Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Latest Episodes:

Fuel, Force, and the Frontlines: Critical Infrastructure in Conflict with Chris Cleary Oct 21, 2025

Show notes

What if the easiest way to disrupt U.S. military operations isn't with missiles—but by targeting fuel logistics? In this episode, Chris Cleary explains how civilian infrastructure has become a frontline in national defense. He and Frank Cilluffo discuss how adversaries exploit cyber vulnerabilities to slow military response, and why deterrence requires more than just rhetoric. They unpack the case for a dedicated Cyber Force, the suprising way Chris thinks it should be structured, and the challenges of coordinating across government and industry. With prepositioned threats like Volt Typhoon in the headlines, the stakes are higher than ever.

Main Topics Covered

How fuel logistics shape U.S. military readiness in the Pacific
Why adversaries target civilian infrastructure like water and power systems
What defines a "cyber attack" under rules of engagement
Gaps in deterrence, response, and public signaling
The case for a U.S. Cyber Force modeled after the Coast Guard
Challenges of coordination across agencies and private sector providers

Key Quotes

"I could degrade the Navy's ability to run around in the Pacific by just limiting the ability to move fuel on the west coast of the United States." — Chris Cleary

"If [China's cyber forces] are in Littleton, Massachusetts, they're everywhere." — Chris Cleary

"I would argue a cyber force of the future looks more like a Coast Guard than a Navy."— Chris Cleary

"I am a true believer that cyber is a legitimate means and methods of warfare. And we are going to have to professionalize in it." — Chris Cleary

"All the zero trust in the world is not going to stop—a China, a Russia, a sophisticated organization—from targeting you." — Chris Cleary

Relevant Links and Resources

60 Minutes on China's Cyber Infiltation: https://www.cbsnews.com/news/china-hacking-us-critical-infrastructure-retired-general-tim-haugh-warns-60-minutes-transcript/

Guest Bio

Christopher Cleary is Vice President of Global Cyber Practice at ManTech. He previously served as the Department of the Navy's Principal Cyber Advisor, where he led the implementation of the DoD Cyber Strategy across the Navy and Marine Corps. Prior to that, he was the Navy's Chief Information Security Officer and Director of Cybersecurity within the Department of the Navy CIO's office.

Cyber Force, ROI, and the Case for Reform with Ed Cardon & Josh Stiefel Oct 14, 2025

Show notes

Should the U.S. have a dedicated Cyber Force? In this episode, General Ed Cardon and Josh Stiefel examine persistent gaps in the nation's cyber posture, from undefined mission boundaries to unclear return on billions in cyber spending. They explore the organizational tradeoffs, workforce realities, and coordination challenges that have stalled progress, despite years of warnings. With host Frank Cilluffo, they unpack what it would take to move beyond patchwork solutions.

Main Topics Covered

The failure of past "wake-up calls" to drive meaningful cyber reform
Gaps in command, control, and mission clarity across defensive cyber operations
The case for a dedicated Cyber Force and what it would need to solve on day one
Why workforce development—not just recruitment—is central to cyber readiness
The role of metrics and return-on-investment in cyber spending
The importance of establishing clear operational roles between NSA, CNMF, DC3, DCDC

Key Quotes:

"How many of these have we been through, these quote, unquote, watershed moments that were going to change everything? … How cataclysmic does an incident have to be to get us to actually move one way or the other? - Josh Stiefel

"From 2020 to 2025, if you take all the budgets together, we've spent $29.9 billion on cyber operations. That's as much as two Ford-class aircraft carriers. Do we have the equivalent combat capability in cyberspace as two Ford-class carriers? I'd argue no." - Josh Stiefel

"[Cyber Com] just is not where it needs to be. It's doing great work, but not at the scale and breadth that we know we're going to need. – Ed Cardon

"In my experience, we tend to study [decisions like standing up a Cyber Force] for a couple of years before we implement it. We don't have that kind of time." – Ed Cardon

"Each one [of the typhoons] is a really bad day. Collectively, it's the perfect storm. And the fact that we at least publicly haven't made it a much bigger set of issues is going to send a signal to all of our adversaries that this is okay." – Frank Cilluffo

Relevant Links and Resources

CSIS Cyber Force Commission: https://www.csis.org/programs/strategic-technologies-program/projects/commission-us-cyber-force-generation

Guest Bios:

Joshua Stiefel is the former Professional Staff Member on the House Armed Services Committee, where he oversaw cyber and IT policy, operations, and procurement. He previously served as Senior Cyber Policy Advisor at the Department of the Treasury, leading sector-wide cybersecurity initiatives and authoring its first vulnerabilities study. A former DoD intelligence officer who deployed with Special Operations Forces in Iraq, he now serves in the U.S. Navy Reserve. He is a Term Member of the Council on Foreign Relations and holds degrees from Harvard and Lehigh.

Lt. Gen. Edward Cardon (Ret.) served 36 years in the U.S. Army, including as Commanding General of Army Cyber Command, where he built it into a world-class force with 41 cyber mission teams. He later directed the Army Office of Business Transformation, helping establish Army Futures Command. His career also included leading the 2nd Infantry Division in South Korea and multiple combat deployments. Today, he is a Senior Counselor at The Cohen Group and advises defense and technology organizations.

Inside In-Q-Tel: Investing in America's Cyber Future with Katie Gray Oct 07, 2025

Show notes

Katie Gray, a senior partner at In-Q-Tel, joins host Frank Cilluffo to pull back the curtain on the venture firm's role in advancing U.S. national security through tech innovation. As head of In-Q-Tel's cyber investment practice, Gray offers rare insight into the organization's dual-use investment model, its evolving priorities, and the technologies it believes will define the next 25 years. They discuss how In-Q-Tel identifies emerging threats, evaluates startups, and bridges the gap between cutting-edge technology and urgent government needs. Topics include AI, quantum, cyber-physical security, and the vulnerabilities shaping today's threat landscape. The conversation also highlights In-Q-Tel's unique role as both strategic investor and national security partner.

Main Topics Covered

In-Q-Tel's origin, mission, and evolution beyond the intelligence community
How In-Q-Tel identifies promising startups and matches them with agency needs
The shifting threat landscape in cyber, including Volt Typhoon and AI-driven attacks
Investment priorities in space, supply chain security, and operational technology
The dual-use tech model and building resilience at machine speed
A case study: VulnCheck and its impact across multiple government agencies

Key Quotes

"We are dramatically under invested as a nation in our cyber defenses… as we look to the future conflict, we're so vulnerable from a cybersecurity standpoint. " – Katie Gray

"[For] every dollar that In-Q-Tel invests in a company, there's $40 that are invested from the private sector." – Katie Gray

"One of the things we do look for is to try and fund dual-use technology that has strong commercial [and] government market." – Katie Gray

"We're going to be in a world where 80-90% of the code that is being written is being written by AI systems. – Katie Gray

"We can't be responding to [AI-driven cyber attacks] at human speed. We have to be responding to that at machine speed." – Katie Gray

Relevant Links and Resources

https://www.iqt.org/mission
https://mccraryinstitute.com/time-to-designate-space-systems-as-critical-infrastructure/

Guest Bio Katie Gray is a senior partner at In-Q-Tel, where she leads the organization's cyber investment practice and supports mission-driven innovation across the U.S. national security landscape. She previously spent more than a decade in software product management, leading development for mobile devices at Palm, HP, and Plastic Logic.

How Scammers Exploit Trust and FOMO: Kicking Off Cybersecurity Awareness Month with Lisa Plaggemier Sep 30, 2025

Show notes

Lisa Plaggemier, Executive Director of the National Cybersecurity Alliance, joins host Frank Cilluffo to discuss how public education can combat online scams, fraud, and cyber threats. With billions of campaign impressions and only a nine-person team, the Alliance focuses on motivating behavior change through creative, jargon-free outreach. Plaggemier explains how scams like pig butchering are orchestrated by organized crime and even nation-state actors—and why the U.S. needs a coordinated national response. The episode highlights the growing need for cross-sector data sharing, targeted messaging for seniors, and a "scam czar" to unite fragmented efforts. As Cybersecurity Awareness Month kicks off, the conversation underscores how individual actions and shared responsibility can help close critical gaps in digital safety.

Main Topics Covered • The mission of the National Cybersecurity Alliance and its consumer-focused campaigns • Core Cybersecurity Awareness Month themes: MFA, passwords, updates, and scams • Reaching overlooked populations through creative outreach like Kubikle and safe-word campaigns • The scale and structure of online scams like pig butchering and their ties to nation-state actors • The call for a national "scam czar" to coordinate public-private response • Challenges in cross-sector data sharing and the limits of current fraud response models • Upcoming efforts to reach K-12 audiences and improve campaign impact across age groups

Key Quotes "We are a tiny nonprofit of nine people and we reach billions of people every October." — Lisa Plaggemier "I can hack away at our banks and probably not come away with any cash. [But] I can hack away at individual customers of the bank and come away with millions of dollars, and there's no ISAC for my mom." — Lisa Plaggemier "I do not think it would be a bad idea if we had a scam czar at this point because the adversary is so well organized." — Lisa Plaggemier "Older folks are targeted less often, but when they fall victim, the dollar amounts are very high. They have their whole life savings at stake." — Lisa Plaggemier "We've got in a lot of organizations, fraud teams that don't talk to security teams that don't talk to trust and safety teams. And so if you're still siloed in your organization, I think the call to action here is that that all needs to be seen as one." — Lisa Plaggemier

Relevant Links and Resources

Guest Bio Lisa Plaggemier is Executive Director of the National Cybersecurity Alliance, where she leads efforts to make cybersecurity practical and accessible. She describes herself as "on a crusade to eliminate stock photos of hackers in hoodies," underscoring her focus on real-world education over clichés. A former Ford Motor Company marketing executive, she now serves on the U.S. Secret Service Cyber Investigations Advisory Board and is based in Austin, Texas.

To the Point: The Under the Radar Risk of Letting Counter-Drone Authorities Expire with Matt Hayden Sep 29, 2025

Show notes

In this episode of Cyber Focus: To the Point, Frank Cilluffo sits down with Matt Hayden, former DHS official and current GDIT executive, to unpack the looming expiration of the Preventing Emerging Threats Act. Together, they explore the growing dangers posed by drones—from hobbyist disruptions to nation-state threats—and what's at stake if Congress fails to reauthorize key counter-UAS authorities by October 1. Hayden explains why current authorities are essential for protecting the homeland and how they fall short when it comes to local law enforcement, airports, and evolving drone technology.

Op-Ed: Flying under the radar: Congress is poised to let key counter-drone authorities lapse

Inside CISA Cuts, ODNI Shifts, and Spyware Threats with Federal News Network's Justin Doubleday Sep 23, 2025

Show notes

What happens when the federal cyber workforce shrinks just as threats are multiplying? In this episode, Federal News Network's Justin Doubleday joins host Frank Cilluffo to unpack the turbulence facing government agencies. They examine the mass departures at CISA, the controversial firings under DHS's Cyber Talent Management System, and the looming risks of dismantling ODNI's cyber intelligence hub. Doubleday also shares a chilling story of how El Chapo's cartel used spyware and hacked city cameras to compromise FBI operations in Mexico—underscoring the new reality of ubiquitous surveillance. The conversation closes with a look at the Pentagon's long-awaited CMMC rollout, Treasury's "Do Not Pay" database, and the broader challenge of protecting both privacy and security in a digital age.

Main Topics Covered

Why CISA lost a third of its workforce and what that means for U.S. cyber defense
How probationary firings under DHS's Cyber Talent Management System shook trust in federal hiring
The implications of ODNI shutting down its cyber intelligence integration center amid deep budget cuts
Proposals in Congress to speed up security clearances and retain cleared talent longer
A chilling account of how El Chapo's cartel hacked FBI operations using spyware and city surveillance
What the rollout of DoD's CMMC rules will mean for defense contractors and future cyber regulations
How Treasury's "Do Not Pay" database ties into fraud prevention, privacy concerns, and the future of digital identity

Key Quotes

"A lot of [the departed federal cyber workforce is] on the books until October 1st and so we're kind of waiting to see exactly how many folks left and where the dust kind of settles as we get into the fall." – Justin Doubleday

"The probationary firings certainly cast a little bit of a negative light on the idea of joining the Cyber Talent Management System, because… you could be fired with a snap of a finger." – Justin Doubleday

"Commercial spyware is much more easily accessible for a range of groups and individuals. And it's almost impossible to detect when spyware has gotten onto a phone of an individual, even for a cyber expert." – Justin Doubleday

"I think there's concern that [with ODNI shutting down CTIIC] you're now going to go back to a situation where you have disparate views kind of bubbling up from across the intelligence community and you don't have that single source of truth at the top that's helping to sort things out for leaders." – Justin Doubleday

"As it goes with technology and cybersecurity, things are often nice to have until they're necessary." – Justin Doubleday

Relevant Links and Resources

Cyber pay in government is as fragmented as ever https://federalnewsnetwork.com/federal-report/2024/09/cyber-pay-in-government-is-as-fragmented-as-ever/

CISA at a crossroads amid workforce cuts, pause, partnerships https://federalnewsnetwork.com/cybersecurity/2025/06/cisa-at-a-crossroads-amid-workforce-cuts-pause-partnerships/

Security clearance reforms advancing in 2026 defense bill https://federalnewsnetwork.com/inside-ic/2025/08/security-clearance-reforms-advancing-in-2026-defense-bill/

How a hacker for El Chapo illustrates existential counterintelligence threats https://federalnewsnetwork.com/federal-report/2025/07/how-a-hacker-for-el-chapo-illustrates-existential-counterintelligence-threats/

Grand odyssey of CMMC nearing implementation https://federalnewsnetwork.com/cybersecurity/2025/08/grand-odyssey-of-cmmc-nearing-implementation/

OMB directs agencies to address Do Not Pay data gaps https://federalnewsnetwork.com/financial-management/2025/08/omb-directs-agencies-to-address-do-not-pay-data-gaps/

Guest Bio

Justin Doubleday is a reporter for Federal News Network covering cybersecurity, intelligence, and technology policy. He tracks how federal agencies and lawmakers address evolving digital threats, insider risks, and the intersection of policy, procurement, and national security.

Why State and Local Cyber Grants Matter with New Jersey's Michael Geraghty and Arizona's Ryan Murray Sep 16, 2025

Show notes

Congress faces a looming deadline to renew the State and Local Cybersecurity Grant Program (SLCGP), a federal initiative that helps states and municipalities defend against cyberattacks. In this episode, Frank Cilluffo speaks with New Jersey CISO Michael Geraghty and Arizona CISO Ryan Murray about how these grants are making a measurable difference on the ground. They detail how investments are protecting communities from ransomware, building out shared services, and training the next generation of cyber talent. The conversation underscores the urgency of continued funding to sustain trust, prevent losses, and strengthen the interconnected fabric of U.S. cyber defense.

Main Topics Covered

Explain why renewing the State and Local Cybersecurity Grant Program (SLCGP) is urgent.
Show how federal grants reduce ransomware risk and generate measurable ROI.
Use Arizona's student-led SOCs to highlight workforce development and shared services.
Describe New Jersey's statewide approach to defending municipalities.
Weigh the stakes of eroding trust and services if funding lapses.
Explore the broader "one team, one fight" vision linking local, state, and federal defense.

Key Quotes:

"In the last year, that [endpoint detection] program stopped 179 ransomware attacks…for a $5 million investment, potential loss avoidance is about $45 million." - Michael Geraghty

"We're using some of those funds to hire interns as part of our workforce development effort. So we're deploying student-led regional security operations centers in partnership with our community colleges across the entire state [of Arizona]." – Ryan Murray

"We're all interconnected, right. Our cities connect to our county governments, connect to our state governments, and we connect to our federal partners. But unfortunately, our defenses have these seams, they have these gaps where we're not so integrated in our defenses and our information sharing." – Ryan Murray

"There is no one organization that is going to be able to defend themselves against nation state actors, cyber terrorist organizations, transnational criminal groups, and even the hacktivists or low level hackers. But when we team up together through a strategy that again maximizes our resources, that's when we become that much stronger." - Michael Geraghty

"One team, one fight, easier said than done. I think we all know that, but it's challenging." – Frank Cilluffo

Relevant Links and Resources

Guest Bios:

Ryan Murray serves as Chief Information Security Officer for the State of Arizona. He previously served as CISO for the Arizona Department of Revenue and has nearly 20 years of IT and security experience.

Michael Geraghty is New Jersey's State Chief Information Security Officer and Director of the NJ Cybersecurity and Communications Integration Cell (NJCCIC). He has held senior cybersecurity roles in both the public and private sectors, including the New Jersey State Police and Prudential Financial

Countering Ransomware, CISA 2015, and Active Cyber Defense with Cynthia Kaiser Sep 09, 2025

Show notes

Overview

Cybersecurity threats are growing more complex as ransomware gangs, nation-states, and criminal networks converge. In this episode, Frank Cilluffo speaks with Cynthia Kaiser, senior vice president at Halcyon and former deputy assistant director for cyber at the FBI. They discuss the looming risk if Congress fails to reauthorize the Cybersecurity Information Sharing Act of 2015, the evolution of ransomware as both a business model and geopolitical weapon, and how industry must play a bigger role in active defense. Kaiser also explains the indiscriminate reach of Chinese espionage campaigns and the urgent need to define national red lines in cyberspace. Together, they outline why collaboration, innovation, and trust are essential to future cyber resilience.

Main Topics Covered

Halcyon Ransomware Research Center launch
FBI lessons from major takedowns
Cybersecurity Information Sharing Act stakes
Ransomware and nation-state espionage
Active defense and industry roles
Balancing disclosure and attribution
FBI of tomorrow and AI
Red lines in cyberspace

Key Quotes

"If CISA 2015 lapses, companies may be less inclined or may be less able to share information with the government… And then America would be in the dark." – Cynthia Kaiser (~07:37)

"There's not one action that's going to stop Putin from cybering… And industry has such a critical role." – Cynthia Kaiser (~11:04)

"As a mom… the Chinese government now has information about who [kids] called, where they were, how long the call was… It really shows that the Chinese government is indiscriminate." – Cynthia Kaiser (~22:45)

"[Ransomware is] an ecosystem of businesses… And so broadening and being able to conduct more of these proactive active defense operations against criminal groups would have a really great effect." – Cynthia Kaiser (~16:02)

"[Washington] should really just be asking 'What are our red lines today, and have we already gone over them?'" – Cynthia Kaiser (~32:16)

Relevant Links and Resources

Guest Bio

Cynthia Kaiser is the Senior Vice President of Halcyon's Ransomware Research Center and former Deputy Assistant Director of the FBI's Cyber Division. She led cyber policy, intelligence, and engagement efforts at the Bureau and played a key role in disrupting major ransomware groups like LockBit and Qakbot.

Sen. Gary Peters Sounds the Alarm on CISA 2015 Renewal, Cyber Budget Cuts, and Local Defense Gaps Sep 02, 2025

Show notes

Congress is back from August recess with just weeks to act on vital national issues. One key deadline: reauthorizing the 2015 law that shields companies when they share threat intelligence with the federal government. In this episode, Senator Gary Peters (D-MI) joins host Frank Cilluffo to explain why renewing CISA 2015 is essential to national security, how one senator is holding up progress, and what listeners can do about it. The conversation also covers Peters' push to cut red tape for cyber professionals, shore up state and local defenses, and close critical workforce gaps before it's too late.

Main Topics Covered

Urgent need to renew CISA 2015 liability protections
Misinformation and confusion around CISA's mission
Importance of cyber grant funding for state and local governments
Regulatory burdens facing cyber professionals and the need for harmonization
Federal cyber workforce recruitment and retention

Key Quotes

"We only have a few weeks and [CISA 2015] will expire, and that will be catastrophic for our ability to protect against all the bad guys that are out there." – Sen. Gary Peters

"Trust is everything. And if you don't have [CISA 2015], we go back to the environment we had before where there was a lack of trust… once you lose trust, it's really hard to get it back." – Sen. Gary Peters

"Sometimes our cyber professionals spend 40, 50, 60% of their time doing paperwork and checking boxes. That makes no sense." – Sen. Gary Peters

"You actually end up saving money by investing in this kind of protection [state and local cyber grants]. And at a time when we're running record deficits that are going to increase, we've got to be thinking about being smart… and actually bringing down the cost of what would happen with a cyber attack." – Sen. Gary Peters

"If we don't protect our weakest links, it doesn't matter how good you are at the top—you're going to have some serious problems." – Sen. Gary Peters

Relevant Links and Resources

Cybersecurity Information Sharing Extension Act

Guest Bio Sen. Gary Peters is Ranking Member of the Senate Homeland Security and Governmental Affairs Committee and a nationally recognized leader on cybersecurity policy. A Navy Reserve veteran and former financial executive, he has shaped major legislation on homeland security, cybersecurity, and critical infrastructure—with more bills signed into law than any other senator in a recent session. He also serves on the Appropriations, Armed Services, and Commerce Committees.

Can Congress Keep Up with AI? Sarah Beth Jansen & Austin Carson on Policy and Innovation Aug 26, 2025

Show notes

In this episode of Cyber Focus, host Frank Cilluffo moderates a timely and wide-ranging conversation on the future of AI policy and governance with Sarah Beth Jansen, a senior fellow at the McCrary Institute and longtime DC policy expert, and Austin Carson, founder of SeedAI and former legislative director for Rep. Mike McCaul. The discussion covers the Trump administration's AI Action Plan, sector-specific regulatory approaches, and how Congress can play a constructive role without stifling innovation. Both guests emphasize the importance of local experimentation, procurement reform, and broad stakeholder engagement. With AI poised to shape everything from national security to everyday business operations, the episode underscores the urgent need to develop trustworthy, inclusive, and forward-looking frameworks that can scale with the technology.

Main Topics Covered:

The White House's AI Action Plan and why it marks a pivotal policy moment
The case for sector-specific approaches to AI regulation
The role of Congress in shaping balanced, innovation-friendly guardrails
The importance of state-level initiatives like Utah's AI sandbox
Federal procurement as a lever for responsible AI adoption
Hopes and fears around AI governance and public trust

Key Quotes:

"We've been using AI or machine learning in our products for over a decade and that's almost a surprise to some members of Congress who haven't really dug into [AI] yet." — Sarah Beth Jansen "AI policy is everything policy now… every single member on the Hill could find something constructive to do involving artificial intelligence in their committee. On one hand, AI is frankly an excuse to find crack back open issues that you may want to crack back open. On the other hand, there is kind of like this infinite fractal space of where AI is going to touch the economy [and] going to touch scientific discovery." — Austin Carson "Before the federal government can come in and say these are what the standards should be… you need to have the ability for there to be input from a variety of different sources." — Sarah Beth Jansen "My biggest fear is that AI will be developed and regulated and considered by a group of extraordinarily small number of people in the bay, and in D.C., and in New York instead of people around the country. — Austin Carson "[Congress] shouldn't be over prescriptive in any legislation they do... because we all know that Congress unfortunately does not pass legislation very quickly. And I think for them to be relevant they need to not be so specific that they just take them themselves out of the game." — Sarah Beth Jansen Relevant Links and Resources: White House AI Action Plan Utah's Office of Artificial Intelligence Policy AI Across America Project

Guest Bios:

Sarah Beth Jansen is Senior Director of Government Affairs & Policy Counsel at The Franklin Square Group. She's a senior fellow at the McCrary Institute and a seasoned Washington policy expert specializing in cybersecurity, surveillance, and IT policy. She has served in senior staff roles on both the Senate Judiciary Committee and the Senate Homeland Security and Governmental Affairs Committee. She holds degrees from Auburn University and the University of Alabama.

Austin Carson is the founder of SeedAI, a nonprofit working to expand public-sector understanding and engagement with artificial intelligence. He previously led government affairs at NVIDIA and served as legislative director for Rep. Mike McCaul when he chaired the House Homeland Security Committee. His work now focuses on facilitating AI literacy and policymaking across sectors and communities.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Related Podcasts

Links

Stay Connected