology @istorg.bsky.social · 02/07/2025
In June, IST's @michaelfklein.bsky.social spoke on a @cltcberkeley.bsky.social #CyberCivilDefense Summit panel addressing regional cyber resilience. @tgrossman.bsky.social reflects on the conversation, which highlighted pathways for improving state & local cybersecurity. 🖋️ From the #NatSpecs blog:
securityandtechnology.org
Without Washington? IST’s Michael Klein joins Panel at CLTC’s Cyber Civil Defense Summit to highlight mechanisms for bolstering state and local cyber resilience
In June, IST Senior Director Michael Klein spoke on a panel at UC Berkeley’s Center for Long Term Cybersecurity #CyberCivilDefense Summit addressing shared responsibility of regional cyber resilience....
023
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
💡Officer Ahern emphasized that cybersecurity funding and regulation must go hand-in-hand. States can’t cut their way to resilience, and they can’t protect what they don’t invest in.
000
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
➕ Adding $100M to the state budget for remediating legacy systems and ensuring security basics like MFA are in place 🤝 Offering shared cybersecurity services to counties and municipalities through New York’s Joint Security Operations Center (JSOC)
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
New York is responding with strategic coordination and investment by: 📜 Establishing cost-conscious minimum cybersecurity standards for critical, lifeline infrastructure sectors 💰 Creating grant programs to help entities meet new requirements
110
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
Attackers are adapting their methods because the cyber insurance market is tightening and regulatory pressure is increasing. In response, they are using more personal, public, and painful tactics to increase pressure on victims and improve their chances of a payout.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
➡️ Ransomware gangs are increasingly using “triple extortion” tactics to increase pressure on victims to pay ransoms. Adversaries not only steal or encrypt data, but they also dox, threaten, harass, and swat members of the senior leadership team until a payment is made.
100
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
Primary threat actors include: 💵 Financially motivated #ransomware groups from the Russian criminal ecosystem ⚠️ Nation-state actors targeting critical #infrastructure to conduct espionage or pre-positioning to inflict damage ⚡️ Ideologically-motivated political extremist groups
110
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 02/07/2025
At the #CyberCivilDefense Summit, @politico.com's @maggiemiller.bsky.social sat down with New York’s Chief Cyber Officer, Colin Ahern, to discuss the State’s “whole-of-state” approach to cybersecurity. 🗽⬇️Officer Ahern pinpointed several key cybersecurity trends in New York:
1123
UC Berkeley Center for Long-Term Cybersecurity @cltcberkeley.bsky.social · 26/06/2025
⬆️Given these unique conditions, she argued island territories require special consideration in federal cybersecurity funding formulas and cybersecurity requirements. She warned that a ‘one size fits all’ approach often leaves smaller, underserved communities behind.
010