Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Latest Episodes:

Ports, Cranes, and Zero Trust: Defending U.S. OT — w/ Booz Allen's Brad Medairy & Dave Forbes Aug 19, 2025

Show notes

In this episode of Cyber Focus, Frank Cilluffo is joined by Brad Medairy, Executive Vice President at Booz Allen Hamilton, and Dave Forbes, who leads Cyber Physical Defense for the firm. Together, they unpack their joint report with the McCrary Institute, Anchored in Zero Trust, examining the cybersecurity vulnerabilities of U.S. ports. The conversation explores China's cyber activities, the significance of Volt Typhoon, and the risks posed by Chinese-made cranes operating at American ports. They highlight how economic and national security intersect at ports, the unique challenges of operational technology (OT), and why zero trust must become more than a buzzword. The discussion also looks ahead at how critical infrastructure sectors can harden defenses, reduce tech debt, and build resilience against persistent adversaries.

Main Topics Covered

China-linked cyber threats to U.S. ports.
Risks from Chinese-made cranes; ports as a "one connected battle space."
OT basics: know your assets, segment networks, lock down vendor access.
Zero Trust for OT: assume breach, pilot fast, scale what works.
Why port disruptions matter: major economic ripple effects; plan and drill.
What's next: adversarial AI and stronger public-private collaboration.

Key Quotes

"Our adversary doesn't see the United States infrastructure environment as a Department of Defense, [or] as a global economy, [or] as a Department of Transportation. They see one connected battle space with a great number of… seams that they want to exploit." – Dave Forbes

"There's no real intelligence value in terms of what [China was] doing [with Volt Typhoon]. They were pre-staging capabilities in the US critical infrastructure. And the only real explanation is to achieve some sort of potential future kinetic effect." – Brad Medairy

"It doesn't need to be a devastating attack. It needs to be a disruption. It needs to be a distraction. It needs to be something that we're worried about… throwing things off balance on our economy and national security posture. – Dave Forbes

"Our adversaries don't look at our nation in isolation… They look at our nation as one holistic battle space... So if we flip that… I'm not sure any of us can solve this problem alone, but together we're stronger. – Brad Medairy

"[W]e've been able to remediate [Volt Typhoon] in certain cases… That was just step one. This is going to be forever… it's going to be a game of cat and mouse for years to come." – Brad Medairy

Relevant Links and Resources

Guest Bios

Brad Medairy is an Executive Vice President at Booz Allen, where he leads the firm's cyber practice. He is also a Senior Fellow at the McCrary Institute for Cyber and Critical Infrastructure Security, co-leading research efforts on China and cyber threats.

Dave Forbes leads Cyber Physical Defense at Booz Allen and was a primary contributor to the Anchored in Zero Trust report. His work focuses on bridging physical and cyber domains to strengthen critical infrastructure protection.

Black Hat 2025: CISA's Playbook for Defending Critical Systems with Chris Butera and Bob Costello Aug 12, 2025

Show notes

In this special Cyber Focus episode recorded at Black Hat 2025, host Frank Cilluffo sits down with two senior leaders from the Cybersecurity and Infrastructure Security Agency (CISA): Chris Butera, a more than decade-long CISA veteran currently serving as Acting Director of the Cybersecurity Division, and Bob Costello, the agency's Chief Information Officer. They discuss how CISA is adapting its mission in the face of evolving threats, budget pressures, and leadership changes, while maintaining a rapid operational tempo. Topics include the agency's fast-turn vulnerability response through the Known Exploited Vulnerabilities (KEV) catalog, expansion and quality focus of the Common Vulnerabilities and Exposures (CVE) program, and the push to strengthen operational technology (OT) security. The conversation also explores resilience strategies like CISA's new eviction tool, deepening public-private operational collaboration, securing supply chains, and the importance of reauthorizing the Cybersecurity and Information Sharing Act.

Main Topics Covered

CISA's mission, workforce, and adapting to leadership and budget changes
Rapid vulnerability response and the Known Exploited Vulnerabilities (KEV) catalog
Threat landscape, including nation-state actors and OT security
Operational collaboration with industry, JCDC, and new IT platforms
CVE program growth and automation for vulnerability management
Resilience strategies, eviction tool, and micro-segmentation
Supply chain security and Secure by Demand guidance
SLTT cybersecurity grants and field support
Importance of reauthorizing the Cybersecurity and Information Sharing Act (2015)

Key Quotes:

"I'm really honored to work with some of the most experienced cyber professionals I think that exists anywhere in the world… We're seeing people step up into new roles, leadership positions, work on new technical projects that maybe they weren't before. And we're just hitting grand slams every day." – Bob Costello
"[I ask organizations] 'How can you continue your mission without access to some of your critical systems? Whether these are your billing systems, your IT systems, your even just access to the Internet.' And I think a lot of organizations don't have those kind of plans in place or can't function in those cases." – Chris Butera
"One of the things that we are trying to do every single day is remove some of those OT systems from the Internet. That is a very critical step that we think that there are very few business cases where you should have an OT system connected directly to the Internet." – Chris Butera
"We absolutely support reauthorization of [CISA 2015 authorities]… collaboration is what we're all about. We talk about cyber being a team sport and this helps make all the teams play a lot better together." – Bob Costello
"I think we all need to think about [supply chains] a lot differently. And it's across the board, whether it's open source, closed source, or hardware, everything is kind of linked together, and often we don't know where those linkages are." – Bob Costello

Relevant Links and Resources:

Guest Bios:

Chris Butera is Associate Director for Cybersecurity at the Cybersecurity and Infrastructure Security Agency (CISA), where he oversees operational efforts to protect the nation's critical infrastructure from cyber threats.
Bob Costello is Chief Information Officer at CISA, leading the agency's enterprise IT systems, collaboration platforms, and secure information-sharing initiatives with public and private sector partners.

Hacktivism, Quantum Threats, and the Future of OT Security with Forescout CEO Barry Mainz Aug 05, 2025

Show notes

Forescout CEO Barry Mainz joins host Frank Cilluffo to unpack the evolving cybersecurity threat landscape—from nation-state hacktivism to post-quantum vulnerabilities. Mainz highlights how adversaries are leveraging crowdsourced expertise and agentic AI to target critical infrastructure, especially operational technology (OT) systems in sectors like water, energy, and healthcare. The conversation explores Forescout's research on hacktivist proxy groups, the growing danger posed by embedded and aging devices, and the urgency of preparing for post-quantum cryptographic threats. Mainz emphasizes the need for visibility, containment, and cultural alignment between IT and OT security teams to build genuine resilience in both the public and private sectors.

Main Topics Covered: • Hacktivist proxy campaigns and nation-state coordination • Vulnerabilities in critical infrastructure, especially water and energy • Embedded devices and the rise of OT-targeted malware • The looming impact of quantum computing and agentic AI on encryption • Cultural and structural barriers between IT and OT security teams • Practical steps toward building resilience and post-quantum readiness

Key Quotes: "Nation state bad actors were using multiple hacktivism groups like an open source… crowdsourced to solve problems… It's not 10 people sitting in a room somewhere, it could be up to several thousand." – Barry Mainz "You can't secure stuff you don't see. So it's really about… asset visibility." – Barry Mainz "If your cyber vendor doesn't have quantum-safe technology built in, it's a problem." – Barry Mainz "The culture is 'Hey, I'm in OT, stay out of my business. I'm in IT, stay out of my business.' And I think this lack of 'Hey, let's go and take an approach together' is missing." – Barry Mainz "Every one of the times we've engaged with a large corporation and they had an issue, it was costing them way more than if they would have just bought the [necessary technology protections] up front." – Barry Mainz

Relevant Links and Resources:

Guest Bio: Barry Mainz is the Chief Executive Officer of Forescout Technologies, where he leads the company's mission to secure the world's most critical assets across IT, OT, IoT, and medical device environments. Appointed CEO in early 2023, Mainz brought more than 25 years of executive leadership experience across infrastructure software and cybersecurity, including roles as CEO of MobileIron and President of Wind River Systems, a division of Intel.

Power, Security, and the Infrastructure of Tomorrow with Power Podcast Host Aaron Larson Jul 29, 2025

Show notes

In this special crossover edition of Cyber Focus and the Power Podcast, host Frank Cilluffo sits down with Aaron Larson to explore the evolving intersection of energy innovation and cybersecurity. From breakthroughs in small modular reactors and geothermal technologies to the power demands of AI and electric vehicles, they examine how the U.S. grid is being reshaped by both opportunity and threat. Larson draws on his background in nuclear power and conversations with top industry leaders to highlight the promise of emerging energy sources—and the urgent need to bake in security from the start. Together, they underscore the stakes of keeping U.S. energy infrastructure resilient in the face of growing cyber threats and global competition.

Main Topics Covered:

The transformation of the U.S. power grid from centralized plants to distributed energy resources
The impact of AI, data centers, and EVs on electricity demand
Innovations in nuclear energy, including SMRs, fusion, and microreactors
State-level leadership in clean energy development and workforce transition
The need for stronger cybersecurity awareness and integration across the energy sector
Strategic competition with China in advanced energy technologies

Key Quotes:

"We can't [be AI dominant] if we're not energy dominant. The two are inextricably interwoven." — Frank Cilluffo

"The nuclear industry will never compromise on safety... because they know any accident at one facility is an accident at all facilities" — Aaron Larson

"Volt Typhoon... literally did the cyber equivalent of preparation of the battlefield, where they own that infrastructure and can turn it on or off to meet their needs." — Frank Cilluffo

"People know [Cybersecurity] is important...They just don't always think it's their responsibility." — Aaron Larson

Guest Bio:

Aaron Larson is the Executive Editor of POWER magazine, a team he joined in 2013. Aaron has a bachelor's degree in nuclear engineering technology and a master's degree, specializing in finance. He spent 13 years in the U.S. Navy nuclear power program, advancing to Chief Petty Officer. He has worked at commercial nuclear, biomass, and coal-fired power plants, functioning in operations, maintenance, safety, financial, and management capacities.

Inside the UK's Cyber Strategy: Richard Horne on Resilience, Risk, and AI Jul 22, 2025

Show notes

Richard Horne, CEO of the United Kingdom's National Cyber Security Centre (NCSC), joins host Frank Cilluffo to explore how the UK is strengthening cyber resilience across critical infrastructure, private industry, and international partnerships. Drawing from his experience in both government and the private sector, Horne outlines NCSC's approach to tackling advanced threats, closing resilience gaps, and collaborating with allies on systemic cyber defense. The conversation spans ransomware, AI, supply chain risk, quantum cryptography, and how organizations—large and small—can better prepare for disruption. Horne emphasizes the growing complexity of the digital threat landscape and urges a pragmatic, contest-oriented mindset to keep pace.

Main Topics Covered:

The mission and structure of the UK's National Cyber Security Centre (NCSC)
Cyber resilience through exposure, defenses, and consequence management
Gaps in critical infrastructure protection and supply chain vulnerabilities
Use of AI and automation in both defense and attack
International collaboration and the importance of Five Eyes partnerships
Quantum computing and the need to prepare cryptography for post-quantum threats

Key Quotes:

"AI is almost like… when we moved from wooden [tennis] rackets to composite rackets. Was that an advantage? It was an advantage to both sides. [...] If you stick with a wooden racket, then ultimately you're going to be overcome." — Richard Horne

"We see many cyber attacks exploiting zero-day vulnerabilities that frankly shouldn't be there. And the quality of code that we have in our hardware, software… is a big issue." — Richard Horne

"In the world we're in, we all need to recognize we have a responsibility for cyber security for ourselves and for others." — Richard Horne

"The relationship with the U.S. and the Five Eyes really does underpin especially our understanding of the most advanced threat." — Richard Horne

"You'll often see sort of ransomware attacks against some small company you've never heard of and then potential front page impact the next day." — Richard Horne

NCSC Cyber Essentials Program

Guest Bio: Richard Horne has served as CEO of the UK's National Cyber Security Centre since October 2024. Prior to that, he was a Cyber Security Partner at PwC UK, where he advised global leaders on cyber risk strategy and led responses to major incidents—including the 2021 ransomware attack on Ireland's health service. He previously led cyber risk management at Barclays and played a key role in developing the UK's first national cyber security plan during a stint with the Cabinet Office. Richard holds a PhD in Mathematics and has represented the UK in cybersecurity forums at the OECD, European Commission, and ISO.

NSA vs. Zero-Days: Kristina Walter on Speed, Scale, and Stopping Cyber Threats Jul 15, 2025

Show notes

Kristina Walter, Director of the NSA's Cybersecurity Collaboration Center, joins Frank Cilluffo to explain how the NSA is building trusted partnerships with private industry to counter advanced cyber threats. Walter shares how collaborative work with defense contractors and tech providers has helped uncover zero-day vulnerabilities, block billions of malicious domains, and expose Chinese operations like Volt Typhoon. She also discusses the role of AI in cyber defense, the race to prepare for quantum computing, and why resilience—not perfection—is the new benchmark for critical infrastructure protection.

Main Topics Covered

Origins and mission of the Cybersecurity Collaboration Center
Building trust and scaling public-private partnerships
Tracking Chinese cyber campaigns and zero-day vulnerabilities
NSA's protective DNS service and pre-ransomware defense
AI's role in threat detection and emerging attack surfaces
Post-quantum cryptography and upgrading national systems
Workforce development and government-industry collaboration

Key Quotes

"That service has about 1200 companies enrolled in it today. And it's blocked 4 billion malicious domains… 500 million of them are NSA unique domains." – Kristina Walter

"You can't surge trust in a crisis. We have found that having that established relationship meant that when something did go wrong for some of these companies, they knew who to turn to, and how to work with us, and how we would protect the information they gave us". – Kristina Walter

"We found it in about two weeks of the start of exploitation and were able to get out the hunting and the detections while the patch was being worked so that we could do it all together and try to remediate the threat." – Kristina Walter

"Our focus was… how do we work with interagency partners and industry to expose this trade craft of living off the land… and really unleash the cybersecurity community in the United States to find it and eradicate it on the US Government's behalf." – Kristina Walter

"When we talk about a cryptologically relevant quantum computer, it's really [a question of] when, not if… So what we're really focused on is how do we upgrade all of the cryptographic inventory of the United States and national security systems to be quantum resistant." – Kristina Walter

Relevant Links and Resources

Guest Bio Kristina Walter is Director of the NSA's Cybersecurity Collaboration Center, where she leads efforts to partner with private industry in defense of U.S. national security systems. A founding member of the center, Walter brings deep experience from her work in both operational cybersecurity and workforce development at NSA. She also oversees the NSA's AI Security Center, advancing the secure development of artificial intelligence technologies while safeguarding U.S. innovation from foreign adversaries.

Hacking the Harvest: Jonathan Braley on Ransomware, GPS Disruption, and Securing U.S. Agriculture Jul 08, 2025

Show notes

In this episode of Cyber Focus, Frank Cilluffo sits down with Jonathan Braley, Director of the Food and Agriculture Information Sharing and Analysis Center (Food and Ag-ISAC), to explore the growing cybersecurity threats facing the U.S. food and agriculture sector. They examine the integration of operational technology (OT), the rise in ransomware attacks on farms and food producers, and the fragile nature of supply chain cybersecurity. Braley highlights why even small farms are increasingly targeted and how awareness, threat intelligence sharing, and proactive cyber defense strategies are essential. The discussion also touches on the geopolitical dimensions of agricultural cybersecurity, with examples from Ukraine, Israel, and China.

Main Topics Covered: • Why cybersecurity threats matter in the agriculture and food production sector • The risks posed by operational technology (OT) and GPS disruption in precision agriculture • The impact of ransomware attacks on small farms and supply chain resilience • Emerging cyber threats tied to foreign adversaries, disinformation, and intellectual property theft • New technologies in agriculture: AI tools, drones, and autonomous farming systems • The importance of cyber threat intelligence sharing and public-private collaboration in agriculture

Key Quotes: "Historically we all have this picture of a farm in our heads with the manual tractors and people out on the fields. But there's a lot of technology now baked into the food and agriculture sector." – Jonathan Braley "If we're relying on our precision agriculture without a backup plan, when [GPS] goes down, it's not going to be a good situation for us." – Jonathan Braley "Anywhere along that [supply] line, one of those companies has a cyber incident—it's going to impact everybody." – Jonathan Braley "The ransomware group seemed to have an understanding of the nature of food and ag, and they hit them when it was most impactful [during peak planting and harvesting season]." – Jonathan Braley "The more we can share with each other [across government and industry], I think we have a better chance of protecting ourselves." – Jonathan Braley

Relevant Links and Resources: • Food and Ag-ISAC: https://www.foodandag-isac.org/ • Cybersecurity Information Sharing Act of 2015 (CISA)

Guest Bio: Jonathan Braley is the Director of the Food and Ag-ISAC, a key hub for cybersecurity information sharing across the food and agriculture sector. He also serves as Director of Threat Intelligence at the IT-ISAC, where he supports some of the world's leading technology companies. Braley's work focuses on improving cyber resilience in agriculture, helping farms, suppliers, and food producers detect and defend against ransomware, OT threats, and supply chain vulnerabilities.

Cyber Warfare, Workforce, and Fixing the System: Top House Chairmen on the Digital Threat Jul 01, 2025

Show notes

In this special Independence Day episode of Cyber Focus, we bring together highlights from three influential House leaders shaping U.S. cyber policy: Chairman Mark Green (Homeland Security), Chairman Mike Rogers (Armed Services), and Chairman Rick Crawford (Intelligence). From digital warfare and offensive cyber capabilities to workforce development and interagency reform, this episode offers a rare look into how Congress is working to strengthen national security in the digital age.

Listen to their full interviews: • Rick Crawford – We Are in a State of Digital Warfare https://mccraryinstitute.com/podcast/cyber-focus/76/we-are-in-a-state-of-digital-warfar/

• Mike Rogers – Cyber, Space, and the Future of Warfare https://mccraryinstitute.com/podcast/cyber-focus/64/cyber-space-and-the-future-of-warfa/

• Mark Green – Bridging the Cybersecurity Gap https://mccraryinstitute.com/podcast/cyber-focus/9/bridging-the-cybersecurity-gap-cong/

Iran, Ceasefires, and Cyber Threats: A Briefing with General Frank McKenzie (Ret.) Jun 24, 2025

Show notes

In this urgent episode of Cyber Focus recorded June 24, 2025, host Frank Cilluffo speaks with retired General Frank McKenzie, former Commander of U.S. Central Command and Executive Director of the Global and National Security Institute at the University of South Florida. The discussion focuses on the unfolding crisis between Iran and Israel, recent U.S. military strikes on Iranian nuclear sites, and the fragile ceasefire now in place. McKenzie offers expert insight into the strategic weakness of Iran, the state of its proxy forces, and the growing threat of Iranian cyberattacks. They also examine how Russia and China are positioning themselves amid the turmoil, the state of U.S. missile defense systems, and what Americans should watch for when it comes to national and homeland security.

Main Topics Covered:

Iran's weakened military and the strategic calculus behind the current ceasefire
U.S. bunker-busting strikes and implications for Iran's nuclear program
The future of Iran's proxy forces and risks of terrorism and radicalization
China and Russia's interests in the Middle East crisis
Iran's cyber threat posture and U.S. digital vulnerabilities
Space-based missile defense and the future of homeland security strategy

Key Quotes:

"Iran badly needs a ceasefire. They need to stop the bombardment because they're losing." — General Frank McKenzie (Ret.)

"The fact of the matter is Iran has had poor luck operating in the United States… they're not adept at operating in this environment." — General Frank McKenzie (Ret.)

"I think self radicalization is probably more of a threat… than a highly organized Iranian attack in the United States or through one of their proxies. But you can't rule it out." — General Frank McKenzie (Ret.)

"They do have the ability to attack us here with cyber… they will go where we're weakest." — General Frank McKenzie (Ret.)

"If we want to defend the United States against attacks like this from intercontinental ballistic missiles, we're going to have to be prepared to put systems on orbit, persistent systems on orbit." — General Frank McKenzie (Ret.)

Relevant Links and Resources:

Guest Bio: General Frank McKenzie (Ret.) is the Executive Director of the Global and National Security Institute at the University of South Florida and former Commander of U.S. Central Command (CENTCOM). A retired U.S. Marine Corps General, McKenzie brings decades of experience in Middle East operations, nuclear deterrence, and national security strategy. He is a leading voice on cybersecurity, defense policy, and military readiness in the face of global threats.

To the Point: Iran's Cyber Threat After Israel's Strikes Jun 20, 2025

Show notes

As tensions explode between Israel and Iran, what cyber threats could hit the U.S. next? In this urgent episode of To the Point, host Frank Cilluffo sits down with Admiral (Ret.) Mark Montgomery—cybersecurity expert and longtime Solarium Commission leader—to assess the growing risk of Iranian cyberattacks on U.S. critical infrastructure.

With Iran and its proxies already escalating digital aggression against Israeli targets, Montgomery warns that water systems, energy grids, and transportation networks in the U.S. could soon face similar threats. The conversation explores:

The vulnerabilities across U.S. critical infrastructure
Iran's evolving cyber and influence capabilities
Lessons from China's Volt Typhoon campaign
The need for a renewed "shields up" posture from CISA
Why national cyber defense demands stronger National Guard and reserve roles

Montgomery and Cilluffo call for urgent action to harden defenses and rethink public-private coordination in light of this volatile moment on the global stage.

More coverage on https://threatbeat.com/

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Related Podcasts

Links

Stay Connected