Sign in

JoshCorman

@joshcorman.bsky.social
925 followers 114 following 48 posts

Philosopher-Strategist-Protector… more later

PostsRepliesMedia
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 22/09/2026
Artificial intelligence has been a “force multiplier” for bad actors targeting our critical infrastructure systems, IST’s @joshcorman.bsky.social told @theverge.com. “A bad actor...can use these tools... to attack things they normally don’t know how to,” Josh explained. 🛡️ Read more:
theverge.com
Humans, not rogue AI, are still the biggest cybersecurity risk to energy systems
Critical infrastructure was already vulnerable.
111
Reposted by JoshCorman
Hack the Plan[e]t @hacktheplant.bsky.social · 09/09/2026
NEW EPISODE: Welcome to Season 6! @brysonbort.bsky.social sits down with guests @joshcorman.bsky.social, James Regan, and Adam Robbie to break down #CriticalEffectDC, preview the next conference, and discuss recent IT/OT research breakthroughs. Listen now:
hack-the-plant.simplecast.com
From DC to Sacramento: Building Resilient Critical Infrastructure and OT Workforces | Hack the Plant
“Securing critical infrastructure is not one person’s job. You bring multiple people, multiple teams with different expertise to come together.” – Adam Robbie
012
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 27/08/2026
➡️ Register to participate in this community-driven effort to protect our critical infrastructure:
form.jotform.com
Fragile Foundations Sprint
Please click the link to complete this form.
001
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 27/08/2026
📚 Pragmatic guidance for cyber-poor operators - led by Whitney Bowman-Zatzkin and Samara Moore. 📝 Novel mitigation analysis - led by Michael Daniel and Art Manion. 🏛️Policy and incentives design - led by Matt Hayden and Megan Samford.
111
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 27/08/2026
The #FragileFoundationsSprint will operate in five working groups with leaders from across industry, government, and academia: 🔎 Consequences analysis - led by Mark Montgomery and Éireann Leverett. 🤝OT/ICS sector engagement - led by Alison King and Mike Holcomb.
102
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 27/08/2026
As the brainchild of @joshcorman.bsky.social and under the leadership of Jen Ellis and David Batz, the 100-day sprint will lay the groundwork for pragmatic guidance and future action to strengthen the resilience of critical infrastructure against AI-powered cyber threats.
112
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 27/08/2026
CALLING ALL PROTECTORS! It is not news that the lifeline critical functions on which our nation relies are under threat. IST is convening the #FragileFoundationsSprint to examine and address how small and local communities are impacted by a lack of cyber resources. ➡️ Learn more:
securityandtechnology.org
IST Launches the Fragile Foundations Sprint to Confront AI Cyber Disruption to Lifeline Critical Functions
IST is convening the Fragile Foundations Sprint, developed by Joshua Corman and led and coordinated by Jen Ellis and David Batz, to lay the groundwork for pragmatic guidance and future action to stren...
102
Reposted by JoshCorman
Firewalls Don't Stop Dragons @firewalldragons.bsky.social · 17/08/2026
I had a fantastic time at @defcon 34 this year. I had oodles of stimulating conversations. Today I'll give you just a taste: @thedarktangent.bsky.social @naomibrockwell.bsky.social @boblord.bsky.social @joshcorman.bsky.social podcast.firewallsdontstopdragons.com/2026/08/17/d...
podcast.firewallsdontstopdragons.com
DEF CON 34 - Firewalls Don't Stop Dragons Podcast
It’s August, which means it’s time for Hacker Summer Camp once again! I flew out to a sweltering Las Vegas, Nevada, to attend two...
042
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 13/08/2026
“You have more cybersecurity regulations for your credit card and your wallet than you do for the water systems that support our country,” IST @joshcorman.bsky.social told @whyy.org yesterday, joining the program to break down recent cyberattacks on water utilities. ➡️ Listen here:
whyy.org
How can we keep critical utilities safe from hacking? - WHYY
Cyber attacks against infrastructure are on the rise. Just how vulnerable are we to hacking?
012
JoshCorman @joshcorman.bsky.social · 12/08/2026
In case you missed it: whyy.org/episodes/how...
whyy.org
How can we keep critical utilities safe from hacking? - WHYY
Cyber attacks against infrastructure are on the rise. Just how vulnerable are we to hacking?
000
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 12/08/2026
LIVE NOW: @joshcorman.bsky.social joins @npr.org affiliate @whyy.org to discuss #cybersecurity, #water, and attacks on our critical infrastructure systems. ➡️ Listen now:
whyy.org
WHYY
WHYY connects you to your community and the world by delivering reliable information and worthwhile entertainment.
001
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 11/08/2026
What happens when a community loses access to its water facilities? Tomorrow, IST’s @joshcorman.bsky.social joins Philly’s local @npr.org station @whyy.org to discuss #cybersecurity, #water, and threats to our critical infrastructure systems. ➡️ Tune in live at noon ET:
whyy.org
Radio Schedule - WHYY
WHYY-FM can be heard on 90.9 in Philadelphia and in New Jersey on: 90.3 Cape May Court House; 89.9 Manahawkin; and 89.7 Atlantic City.
011
Reposted by JoshCorman
DEF CON Franklin @projectfranklin.bsky.social · 10/08/2026
Thanks @joshcorman.bsky.social @riskymanag3ment.bsky.social for joining us on Saturday! We came with an announcement and left with momentum: The Water Watch Center is live, five providers are on board, and utilities can sign up now at defconfranklin.com. #DEFCONFranklin #CyberCivilDefense #Take9
111
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 05/08/2026
The recent attacks on U.S. water infrastructure follow years of thwarted efforts to address the sector’s #cybersecurity problem, @nytimes.com writes. IST’s @joshcorman.bsky.social spoke with NYT to emphasize the risk: “The level of access is sufficient for…more harm than has been seen.” 🛡️ Read more:
nytimes.com
Suspected Iran Cyberattacks on U.S. Water Supply Follow Years of Warnings and Neglect
Federal and state officials are racing to address an assault on the nation’s water supply that they believe is the work of Iranian hackers.
022
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 05/08/2026
Recent cyberattacks on water utilities have highlighted our dependence on and the vulnerabilities in our critical infrastructure systems. For @huffpost.com, IST’s @joshcorman.bsky.social laid out how individuals and communities can prepare for potential short-term service disruptions. 🛡️ Read more:
huffpost.com
Hackers Are Apparently Targeting U.S. Water Systems. Experts Share What You Should Do Now To Prepare
You don’t have to be a “prepper” to engage in some basic emergency preparedness.
001
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 05/08/2026
It’s the last day of #bsideslv! Tune in now to catch the final sessions of the #IAmtheCavalry track. 10 AM PT: Making Preparedness and Personal Resilience Approachable 10:30 AM PT: Taiwan Conflict: Most Likely/Most Damaging 11:15 AM PT: The Next 12 Months with @joshcorman.bsky.social 🛡️ Watch live:
youtube.com
BsidesLV 2026 - I am the Cavalry - Wednesday
YouTube video by BSidesLV
001
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 04/08/2026
@joshcorman.bsky.social's #IAmtheCavalry track continues at #bsideslv today! Focused around IST’s #UnDisruptable Initiative, this afternoon’s lineup includes: 2PM PT: Power Resilience for Lifelines 3PM PT: Glass Houses: AI-Era OT/ICS Sprints 5PM PT: CI Fortify 🛡️ Watch live:
youtube.com
BsidesLV 2026 - I am the Cavalry - Tuesday
YouTube video by BSidesLV
001
JoshCorman @joshcorman.bsky.social · 03/08/2026
We are on break for lunch, but rewind to see my opener… and stay tumed for 2hrs on water next. Quite timely.
111
Reposted by JoshCorman
I Am The Cavalry @iamthecavalry.org · 01/08/2026
Happy Birthday to us! 13 years ago at @bsideslv.org … w/ @joshcorman.bsky.social Nick Percoco … met @beauwoods.com an hour later Saving lives since 2013
Titles from the original 2013 I Am The Cavalry talk. The slide says: 
The Cavalry Isn't Coming 
Starting the Revolution to FSCK it all!
Nicholas J. Percoco & Joshua Corman
064
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 30/07/2026
Over 30 communities in Minnesota saw water and wastewater utilities disrupted by a coordinated cyberattack this week, the state announced on Tuesday. IST Exec in Residence @joshcorman.bsky.social spoke to @statescoop.bsky.social on what’s novel – and what’s not – about this attack. 🛡️ Read more:
statescoop.com
Coordinated cyberattack disrupts water utilities in 30+ Minnesota communities | StateScoop
A cyberattack of undetermined origin disrupted water treatment plants in at least 30 communities in Minnesota, according to the state's technology bureau.
012
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 31/07/2026
The FBI issued an urgent warning to water utilities across the country this week, following attacks in at least 7 states. IST Exec in Residence @joshcorman.bsky.social joined WJLA to lay out the threat this poses to our communities and share UnDisruptable27’s #CyberCivilDefense mission. ▶️ Watch:
wjla.com
Minnesota probes cyberattacks on water plants; Iran suspected, FBI warns utilities
A new FBI warning is raising concerns about the vulnerability of water infrastructure to cyberattacks, as authorities in Minnesota investigate what they say is
101
Reposted by JoshCorman
Sean Lyngaas @snlyngaas.bsky.social · 31/07/2026
Some details I've collected over the last week on the cyber incidents affecting the water sector, w/ more to come. Yes, Iran is a suspect. No, there have been no reports of contamination. Industrial processes at plants have been safely shutting down www.cnn.com/2026/07/31/p...
cnn.com
Sweeping cyberattack on water systems in multiple states has US officials on edge | CNN Politics
Hackers have targeted water systems in several US states in a coordinated cyberattack that has caused some utilities to issue boil-water notices and switch to manual mode, taking their systems offline...
2115
JoshCorman @joshcorman.bsky.social · 27/07/2026
Thanks @josh.bressers.name If people want their town helped - or to learn more/volunteer - go to U27.org
u27.org
UnDisruptable27
UnDisruptable27 (U27) exists to translate high-level risk awareness into local readiness. Focusing at the nexus of water infrastructure and emergency healthcare, this initiative responds to an urgent ...
021
Reposted by JoshCorman
Policy @ DEF CON @defconpolicy.bsky.social · 14/07/2026
We're updating our schedules. Please share.
125
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 17/07/2026
Shall we play a game? This spring, IST & #UnDisruptable27's @joshcorman.bsky.social led a tabletop exercise for insurance executives in NY to illustrate what might happen if a catastrophic cyber attack hits American water facilities. A new ep from Gula Tech walks through the scenario. 🛡️ Watch now:
youtube.com
The Cyberattack America Can't Insure
YouTube video by Gula Tech Adventures
111
Reposted by JoshCorman
Brian Honan @brianhonan.bsky.social · 10/07/2026
After nearly 20 years of editing the SANS NewsBites I owe @joshcorman.bsky.social a big thank you for enabling me to finally get a Star Trek reference into one of my editor comments :) [www.sans.org/newsletters/newsbites/…...)
sans.org
NewsBites Volume XXVIII – Issue 50 July 10, 2026
SANS NewsBites is a semiweekly executive summary of the most important cyber security news articles. In this issue: Cyber Wargame Simulates Attack on US Water; Ransomware Accelerated by Agentic AI
021
JoshCorman @joshcorman.bsky.social · 08/07/2026
Gripping @agreenberg.bsky.social … #VoltTyphoon thrives just below our attention & CANNOT stay there. No water, no hospitals, no kidding
011
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 18/06/2026
🚀 #CriticalEffect DC day 2 is off to a strong start! @craignewmark.bsky.social joined us for a keynote on philanthropy’s role in #cyber, from #Take9 on Sesame Street to #UnDisruptable27. "The solution requires smart people of goodwill to work together,” he said.
142
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 18/06/2026
🚀 Moderated by IST’s Stephanie Ross, this #CriticalEffectDC panel brought together #CyberCivilDefense experts, Matt Altomare, Paul Chang, Jessica Walton & Netta Squires, to share more about their work, why it matters, and what we can do to protect our critical infrastructure systems.
101
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 18/06/2026
Presented by ICS Village, in partnership with IST’S #UnDisruptable27 project and Akin Gump, Critical Effect DC engages with policymakers, think tanks, and the media to facilitate actionable discussion on issues that threaten national security, public safety, and human life.
001
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 17/06/2026
🚀 “The goal here is really understanding: in a crisis, we can't afford to be asking questions.” At #CriticalEffectDC, Matt Rogers presented CI Fortify, an emergency planning and resilience effort to ensure the continued operations of our critical infrastructure systems during major cyber incidents.
101
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 17/06/2026
🚀 No water, no hospitals, no kidding. At #CriticalEffectDC, IST’s @joshcorman.bsky.social moderated a panel with Dean Ford, Mark Montgomery, Natalie Sullivan, and Chuck Weissenborn to highlight water as a cyber‑physical weak point.
101
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 17/06/2026
🚀 #CriticalEffect DC has kicked off in Washington! Acting CISA Director Nick Andersen delivered a keynote address on the threats to our critical infrastructure systems: “Each and every one of us is operating right now on the front lines of a war that is never going to be declared,” he said.
101
Reposted by JoshCorman
Eric Geller @ericjgeller.com · 17/06/2026
I'm at @istorg.bsky.social's #CriticalEffectDC event today. Looking forward to some good sessions on OT cybersecurity — and, of course, talking to Paul Roberts, @snlyngaas.bsky.social, @kimzetter.bsky.social, and @maggiemiller.bsky.social during our panel about covering this era of cyber threats.
064
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 09/06/2026
🚀 The countdown to #CriticalEffectDC is on! We're just 9️⃣ days away from gathering policymakers, the media, the IT/OT community & more. Want a sneak peek at the agenda? The Run of Show preview is live! Check out the lineup, pick your must-see sessions – and don’t forget to register! bit.ly/4avQzlR
102
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 11/06/2026
🚀 As PRC-linked actors pre-position inside U.S. critical infrastructure, Target-Rich, Cyber-Poor sectors still lack defensive resources. This #CriticalEffectDC panel brings together senior cyber leaders to map out a strategy that focuses on both survival and resilience. ➡️ Register: bit.ly/49n0jyo
111
JoshCorman @joshcorman.bsky.social · 09/06/2026
Killer 3 tracks! A few surprises. 1 wk from tomorrow. @brysonbort.bsky.social & I’ve been cooking 🧑‍🍳 Get the last tickets 🎟️ #UnDisruptable27
021
JoshCorman @joshcorman.bsky.social · 03/06/2026
Bring your best! Super instructive and entertaining game show to close out Critical-Effect.org Jun 18
static.klipy.com
School of Hammerhead Sharks Swimming
ALT: School of Hammerhead Sharks Swimming
010
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 28/05/2026
In a new #UnDisruptable27 newsletter, @joshcorman.bsky.social & team reflect on last week's hearing: "From the outset, it was clear that our message was getting through. Nearly every Congressperson referenced the connection between water & healthcare." securityandtechnology.org/blog/undisru...
securityandtechnology.org
UnDisruptable27 Newsletter: “The threat comes from cyber, but the solutions come from engineering. It’s not shields up. It’s connections down.”
In the latest edition of the UnDisruptable27 newsletter, the team reflects on Josh's testimony before Congress, surfacing some of the most surprising takeaways, key insights from his fellow witnesses,...
113
Reposted by JoshCorman
Craig Newmark @craignewmark.bsky.social · 27/05/2026
"When it comes to medical care, time matters...In 2 hours, a hospital will cease to function w/o water pressure." IST's @joshcorman.bsky.social testified in Congress with #CyberCivilDefense friends on how to secure U.S. water systems against cyber attacks: securityandtechnology.org/virtual-libr...
securityandtechnology.org
Testimony: Research-Driven Resilience: Applying Science to Secure U.S. Water Systems from Cyber Threats
IST Executive in Residence Josh Corman testified before the House Committee on Science, Space, and Technology's Subcommittee on Environment in a hearing on efforts to protect the nation's drinking wat...
183
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 22/05/2026
"When it comes to medical care, time matters...In 2 hours, a hospital will cease to function without water pressure." @joshcorman.bsky.social testified before Congress yesterday on how to fight back against disruptive, destructive attacks on our water systems, drawing lessons from #UnDisruptable27.
132
JoshCorman @joshcorman.bsky.social · 21/05/2026
In just under 3 hrs.
000
JoshCorman @joshcorman.bsky.social · 20/05/2026
My Congress testimony #4 in 25h. Feeling urgency/responsibility. Water’s so prone to #VoltTyphoon / Iran ++ science.house.gov/hearings?Con...
science.house.gov
Environment Subcommittee Hearing - Research-Driven Resilience: Applying Science to Secure U.S. Water Systems from Cyber Threats
010
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 18/05/2026
🚀 #CriticalEffectDC is excited to welcome @craignewmark.bsky.social, Mark Bristow, Bob Kolasky & Lauren Zabierek to this year’s lineup! #CriticalEffectDC connects policymakers, think tanks, media & more with the experts securing our lifeline critical infrastructure. ➡️ Register now: bit.ly/49n0jyo
111
JoshCorman @joshcorman.bsky.social · 19/05/2026
That’s me. A few of us have props and are gonna have some less than intuitive testimonies. #UnDisruptable27 UnDisruptable27.org
undisruptable27.org
UnDisruptable27
UnDisruptable27 (U27) exists to translate high-level risk awareness into local readiness. Focusing at the nexus of water infrastructure and emergency healthcare, this initiative responds to an urgent reality: critical infrastructure faces a multidimensional threat, and most communities remain underprepared.
000
Reposted by JoshCorman
Shaun Waterman @watermanreports.bsky.social · 14/05/2026
Water is one of the most critical services of all, and yet is one of the most poorly cyber-defended critical sectors, way behind power and telecommunications, which makes it a great target. My story for OT.Today, feat. @joshcorman.bsky.social & Piotr Kupisiewicz. www.ot.today/russian-atta...
ot.today
Russian Attacks on Polish Water Utilities Use Fear as Weapon
A spate of pro-Russian hacktivists attacks against Polish water facilities have illuminated a debate about the best way to defend water utilities and other critical
001
JoshCorman @joshcorman.bsky.social · 12/05/2026
Excited to testify on weathering coming storms to water infra. No water, no hospitals, no kidding in 2-4hrs UnDisruptable27.org
undisruptable27.org
UnDisruptable27
UnDisruptable27 (U27) exists to translate high-level risk awareness into local readiness. Focusing at the nexus of water infrastructure and emergency healthcare, this initiative responds to an urgent ...
020
JoshCorman @joshcorman.bsky.social · 30/04/2026
Grab those early bird! Some VERY strong talks in CFP pile. Great problem to have for @brysonbort.bsky.social and I to pick
021
JoshCorman @joshcorman.bsky.social · 18/04/2026
If you go chasing virtual Typhoons… it may put you in towns with actual Tornadoes 🌪️ I hope I can get out/home this morning
110
Reposted by JoshCorman
Institute for Security and Technology @istorg.bsky.social · 17/04/2026
IST Exec in Residence @joshcorman.bsky.social joined the #ReimaginingCyber podcast to unpack the ever-evolving #cyber threat landscape, what it means that malicious state actors are turning towards critical infrastructure targets, and how the #UnDisruptable27 Initiative aims to help. 🛡️ Listen now:
reimaginingcyber.buzzsprout.com
Fighting the Water Hackers - #193 - Reimagining Cyber - real world perspectives on cybersecurity
What if the next cyberattack doesn’t just steal your data—but turns off your water, power, or access to healthcare?In this eye-opening episode, Josh Corman (I Am The Cavalry Dot Org) returns to unpack...
011