Happening now: Leaders of ODNI, CIA, NSA, DIA and FBI offer public testimony at
the Worldwide Threats Hearing before the Senate Select Committee on Intelligence -
Chairman @MarkWarner registers 'dismay' that this hearing did not happen last year - for the first time since 1994 - after then-DNI Ratcliffe refused to engage in public Q&A.
On the docket, Warner says, is how agencies have contended with COVID-19 - including vaccinating its personnel - plus cybersecurity, election security, domestic violent extremism and the Chinese Communist Party
"We also need to discuss the situation in Afghanistan," Warner says. "Any withdrawal must be conducted in a manner that is coordinated among our military, diplomatic, and intelligence partners, and in close consultation with our NATO allies"
Vice Chairman Rubio also highlights his interest in top threats from China, Russia, Iran, North Korea, global terrorism and cyber attacks - SolarWinds illustrates how easily US infrastructure can be compromised, he says
"There's no doubt the nation is weary of over 20 years of war..." Rubio says of Afghanistan, but there's a "very real" possibility that the Taliban will regain control of "substantial portions" of Afghanistan, and it's "almost certain" Al Qaeda will again enjoy a safe haven
The intelligence community that I have come to know is one that's made up of "patriotic, dedicated professionals," Rubio says (in stark contrast to Trump + allies in the previous administration frequently decrying a nefarious 'Deep State')
DNI Haines: "I want to take note of the shifting landscape we see today and its implications for our work. The trends underlying and intersecting these issues are increasing the pace, complexity, and impact of these threats in ways that require us to evolve."
DNI Haines: "We assess that the world will face more intense and cascading global challenges ranging from disease to climate change, to disruptions from new technologies and financial crises."
"... this insight compels us to broaden our definition of national security"
Haines calls China "an unparalleled priority" for the IC, as an increasingly "near-peer competitor" posing a "formidable challenge" to the US in global affairs
Moscow, Haines says, will employ tactics from cyber attacks to mercenary operations to assassinations to undermine America -- and it is "increasingly adept" at leveraging asymmetrical capabilities to do so -- but it does not want a conflict with the U.S.
Iran will seek a "permanent military presence in Syria, [to] destabilize Yemen, and threaten Israel," Haines says (but does not offer an assessment of its nuclear/enrichment ambitions)
DNI Haines says North Korea may take increasingly "aggressive and potentially destabilizing" action, could seek to resume nuclear and international ballistic missile testing
Haines cites a panoply of other threats outlined in yesterday's written report - the crippling effect of COVID on governments and systems, extreme weather events, transnational crime, global terrorism and challenges from accelerating cyber/tech.
"A final threat we are tracking," Haines says, are "anomalous health incidents that have affected a number of our personnel."
The IC is treating these incidents "very seriously," and is "committed to investigating" their source, preventing them ... and caring for those affected"
Warner burrows in on IC's existing cyber/tech capabilities - DCIA Burns tells him no less than one third of agency workforce are focused on that issue, illustrating its priority level
Rubio homes in on COVID-19 origins, saying there's "reason to believe" a lab accident is a "plausible"
Haines: IC "does not now exactly where, when, or how" COVID was transmitted initially, and continues work on 2 theories: that it emerged naturally, or that it was alab accident
DCIA Burns likewise says CIA continues to investigate COVID's origins but "Chinese leadership has not been fully forthcoming or fully transparent" in sharing information or data
FBI Director Chris Wray (one of the 3 officials here held over from the previous administration) says the bureau has "over 2,000" investigations tied to the CCP, with a new investigation opened roughly "every 10 hours"
NSA's Gen Nakasone on adversaries' ability to conduct attacks right now on critical infrastructure:
"To bluntly answer your question, our adversaries continue to get better at what they're doing"
The scope/scale/sophistication of recent attacks makes us "take notice," he says
COVID vaccination rates among natsec personnel, per testimony:
+ 86% at ODNI;
+ CIA about 80%; 100% of officers in the field have access;
+ 40-50% at DIA;
+ FBI and NSA do not offer specific percentages but suggest they are substantial
Nakasone, as he had testified before SASC, says re cyber intrusions there are "blind spots" in NSA's ability to see what's going on within the US, but tells Sen Burr he is "not seeking" bolstered authorities for either NSA or CYBERCOM
Nakasone stresses that adversaries are no longer just spearphishing or guessing passwords, but engaging in "above best practices" to target supply chain vulnerabilities and 0-day exploits
Collins takes a moment to publicly thank Burns for his efforts to address the ailments that have come to be known as Havana Syndrome affecting CIA and other personnel; Burns says again he is committed to getting officers care and getting to the bottom of cause and perpetrator
On Afghanistan - DCIA Burns says US needs to be "clear-eyed" about threat from ISIS and al Qaeda that exists. After drawdown, the government's ability "to collect and act on threats will diminish - that's a fact."
But, Burns says, CIA and partners will "retain a suite of capabilities" - some remaining in place, some to be generated - "that will help us anticipate and contest" threats that may arise
Asked about overall picture of cyber deterrence, Nakasone says "what I know our adversaries understand that's different today" is we won't be "standing on the sidelines," whether it's to confront/counter election interference or attribution. "This is our focus," he says
Sen Blunt asks a question raised repeatedly in recent weeks: "How do you assess what Putin's doing right now?"
Burns says he's learned "not to underestimate" how Putin and Russian leadership can "throw its weight around." Says it may be "signaling" to Ukrainian leadership & US
The build-up in Crimea and Donbas, Burns says, is a "serious concern" and could provide the basis now for "limited military incursions" -- something U.S. and its allies are taking "very seriously"
LTG Scott Berrier of DIA says, of Putin, "we don't know what the intent is right now" but also says he'd engage on this question more in closed session
FBI's Wray on social media fostering radicalization of DVEs: There's "all sorts of stuff" on the internet "that poses as fact which just isn’t" & "all kinds of connectivity" between like-minded individuals. Isolation from COVID increased our public susceptibility to many ills
Sasse stresses at length the bipartisan consensus he says exists that China, and specifically the long-term technological race with Beijing, is an "unparalleled" challenge and the "biggest national security threat we face"
Nakasone, again on "blind spots," explains that adversaries "understand the timeline" that it takes for a warrant to be generated & used by FBI, so have "structured their activities" to exploit that stretch of invisibility. It's something we "have to be able to address," he says
Both chairs express thanks to IC leadership and workforce to conclude the public portion of today's testimony - it continues behind closed doors later this afternoon.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
The NSA says it recently discovered "a series of critical vulnerabilities" in Microsoft Exchange and disclosed them to Microsoft, which today released a patch.
"NSA values partnership in the cybersecurity community," an NSA spokesperson said. "We are continuing the partnership by urging application of the patches immediately."
New @NSACyber Director @RGB_Lights: "Cybersecurity is national security. Network defenders now have the knowledge needed to act, but so do adversaries and malicious cyber actors. Don't give them the opportunity to exploit this vulnerability on your system."
A senior administration official said this is not a conditions-based approach, telling @margbrennan POTUS has deemed that to be "a recipe for staying in Afghanistan forever." United States will remove its forces from Afghanistan "before September 11," SAO said.
The official said the decision is also reflective of the need to address a "global threat picture as it exists today, not as it was two decades ago."
SAO: "This is not 2001; it is 2021. And in 2021, the terrorist threat that we face is real and it emanates from a number of countries, indeed a number of continents....And we have to focus on those aspects of a dispersed and distributed terrorist threat"
New: The U.S. intelligence community is warning in its Annual Threat Assessment of a “diverse array” of global threats that could further destabilize a world shaken by the effects of the COVID-19 pandemic, technological change and interstate competition:
The 27pg document contains the collective view of the country’s 18 intel agencies; it said “the potential for cascading events in an increasingly interconnected & mobile world” would create new challenges, as adversaries jockey for influence & climate change heightens instability
It said China, Russia, Iran and North Korea would seek to challenge U.S. interests in different arenas and on multiple levels, and that transnational crime, cyber attacks and terrorist plots posed continued threats. Domestic violent extremists will pose an “elevated threat.”
Deputy National Security Advisor for Cyber & Emerging Tech Anne Neuberger said at @CFR_org that the Biden administration will launch an effort to secure control systems across the country "because of the significant consequences if they fail, or if they're degraded"
Neuberger: "We picked control systems because those are the systems that control water systems, power systems, chemical systems across the US, and we're seeking to have visibility on those networks to detect anomalous cyber behavior and block anomalous cyber behavior." (cont'd)
Neuberger: "Today we cannot trust those systems, because we don't have visibility into those systems, and we need the visibility of those systems because of the significant consequences if they fail, or if they're degraded."
.@SecBlinken said the Biden-Harris administration was "exploring options" to share more resources - including vaccines - to combat COVID-19 in other countries, and that he was appointing a new official to oversee the global effort.
Blinken said the administration has had as its "main focus" getting vaccines to Americans, but "soon the US will need to step up our work and rise to the occasion worldwide."
"This pandemic won’t end at home until it ends worldwide," he said.
Blinken said the U.S. had received requests from other countries -- some with "growing desperation" -- for help. "We hear you, and I promise we're moving as fast as possible," he said.
Declassified US intel assessment of 2020 election shows Russia's foreign influence playbook a) was only marginally changed; b) was adopted selectively by other adversaries & challengers; c) will continue being used unless the cost/benefit calculus changes
The classified version of this assessment was completed and given to USG stakeholders on January 7, 2021; it draws from information made available to the IC during the Trump administration
It includes guidance on election "influence" versus "interference," two terms that had been used interchangeably and to at times confusing effect: