Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Latest Episodes:

"We Are in a State of Digital Warfare": Chairman Rick Crawford on the Cyber Frontlines Jun 17, 2025

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Congressman Rick Crawford, Chairman of the House Permanent Select Committee on Intelligence. They explore the evolving cyber threat landscape—from Chinese infiltration of U.S. supply chains to the rise of paramilitary cartels leveraging advanced digital tools. Crawford shares his perspective on offensive cyber capabilities, domestic counterintelligence reform, and efforts to close legislative blind spots through inter-committee collaboration. The conversation also covers critical infrastructure vulnerabilities, agricultural data security, and the strategic role of open-source intelligence in modern national security.

Main Topics Covered:

China's cyber-enabled influence operations in the Western Hemisphere
The evolution of cartels into cyber-capable paramilitary organizations
Counterintelligence gaps within the U.S. and the need for stronger domestic protections
Hardware vulnerabilities in supply chains, agriculture, and freight logistics
Debate over splitting NSA and U.S. Cyber Command leadership ("dual-hat" issue)
Legislative focus on reauthorizing CISA and addressing liability protections for reporting
The national security importance of open-source intelligence (OSINT)

Key Quotes:

"We are living in a state of digital warfare… As long as we continue to be in a defensive posture, this will continue to be a pervasive problem." —Chairman Rick Crawford

"[The cartels] have evolved into essentially a paramilitary organization… this is not the 1980s and they are very much a sophisticated adversary." —Chairman Rick Crawford

"It's [China's] ability to seed critical infrastructure elements…that gives them a foray into our supply chain. That makes us very, very vulnerable." —Chairman Rick Crawford

"[Open source intelligence] comprises about 25% of the President's Daily Brief. That's significant… but it doesn't have the appropriate level of attention paid to it." —Chairman Rick Crawford

"We either need to be all in [on Cyber Command] as a combatant command and then stand it up and authorize it the way it should be, fund it appropriately and organize it appropriately, or we need to say we think the NSA can do this and make this sort of a subsidiary of the NSA." —Chairman Rick Crawford

Relevant Links and Resources:

· Learn more about Congressman Rick Crawford: https://crawford.house.gov

· House Permanent Select Committee on Intelligence: https://intelligence.house.gov

Guest Bio: Rep. Rick Crawford represents Arkansas's First Congressional District and serves as Chairman of the House Permanent Select Committee on Intelligence. A former Army EOD technician, Crawford brings a national security lens to issues ranging from intelligence oversight and supply chain security to cyber threats in agriculture. He also serves on the Transportation and Infrastructure Committee and the Agriculture Committee, positioning him uniquely to address cybersecurity across critical infrastructure sectors.

Splitting Commands, Building Capabilities: DefenseScoop's Mark Pomerleau on the DoD's Cyber Future Jun 10, 2025

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Mark Pomerleau, senior reporter for DefenseScoop, to discuss the evolving landscape of U.S. cyber operations and military doctrine. Pomerleau unpacks the ongoing debate over splitting NSA and U.S. Cyber Command, the rising role of offensive cyber capabilities, and what "Cybercom 2.0" might look like in practice. He also explores the integration of cyber, electronic warfare, and space as part of a new operational triad, and shares lessons learned from Ukraine that are reshaping U.S. strategy. Together, they examine whether U.S. deterrence efforts are keeping pace with adversaries—and what needs to change to meet tomorrow's threats.

Main Topics Covered:

The origins and implications of the NSA-Cyber Command dual-hat debate
Tactical cyber at the edge: how services are enabling cyber in battlefield operations
The emerging cyber-electronic warfare-space triad
Cybercom 2.0 and the effort to modernize doctrine, authorities, and force generation
The limits of cyber deterrence and the need for a more assertive posture

Key Quotes:

"As a Title 50 intelligence organization, your goal is to not get caught… using that same infrastructure for military operations… can undermine that [intelligence] mission. And so Cyber Command has been working to really build up its own infrastructure, its own tools." — Mark Pomerleau

"The modern triad… really includes space, special operations forces and cyber. And the notion is that all of these together will be greater than the sum of their parts and be able to provide some really unique mission packages and capabilities for commanders." — Mark Pomerleau

"One of the big lessons that the Department of Defense came away with is that cyber does have a role to play in future conflict, but it's not the role that they necessarily thought it was a few years ago. And that cyber by itself likely isn't going to have the effect that they… initially thought it was." — Mark Pomerleau

"EW is going to be a huge enabler going forward… The faster commanders realize how to harness that and maneuver within that space, combine it with other effects like cyber and RF… we're really going to see that take off." — Mark Pomerleau

"Ultimately, those that are integrating [cyber and EW] into their warfighting strategy, doctrine, and practice are the ones that are going to dominate." — Frank Cilluffo

Relevant Links and Resources:

Guest Bio: Mark Pomerleau is a senior reporter for DefenseScoop, covering information warfare, cyber, electronic warfare, information operations, intelligence, and battlefield networks. With over a decade of experience, he is widely regarded as one of the most authoritative voices reporting on military cyber and EW strategy. His reporting regularly shapes the national conversation around U.S. cyber policy and defense modernization.

Space Is the Battlefield: Deterrence, Hypersonics, and China's Threat with ULA CEO Tory Bruno Jun 03, 2025

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with Tory Bruno, President and CEO of United Launch Alliance (ULA), which is responsible for more than 90% of U.S. national security space launches. Bruno discusses the escalating threat landscape in space, the urgency of a layered missile defense architecture known as the "Golden Dome," and how adversaries like China may initiate future conflicts in orbit before any shots are fired on Earth. The conversation also explores the technological and policy components of space deterrence, Bruno's insights from decades of leadership in strategic defense, and the role of directed energy in countering hypersonics.

Main Topics Covered:

ULA's role in national security and heavy-lift launch capability
The increasing likelihood that future conflicts with China will begin in space
The case for a layered missile defense system, including THAAD and NGI
Vulnerabilities in U.S. space infrastructure and economic dependence on orbit-based systems
Directed energy as a solution to maneuvering hypersonic threats
Policy priorities for the incoming administration

Key Quotes:

"A conflict like that on Earth will begin in space because China will see it as a means of leveling the playing field." – Tory Bruno

"[Space is now] a utility for our economy, everything and our society. Not having space would be like not having water, not having highways, not having transportation." – Tory Bruno

"[Space] isn't a force multiplier. It is now absolutely essential for basic military operations." – Tory Bruno

"North Korea, Iran, Syria… there's about a dozen countries that we now need to be concerned about. They would not necessarily be able to mount the volume of an attack that a China could. But… they might have some similar [counterspace] capabilities that in the past would have been really beyond their reach." – Tory Bruno

"Golden Dome is way overdue… When you've got a dozen countries that have a capability to put either a conventional or, God forbid, a weapon of mass destruction on your kids' school, then only having a retaliatory deterrent is insufficient." – Tory Bruno

Relevant Links and Resources:

Guest Bio: Tory Bruno is President and CEO of United Launch Alliance (ULA), where he leads the country's most experienced and reliable launch provider. Prior to ULA, he held senior roles at Lockheed Martin, including as Vice President of the THAAD missile program. With decades of experience in missile defense, strategic deterrence, and space systems, Bruno is a leading voice on the intersection of aerospace technology and national security.

OT Under Threat: Dragos' Robert M. Lee on Navigating Cyber-Physical Risks May 27, 2025

Show notes

Originally Released September 11, 2024

In this episode of Cyber Focus we're revisiting the conversation Frank Cilluffo had last September with Robert M. Lee. Rob is the CEO and co-founder of Dragos, a leading firm in industrial control systems (ICS) and operational technology (OT) cybersecurity. Rob unpacks the real-world consequences of cyber-enabled threats to physical infrastructure, including attacks on water systems, energy grids, and manufacturing sites. He shares insights into advanced malware like PipeDream and Frosty Goop, explains the growing risk of scalable OT attacks, and highlights adversaries' shifting tactics — from state-backed intrusions to criminal exploitation. The conversation also covers lessons from Ukraine, implications of Volt Typhoon, and the importance of visibility, public-private collaboration, and outcome-focused regulation in defending critical infrastructure.

Main Topics Covered:

What operational technology (OT) is — and how it differs from IT
Why cyber-enabled threats to physical infrastructure are escalating
Real-world case studies: Ukraine grid attacks, Saudi petrochemical facility, and U.S. water systems
Dragos' findings on ICS malware: PipeDream, Frosty Goop, and Modbus TCP exploits
Emerging adversary trends including Volt Typhoon and the shift to scalable, repeatable OT malware
The state of public-private collaboration and challenges facing OT cybersecurity in the U.S. and globally
Lessons from Singapore's regulatory approach and what operators can do today

Key Quotes: "[Operational technology] is all the stuff you have in IT, plus physics." – Robert M. Lee "These are cyber enabled attacks that can have physical consequences." – Frank Cilluffo "[PipeDream] is the first time we've seen ICS or OT malware that is repeatable, reusable, and scalable across industries. It works in everything from a servo motor on an unmanned aerial vehicle to a gas turbine." – Robert M. Lee "There was an attack in 2017 where an adversary broke into a petrochemical facility in Saudi Arabia explicitly to cause an event at a facility that would have killed people if they were successful." – Robert M. Lee "Right now in the operations technology community, we deal with low frequency, high consequence attacks. IT deals with high frequency, low consequence attacks. And if we start to see scale, we're going to start to see medium to then high frequency, high consequence attacks. We're not ready." – Robert M. Lee

Relevant Links and Resources:

Guest Bio: Rob Lee is the CEO and co-founder of Dragos, a cybersecurity company focused on protecting industrial control systems (ICS) and operational technology (OT). With a background in military and intelligence, Rob has worked at the National Security Agency (NSA) and U.S. Cyber Command. He has been instrumental in raising awareness about the vulnerabilities in critical infrastructure and the need for better OT cybersecurity. Rob is widely recognized as a leader in the field, advising government agencies and industry leaders on protecting essential services from cyberattacks.

When Fraud Meets Cyber: The Retail Sector's Expanding Risk Landscape with NRF's Christian Beckner May 20, 2025

Show notes

In this episode of the Cyber Focus podcast, recorded on April 30 at the RSA Conference in San Francisco, host Frank Cilluffo sits down with Christian Beckner, Vice President of Retail Technology and Cybersecurity at the National Retail Federation. Beckner provides a wide-ranging look at how cybersecurity, fraud, and emerging technologies are reshaping the retail landscape. They discuss how threats have evolved over the past decade, the growing impact of third-party risk, and the rise of fraud tactics such as account takeovers and gift card abuse. Beckner also outlines NRF's policy work on CIRCIA, the SEC cyber disclosure rule, and the organization's efforts to build stronger cross-sector collaboration. The conversation offers both a strategic overview and practical insight into one of the nation's most targeted and complex sectors.

Main Topics Covered:

The role of NRF and its focus on retail cybersecurity
How threats to the sector have evolved over the past 7 years
Growing concerns around third-party and vendor risk
The surge in fraud, including account takeover and gift card abuse
NRF's development of a fraud taxonomy for the industry
How AI is shaping both threats and defenses
NRF's cyber policy priorities and hopes for increased CISA engagement
Long-term risks and opportunities for strengthening retail cybersecurity

Key Quotes:

"Retail is a huge part of the economy. It's something that touches every person every day, and that's what makes it such an important piece of the overall cybersecurity landscape." — Christian Beckner

"We're seeing an increase in account takeover fraud, gift card fraud, return fraud… It's often hard to draw the line between what's a fraud issue and what's a cyber issue." — Christian Beckner

"We're building a taxonomy for fraud. And that's critical, because right now, we're all speaking different languages when we talk about these incidents." — Christian Beckner

Relevant Links and Resources:

Guest Bio: Christian Beckner is Vice President of Retail Technology and Cybersecurity at the National Retail Federation and Executive Director of NRF's Center for Digital Risk & Innovation. He leads the association's efforts on cybersecurity, fraud prevention, and emerging technologies. Before joining NRF, Beckner was Deputy Director of the Center for Cyber and Homeland Security at George Washington University and served in senior roles on the Senate Homeland Security and Governmental Affairs Committee. He holds degrees from Stanford University and Georgetown University.

The One-Way Street of Digital Transformation: OT Cybersecurity with Nozomi's Edgard Capdevielle May 13, 2025

Show notes

In this special RSA Conference edition of Cyber Focus, host Frank Cilluffo sits down with Edgard Capdevielle, President and CEO of Nozomi Networks, to unpack the evolving landscape of operational technology (OT) cybersecurity. Together, they explore how digital transformation and the convergence of IT and OT are reshaping the threat environment for critical infrastructure. Capdevielle outlines the three major phases of the OT security market, reflects on the role of AI and legacy systems, and explains why visibility remains foundational to cybersecurity. The conversation also highlights the growing risk from nation-state actors, the breakdown of air gap assumptions, and the tangible steps owner-operators must take to build resilience.

Main Topics Covered:

Defining the three phases of OT cybersecurity market maturity
The impact of digital transformation and IT/OT convergence
Why visibility remains the top concern for infrastructure operators
The role of AI in passive detection and firmware profiling
Nation-state threats, air gap fallacies, and Volt Typhoon's implications
Practical steps for operators to improve risk visibility and resilience

Key Quotes:

"Digital transformation is a one-way street. We're only going to automate more — automate everything — and IT and OT are only going to converge more." — Edgard Capdevielle

"You cannot protect what you can't see. So having a layer of visibility is number one." — Edgard Capdevielle

"Air gapping has been our number one enemy because it's not real… It's brought a level of comfort that is not good for us." — Edgard Capdevielle

Relevant Links and Resources:

Nozomi Networks

Guest Bio: Edgard Capdevielle is President and CEO of Nozomi Networks, a global leader in OT and IoT cybersecurity. He has a background in computer science and more than two decades of experience in cybersecurity and enterprise technology. Prior to joining Nozomi in 2016, he held leadership roles at Imperva and EMC (including post-acquisition work with Data Domain) and has served as an investor and advisor to several successful startups in the security space.

The AI Energy Surge: Jason Plautz on Grid Strain and National Stakes May 06, 2025

Show notes

In this episode of Cyber Focus, host Frank Cilluffo sits down with award-winning journalist Jason Plautz of Politico's E&E News Energywire to explore the growing tension between artificial intelligence, energy demand, and infrastructure readiness. Plautz breaks down how AI-driven data centers are reshaping the U.S. power grid—and what state and federal leaders are doing in response. The conversation covers legislative efforts in Texas and Georgia, the controversial idea of "kill switches" for data centers, and major federal moves like the Stargate project and DOE's push to site data centers on federal lands. Plautz also unpacks the Trump administration's AI and energy strategy, and highlights how tech companies could accelerate innovation in nuclear, geothermal, and other clean energy sources.

Main Topics Covered:

Why AI is driving an unprecedented spike in electricity demand
The strain data centers are placing on existing grid infrastructure
How states like Texas and Georgia are responding with new legislation
The feasibility and controversy around data center "kill switches"
The Stargate project and the Trump administration's AI-energy policy direction
DOE's plan to co-locate data centers and power sources on federal land

Key Quotes:

"Some of these [data centers] have been compared to like mini malls. If you imagine a site that big running computers, imagine how much power that's going to need." — Jason Plautz

"AI or data center use could triple by 2030 in the U.S. Right now it accounts for about 4% of the nation's electricity use. It would account for 12%.... the equivalent of 53 million households just running data centers. — Jason Plautz

"Lawmakers have said is they don't want a situation where the grid is strained and you have an entire block of houses without power, and across the street is a data center that's still humming." — Jason Plautz

"This is really an opportunity, I think, to leap forward in some of the energy technology that's been sitting dormant—because all of a sudden, you have deep pockets and a lot of interest." — Jason Plautz

"We're seeing a lot more concern about what would happen if there were to be a cyberattack on the grid. What would that mean—and how can we build the grid without making it more vulnerable?" — Jason Plautz

"This is an economic competitiveness issue as well as a national security issue—and it's a race neither we nor Beijing want to lose." — Frank Cilluffo

Relevant Links and Resources:

"Artificial Intelligence's Thirst for Power Demands Greater Focus on Cybersecurity of the Energy Sector" by Frank Cilluffo

https://www.powermag.com/artificial-intelligences-thirst-for-power-demands-greater-focus-on-cybersecurity-of-the-energy-sector/

"State lawmakers grapple with energy demand for data centers" by Jason Plautz https://www.eenews.net/articles/state-lawmakers-grapple-with-energy-demand-for-data-centers/

"Study finds headroom on the grid for data centers" by Jason Plautz https://www.eenews.net/articles/study-finds-headroom-on-the-grid-for-data-centers/

"Energy is AI's barrier to entry. David Sacks knows it." by Jason Plautz https://www.eenews.net/articles/energy-is-ais-barrier-to-entry-david-sacks-knows-it/

"Chris Wright elaborates on DOE data center build-out, job cuts" by Jason Plautz https://www.eenews.net/articles/chris-wright-elaborates-on-doe-data-center-build-out-job-cuts/

Guest Bio: Jason Plautz is an award-winning journalist based in Denver, currently reporting for E&E News' Energywire, where he covers electricity and the clean energy transition. He focuses on the intersection of environmental policy and politics, and his work has also appeared in Science, High Country News, and Ars Technica. A former reporter in Washington, D.C., Plautz was selected for the Scripps Fellowship in Environmental Journalism at the University of Colorado and brings experience in reporting, editing, and audio production.

Agentic AI, the Future of CISA and International Cyber Strategy: Key Takeaways from RSAC 2025 May 02, 2025

Show notes

Recorded on May 1, 2025, at the RSA Conference in San Francisco, this special Cyber Focus episode brings together government, industry, and policy leaders for an insider look at the key takeaways from the biggest cybersecurity event of the year. Frank Cilluffo sits down with David Colberg, a longtime RSA leader and architect of the conference's policy programming, to discuss how RSAC is shaping global cyber dialogue. Then a panel of McCrary Institute Senior Fellows — Katherine Hennessey, Matt Hayden, Alison King, and Bob Kolasky — joins the conversation to reflect on major themes, from agentic AI and offensive cyber to global cooperation and the CISA reorganization. Designed for Washington's cyber policy community, this episode delivers a timely snapshot of the conversations driving national and international cybersecurity strategy.

Main Topics Covered

Rising government and policy engagement at RSAC, anchored by the International Cybersecurity Forum
Secretary Noem's keynote and the evolving vision for CISA under the new administration
Agentic AI's role in shaping both cybersecurity and broader national security operations
International collaboration, including Australia's regional outreach and GCHQ's first public keynote
Offensive cyber strategy, red lines, and the Volt Typhoon threat from China
Scaling cyber defense through DARPA's AI Cyber Challenge and emerging automation tools
Workforce, collaboration, and renewed focus on federal cybersecurity priorities

Key Quotes

"We want government folks to be part of that community and to come out and speak and have opportunities to have valuable conversations which drive action." — David Colberg "Cybersecurity is national security against what could be an existential threat from China." — Bob Kolasky "We heard references that you're going to start onboarding [AI] bots in the same way you would employees. CISOs better get good on their AI bot HR." — Matt Hayden "The way we look at the data and how we use [AI and] the data to solve our cybersecurity challenges, but also our other physical world challenges, I think is a really fascinating place to be." — Katherine Hennessey "I always think of AI… as augmented intelligence. It's a tool that has to be used responsibly, and you have to have ethics attached to it." — Alison King "Technology, whatever it is, it will change. Human nature doesn't. And if we're going to defeat the bad guys… it takes networks to defeat [them]." — Frank Cilluffo

Relevant Links and Resources

RSA Conference: https://www.rsaconference.com
DARPA AI Cyber Challenge (AIxCC): https://aicyberchallenge.com
Cybersecurity and Infrastructure Security Agency (CISA): https://www.cisa.gov
McCrary Institute for Cyber and Critical Infrastructure Security: https://mccraryinstitute.com

Guest Bios

David Colberg is an advisor to RSA and has led the development of the conference's government and policy programming for over a decade. He helped launch the International Cybersecurity Forum at RSAC and plays a key role in building connections between public and private sector leaders. Katherine Hennessey, Matt Hayden, Alison King, and Bob Kolasky are Senior Fellows at the McCrary Institute, each bringing deep expertise from across government and industry in cyber strategy, national security, and public-private collaboration.

Live from RSAC 2025: Cyber Threats, Red Lines, and the China Challenge with Rob Joyce Apr 30, 2025

Show notes

On this episode of Cyber Focus, host Frank Cilluffo sits down with Rob Joyce, former NSA Cybersecurity Director and longtime leader in national cyber operations, to unpack some of the most pressing cybersecurity threats facing the United States today. Recorded live at RSA, the discussion ranges from Chinese pre-positioning in critical infrastructure to the blurred lines between espionage and cyber warfare. Joyce lays out a three-pronged framework for national cyber strategy, reflects on lessons from the counterterrorism playbook, and warns about the shifting attack surface—from endpoints to network infrastructure and cloud identity. The conversation closes with a call for better coordination, clearer definitions, and a whole-of-nation approach to impose real cost on adversaries.

Main Topics Covered

AI's emergence as both opportunity and attack surface
China's Volt Typhoon campaign and the need for deterrence
Offensive cyber operations, NSPM-13, and defining "defend forward"
Counterterrorism lessons applied to cyber strategy
Supply chain risks and the influence of foreign-controlled software
The shift in attack surface toward identity, cloud, and network infrastructure

Key Quotes

"If China were running around and strapping Semtex to bridges, we wouldn't tolerate that. But they're strapping digital Semtex to our energy grid, to our pipelines, to our airlines. And we've got to stop that." — Rob Joyce

"Those who use AI will outperform those who don't. Period." — Rob Joyce

"The attackers are now moving to the network devices and into the cloud, taking identity and just going up into your authenticated cloud." — Rob Joyce

"This isn't just a cyber issue, it's a China issue, it's a Russia issue, it's a Iran issue, it's a DPRK issue. So you can't just look at cyber means in itself." — Rob Joyce

"If [Chinese spies] had broken into an office and stolen papers, we would have done diplomatic expulsions from their embassy… Why don't we…reduce the footprint of their embassy and consulate in the US because they're not behaving in a normative fashion. Those are the tools that are outside the cyber toolbox that we're not using. — Rob Joyce

Relevant Links and Resources:

NSA Cybersecurity Directorate https://www.nsa.gov/what-we-do/cybersecurity/

Cybersecurity and Infrastructure Security Agency (CISA) https://www.cisa.gov/

Volt Typhoon Advisory (NSA/FBI/CISA) https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-144a

Guest Bio:

Rob Joyce is a longtime national security and cybersecurity leader with more than 34 years of federal service. He served as Director of the NSA's Cybersecurity Directorate, Special Assistant to the President and Cybersecurity Coordinator at the White House, and Chief of Tailored Access Operations, the NSA's elite offensive cyber unit. Throughout his career, he helped shape U.S. cybersecurity strategy, led efforts to counter nation-state threats, and forged deep partnerships across government and industry.

Cyber Focus Presents: To the Point - Episode 1 - with Chris Inglis and George Barnes Apr 25, 2025

Show notes

To the Point is a new video series from the McCrary Institute for Cyber and Critical Infrastructure Security, found here at Threat Beat. Hosted by McCrary Institute Director Frank Cilluffo, the series delivers fast-moving, high-impact conversations with top national security and cybersecurity leaders. Each episode tackles big ideas with clarity and urgency — getting straight to the point.

In this inaugural episode, Frank sits down with Chris Inglis and George Barnes — both former deputy directors of the National Security Agency — for a fast-paced, high-level conversation reflecting their decades of experience at the highest levels of government. They explore which emerging technologies will have the greatest impact on national and economic security, the role of red lines and strategic ambiguity in cyber deterrence, and whether it's time to split the dual-hat leadership structure of U.S. Cyber Command and the NSA.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure

Related Podcasts

Links

Stay Connected