Presented by CSG South through the Staff Alliance for Intergovernmental Leadership (SAIL)
State agencies face a growing volume of sophisticated cyber threats that can disrupt operations and compromise sensitive data. Ransomware, phishing campaigns, supply-chain compromises, and the expanding use of artificial intelligence by threat actors continue to challenge government systems and services.
To examine these issues, CSG South convened a panel discussion titled Defending State Systems Against Emerging Cyber Threats. The session explored how cyber threats to state government are evolving, which systems are most at risk, and what trends officials should monitor as adversaries refine their tactics.
The discussion featured Megan Inserto, Regional Engagement Manager, and Matthew McGarvey, Strategic Account Executive, both with the Center for Internet Security (CIS), MS‑ISAC. Inserto reviewed threat activity observed by MS‑ISAC, while McGarvey discussed tools and services available to support state and local government cybersecurity efforts.
Speakers highlighted several considerations relevant to state agencies:
- Evolving attack techniques: Threat actors increasingly rely on social engineering methods, such as “ClickFix” campaigns, which prompt users to execute malicious commands under the appearance of routine verification steps.
- Expanded use of artificial intelligence: AI tools are being used to produce more realistic phishing messages and to reduce the technical expertise required to develop malicious code.
- User-driven risk: Many attacks depend on user interaction, reinforcing the importance of security awareness training.
- Foundational security practices: Prioritized cybersecurity controls help agencies reduce exposure to common attack vectors.
- Defense and response planning: Network monitoring, domain filtering, and incident response resources support detection, mitigation, and recovery efforts.
The discussion outlined current threat patterns, mitigation approaches, and resources available to state and local governments as they work to strengthen cybersecurity practices and protect critical systems.
Watch the full webinar recording below to learn more.