Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Latest Episodes:

Transforming Cyber Defense: Zero Trust Strategies with Sean Connelly Sep 04, 2024

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Sean Connelly, the Executive Director for Zero Trust Strategy and Policy at Zscaler, to delve into the origins, challenges, and best practices of zero trust architecture. Connelly shares insights from his extensive experience, including his time at the Cybersecurity and Infrastructure Security Agency (CISA), where he led significant zero trust initiatives. The conversation covers the evolution of cybersecurity strategies, the impact of technologies like cloud computing, and the ongoing challenges in implementing zero trust across federal agencies. Listeners will gain a deep understanding of why zero trust is critical in today's cybersecurity landscape and how it is shaping the future of digital security.

Main Topics

Introduction to Zero Trust
Evolution of Zero Trust in Government
Impact of Cloud Computing and Modern Technologies
Implementation Challenges and Cultural Shifts
Future of Zero Trust and AI Integration
Closing Thoughts and the Importance of Federal Leadership

Key Quotes:

"SolarWinds happened, and it really from a very high level all the way from the president downwards, everyone was asking how do we look at cybersecurity differently?" – Sean Connelly

"The old perimeter security alone ain't going to cut it with the castles, the moats and any alligators or anything in between." – Frank Cilluffo

"CISA has doubled down on secure by design, Department of Energy, Cyber informed engineering, where it's not just the cyber ninjas that need to understand security, but everyone else." – Frank Cilluffo

"It takes a long time to build trust. Whether people or technology." Frank Cilluffo

"Zero Trust is all about interoperability. Sharing telemetry, not only internally, but with new organizations." – Sean Connelly

Guest Bio:

Sean Connelly is the Executive Director for Zero Trust Strategy and Policy at Zscaler, where he leads the company's efforts to advance zero trust architecture in both the public and private sectors. Before joining Zscaler, Sean spent over a decade at the Cybersecurity and Infrastructure Security Agency (CISA), where he played a pivotal role in developing and implementing zero trust strategies across federal agencies. His extensive experience in both technical and policy aspects of cybersecurity makes him a leading voice in the field.

Threat Horizons With Google Cloud's Charles DeBeck Aug 28, 2024

Show notes

In this episode of Cyber Focus, Frank Cilluffo chats with Charles DeBeck, a cyber threat intelligence expert from Google Cloud, about the latest insights from their Threat Horizons report. They explore how cyber threats are evolving, particularly in cloud environments, with a focus on issues like weak passwords and system misconfigurations that leave organizations vulnerable. Charles also shares how criminals are increasingly using cloud services for their attacks and discusses the growing role of artificial intelligence in both defending against and carrying out cyber threats.

Main Topics Covered:

Weak credentials and misconfigurations as top threats.
The role of cloud infrastructure in modern cyber threats.
Challenges and risks in serverless environments and hardcoded secrets.
The impact of AI on both defense and adversarial activities.
Outlook on the convergence of criminal and nation-state cyber activities.

Key Quotes:

"Year after year, we see threat actors using weak credentials or no credentials or default credential services to get initial access as one" - Charles DeBeck
"If you're a threat actor and you break into a cloud environment you have access to a giant pool of resources that could be used for crypto mining. It's the easiest way to turn illicit access into money. " - Charles DeBeck
"Ransomware is what is on everyone's mind. It's one of the most significant and prolific transfers of wealth from legitimate organizations to criminal actors. - Charles DeBeck
We're seeing the threat actors are really engaging in more because it's a much more profitable endeavor for them and their seeing a lot more success in the overall marketplace. - Charles DeBeck
"Secure-by-default policies are critical, and they must be mandatory, not optional." - Charles DeBeck

Relevant Links

https://services.google.com/fh/files/misc/threat_horizons_report_h2_2024.pdf

Guest Bio:

Charles DeBeck is a Cyber Threat Intelligence Expert at Google Cloud. Charles brings over a decade of experience leading threat intelligence operations from the NSA, Deloitte and Touche and IBM. He strongly believes threat intelligence can help organizations make faster and more effective decisions.

Safeguarding Civil Nuclear Facilities From Cyber Threats with Chatham House's Dr. Marion Messmer. Aug 21, 2024

Show notes

In this episode, Frank Cilluffo interviews Dr. Marion Messmer, Senior Research Fellow at Chatham House, about the policy institute's recent report on cybersecurity in the civil nuclear sector. They discuss the evolving threats to nuclear infrastructure, the impact of emerging technologies like small modular reactors, and the challenges of international legal frameworks. Dr. Messmer also highlights the importance of integrating cybersecurity into nuclear systems from the beginning.

Main Topics Covered:

Key threats to nuclear infrastructure in peacetime and conflict.
Notable cyberattacks on nuclear facilities and critical infrastructure.
Cybersecurity challenges posed by new technologies like small modular reactors.
The role of public-private partnerships and international law in improving cybersecurity.

Key Quotes:

"There has been a rise of cybercriminals that like to target specifically critical national infrastructure, which nuclear power is for a lot of countries." – Dr. Marion Messmer

"I think while we have got a lot better at thinking of the purposeful kinds of risks of something that we're not always thinking through, is where the inadvertent vulnerabilities might be coming from and how you can also protect from those kind of attacks." – Dr. Marion Messmer

"I think that there is a risk here that specifically the cybersecurity side of things might not get enough attention because we've got a lot of regulation when it comes to the actual nuclear materials, but significantly less when it comes to the cybersecurity aspect." – Dr. Marion Messmer

"Nuclear is almost treated in its own silo, which has great advantages, but it also misses out on opportunities and being part of the broader ecosystem in terms of awareness and partnerships" – Frank Cilluffo

"So much of the international system only works when you've got a consensus around it. And what we are unfortunately seeing at the moment is that consensus is breaking up or at the very least weakening quite significantly." – Dr. Marion Messmer

Relevant Links and Resources:

https://www.chathamhouse.org/2024/07/cybersecurity-civil-nuclear-sector

https://www.iaea.org/topics/computer-and-information-security

Guest Bio: Dr. Marion Messmer is a Senior Research Fellow in the International Security Programme at Chatham House. She specializes in arms control, nuclear weapons policy, and Russia-NATO relations. Before joining Chatham House, Dr. Messmer served as Co-Director of BASIC (British American Security Information Council), where she led initiatives focused on nuclear risk reduction and disarmament.

North Korea's Cyber Operations with Mandiant's Michael Barnhart Aug 14, 2024

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Michael Barnhart, who leads North Korean operations at Mandiant. The discussion delves into the activities of APT 45, a North Korean cyber group responsible for an array of global cyber attacks. The conversation explores how APT 45 operates like a criminal syndicate, focusing on their ability to exploit vulnerabilities at speed, the role of insider threats, and their targeting of critical infrastructure. Barnhart highlights the importance of understanding North Korea's cyber strategies and the broader implications for global security. Main Topics:

APT 45's Role and Operations
North Korea's Cyber Strategies
Targeting Critical Infrastructure
Insider Threats and IT Workers
Global Implications

Key Quotes: "We don't really see them as a government regime as much as we see them as a cyber crime, a single single mafia family." - Michael Barnhart "Traditionally organized crime types tries to penetrate the state. In North Korea's case, it's the state penetrating organized crime." - Frank Cilluffo "This is a country that definitely doesn't want you to pay attention to them. They operate [by] being underestimated. They like that." - Michael Barnhart "Has north korea put an insider threat someplace? Yeah, we're seeing it now. Will they push the button? I think in a moment of conflict we might try to see insider threats doing destructive attacks on the inside." - Michael Barnhart "These missiles were blowing up in the launch pad years ago now. They're doing so well that they're selling them to other countries." - Michael Barnhart Guest Bio: Michael (Barni) Barnhart is the lead for all of DPRK operations within Mandiant. He's spent 19 years as an intelligence professional, starting with Human Intelligence collection doing tactical raids, interrogations, and source operations with regular Army and Special operations. Related Links:

https://cloud.google.com/blog/topics/threat-intelligence/apt45-north-korea-digital-military-machine
https://www.mandiant.com/resources/insights/apt-groups
https://www.justice.gov/opa/pr/north-korean-government-hacker-charged-involvement-ransomware-attacks-targeting-us-hospitals

Challenges for Cybersecurity and Future Legislation with John Katko Aug 07, 2024

Show notes

In this episode of Cyber Focus, Frank Cilluffo speaks with John Katko, the former ranking member of the House Homeland Security Committee. They discuss Katko's transition from focusing on terrorism to cybersecurity, the establishment and evolution of the Cybersecurity and Infrastructure Security Agency (CISA), and the critical legislation Katko championed to strengthen U.S. cybersecurity defenses. Katko also shares insights on the importance of bipartisan cooperation, challenges in cybersecurity staffing and funding, and the need for effective information sharing between government and private sectors. Main Topics:

Establishment and evolution of CISA
Key cybersecurity legislation and its impact
Current cybersecurity regulatory landscape
Impact of Chevron decision
Future of cybersecurity and legislative needs

Key Quotes: "Things really started gravitating and gravitated very quickly toward cyber and cyber attacks. And by the end of my second term, it was quite clear that cyber was the focus... by the time I left Congress, cyber was the preeminent threat to the United States, bar none." - John Katko "Manpower is such a critical problem that attracting talent and keeping that talent is very hard, especially on a government salary." - John Katko "So overturning Chevron is going to have a profound effect on [regulating]. And it's going to make legislators have to be legislators. You know, these knuckleheads up on Capitol Hill who don't ever pass a bill, got to roll up their sleeves and do some work." - John Katko "Too many people are getting in the president's ear [on cyber issues]. You need to have [an ONCD Director] that can sift it all out and give it to the president and see the entire landscape, not just an individual's personal turf." - John Katko "We can learn a lot from Cyber Command because they're thinking not like a bad guy, but they're thinking, how can we use this in an offensive manner? So we could probably learn a lot from keeping our finger on the pulse of what they're doing with the offensive capabilities in the military for cyber." - John Katko Bio: John Katko is an accomplished leader who served Central New York in Congress from 2015 until his retirement in 2022. John was a strong voice on the House Homeland Security Committee and led the Republicans on the committee starting in 2020. As Ranking Member, John prioritized a robust focus on cybersecurity, as well as transportation and airport security. John has strong relationships in New York and Washington across the political spectrum. He is well-respected for his work across the aisle and was consistently ranked among the most bipartisan members of Congress by the nonpartisan Lugar Center. Related Links: https://www.hilleastgroup.com/ https://www.cisa.gov/ https://www.cisa.gov/topics/cyber-threats-and-advisories/information-sharing/cyber-incident-reporting-critical-infrastructure-act-2022-circia

Post-Chevron Cyber Regulations with Ari Schwartz & Harley Geiger Jul 31, 2024

Show notes

In this episode of Cyber Focus, Frank Cilluffo sits down with Ari Schwartz, Managing Director of Cyber Services at Venable, and Harley Geiger, Counsel on Cyber Issues at Venable, to discuss the recent Supreme Court decision overturning Chevron deference. They delve into the implications of this ruling on cybersecurity policy, regulatory practices, and the broader tech landscape. Main Topics:

Understanding Chevron Deference
Implications for Cybersecurity Policy
Role of the Judiciary in Cybersecurity
Impact on Public and Private Sectors
Regulatory Harmonization and Future Legislation

Key Quotes:

"[Courts] still take into account what the agency thinks is Congress's intent. But it does not take nearly as much weight as it did previously. As a result, regulations are more vulnerable to court challenge, and now judges have greater power to reverse or modify regulations or enforcement actions because they can act independently without having to defer to those agencies." - Harley Geiger
"[The ruling] could have a major impact and likely will have a major impact on cybersecurity because most tech policy is written with that open ended piece to it." - Ari Schwartz
"In a lot of other areas of technology law, Congress has not really kept pace with where business practices are, where cybersecurity threats are, and has legislated relatively little in this area." - Harley Geiger
"These courts can reach differing conclusions, and one circuit does not necessarily have to be bound by the decisions of another circuit until it is resolved by the Supreme Court. And so we might see, theoretically, more circuit splits, which for companies that service an entire nation that suddenly makes their compliance picture that much more difficult." - Harley Geiger
"Congress needs to be more clear about its language and about its intent and more deliberate about cybersecurity legislation." - Ari Schwartz
"Staying focused on risk management and real security measures is good for the country and its customers." - Frank Cilluffo

Guest Bios: Ari Schwartz is the Managing Director of Cybersecurity Services at Venable LLP. He has extensive experience in cybersecurity policy, having served as a Special Assistant to the President and Senior Director for Cybersecurity on the National Security Council Staff. Ari has also held key positions at the Department of Commerce and the Center for Democracy and Technology.

Harley Geiger is Counsel at Venable LLP, specializing in cybersecurity and data privacy. He has a robust background in legislative affairs, having worked on Capitol Hill drafting key cybersecurity legislation. Harley's expertise spans both legal and policy dimensions of cybersecurity. Related Links: Venable LLP https://www.centerforcybersecuritypolicy.org/insights-and-research/chevron-pattern-disrupted-the-impact-on-cybersecurity-regulations

Spyware and Cyber Regulation with Cyberscoop's Tim Starks Jul 24, 2024

Show notes

Tim Starks is a senior reporter at CyberScoop with over two decades of experience in cyber reporting. In this episode he dives into the landscape of spyware, highlighting its impact on national security and individual privacy. The discussion with Frank Cilluffo also touches on the actions taken by the U.S. and Poland to address spyware threats, the significance of BGP (Border Gateway Protocol) in internet security, and the regulatory approaches to cybersecurity. Tim provides insights into the complexities of cyber threats, the role of policy, and the importance of a comprehensive understanding of cybersecurity issues. Main Topics:

Spyware's Impact on the Digital World
BGP and Internet Security
Regulatory Approaches to Cybersecurity

Key Quotes: "The arc of the spyware story has been we're hearing more and more and more. We're seeing more and more and more. We're we're uncovering more and more. " - Tim Stark [BGP] is the most important part of the Internet you haven't heard of. It's fundamental to everything." - Tim Starks "The SEC's rules on cybersecurity disclosure have been...the most controversial. If you're talking about people being upset about them. There's bipartisan on the Hill disappointment or frustration or even rage sometimes about that, about those rules." - Tim Starks Guest Bio: Tim Starks is a senior reporter at CyberScoop with over 20 years of experience in cyber reporting. He has previously worked at Washington Post, Politico, and Congressional Quarterly, covering a wide range of cybersecurity topics. Tim's expertise lies in investigating and reporting on complex cyber threats and the policies aimed at mitigating them. Relevant Links and Resources:

From Ransomware to Nation-State Attacks: Insights on Cyber Insurance with Matt McCabe Jul 17, 2024

Show notes

In this episode of Cyber Focus, Frank Cilluffo explores the evolving landscape of cyber insurance with Matt McCabe. McCabe shares the history, current state, and future challenges of cyber insurance, emphasizing its critical role in national resilience against cyber threats. The discussion covers the fundamental coverage aspects of cyber insurance, the impact of ransomware, and the need for a federal backstop for catastrophic cyber incidents. McCabe also touches on the importance of collaboration between industry and government to enhance national cyber resilience. Main Topics:

Evolution of Cyber Insurance
Impact of Ransomware and Coverage Aspects
Market Growth and Nation-State Attacks
Challenges, Solutions, and Federal Backstop Framework
Future of Cyber Insurance and National Security

Key Quotes: "Ransomware democratized cyber risk and cyber threats because the reality is everyone has got a bullseye on their target to one extent or another." - Frank Cilluffo" "Cyber insurance routinely covers acts by nation-states, but the magnitude of losses is sometimes too great for the industry to absorb." - Matt McCabe "This is not an insurance industry issue. This is a national economic security issue." - Matt McCabe "There's no building... resilience after the fact. The time to do it is now. Ultimately, if we were to have the incident, the government would be involved... But if you're doing it after the fact, it's a hurried response. It tends to increase the risk of waste, fraud and abuse." - Matt McCabe Relevant Links: https://www.guycarp.com/ https://www.cisa.gov/ https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program Matt McCabe is the Managing Director at Guy Carpenter, specializing in cyber risk and insurance. With extensive experience in the industry, McCabe has served in various roles, including on Capitol Hill for the House Homeland Security Committee and in the Bush White House. His expertise lies in bridging the gap between cyber risk and insurance, contributing significantly to national discussions on cyber resilience.

Public-Private Partnerships and the Future of Cyber Defense with Sue Gordon Jul 10, 2024

Show notes

In this episode of Cyber Focus, Frank Cilluffo sits down with Sue Gordon, a distinguished figure in the intelligence community. The discussion delves into her vast experiences, particularly focusing on the intersection of intelligence, national security, and cyber threats. Sue shares insights on the importance of public-private partnerships in cybersecurity, the evolving threat landscape, and the critical role of technology and innovation in maintaining national security. She also touches on the necessity of developing a skilled workforce to address future cyber challenges. Main Topics

Public-Private Partnerships in Cybersecurity
Evolving Cyber Threat Landscape
National Security and Economic Security
Governance and Innovation in Cybersecurity
Space as a Critical Infrastructure
Workforce Development in Cybersecurity

Key Quotes "Cyber threats are just a manifestation of the interests of our adversaries and competitors." - Sue Gordon "When you think about cyber, think about it not just technically, but what the intention behind that. And when you do, you'll be much more thoughtful about seeing risk." - Sue Gordon "You can't comply you're way out of it. You must be compliant. And there's some really wonderful standards that help people. But that isn't enough." - Sue Gordon "Space is such a disproportionate advantage that it is a disproportionate target." -Sue Gordon "It's not the capability, it's how integrated it is into your doctrine." - Frank Cilluffo "We've come a distance, but we can't be complacent because we're not far enough. We're better than we've ever been. We're not good enough to beat the turn of the earth right now." - Sue Gordon Relevant Links: In-Q-Tel

Cyber Solarium Commission Sue Gordon Sue Gordon is a renowned leader in the intelligence community, having served as the Principal Deputy Director of National Intelligence. She also held prominent positions at the National Geospatial-Intelligence Agency and the Central Intelligence Agency. Known for her innovative approaches and straight-shooter attitude, Sue has significantly contributed to advancing U.S. intelligence capabilities, particularly through her work with In-Q-Tel. A former captain of the Duke women's basketball team, she brings a unique perspective on leadership and teamwork to her roles.

Cyber Diplomacy in Action: The Tallinn Mechanism with Ambassador Tanel Sepp Jun 26, 2024

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Tanel Sepp, Estonia's Ambassador at Large for Cyber Diplomacy. They explore how Estonia emerged as a cyber superpower despite its small size, the significance of the Tallinn Mechanism in cyber defense, and the evolving role of cyber in warfare. Tanel shares personal insights from his extensive diplomatic career and discusses the lessons learned from Estonia's experiences and the ongoing conflict in Ukraine.

Main Topics:

Estonia's Rise as a Cyber Superpower
The Tallinn Mechanism: Origins and Implementation
Role of Cyber in Modern Warfare
The Future of Cyber Defense and International Cooperation

Key Quotes:

"We are [a] leading nation in terms of the e-services, e-governance and the penetration of the services amongst the population." - Tanel Sepp

"The Tallinn Mechanism has truly become one and unique channel for cyber assistance for Ukraine." - Tanel Sepp

"The time to be thinking about this is not when the bomb goes off, not in the midst of a crisis. It's well before." - Frank Cilluffo

"One of the main conclusions or kind of initial lessons identified from [the war in Ukraine] is that physical war still matters. Cyber has had a major role. And I believe that's that, for the first time, cyber has been fully integrated into military activity." – Tanel Sepp

" Cyber security now has also gained physical dimension because at the beginning of this war, you also had Russians targeting Ukrainian data centers kinetically. So you also need to really think about physical security" - Tanel Sepp

"This war is showing a kind of tectonic change in terms of engaging with the private sector and the role of private sector." - Tanel Sepp

Tanel Sepp is Estonia's Ambassador at Large for Cyber Diplomacy. With a career spanning multiple diplomatic posts including the United States, Afghanistan, and Ethiopia, he has led cyber policy efforts at Estonia's Ministry of Defense and played a key role in the development of the Tallinn Mechanism. Tanel is a leading voice in international cyber defense and digital diplomacy.

Relevant Links and Resources:

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Related Podcasts

Links

Stay Connected