Speaking at #mWISE, @ncdinglis says Biden's National Cyber Strategy will "probably come out in the next month or two or three, given the processes that exist in Washington."
Inglis says the strategy will address regulation and market forces, the international dimension of cybersecurity, assigning roles and responsibilities to the right people, and "how do we actually get critical infrastructure into the right place."
Inglis says cyber defense is getting better. "Defense, in fact, looks like it's becoming the new offense — not in a provocative way, which is intending to hold others at risk, but that defense can in fact hold its own."
Ukraine exemplifies how cyber defenders are getting better at beating back attacks by working together, Inglis says.
(full quote to follow)
In Ukraine, Inglis says, “we overestimated the power of technology and underestimated the power of people, expertise, and the modality of collaboration — the way in which we apply that expertise." (cont'd)
The Ukrainians are "participating in a collective collaborative defense," Inglis says. "If you're the Russians, you have to beat not just the Ukrainians, but the Ukrainians and Microsoft and Cisco and … Mandiant, and all manner of others." (cont'd)
The Russians "find themselves having to beat many to beat one," Inglis says. "That's a new day. That's different than what we would have experienced 5, 10 years ago, when we were all defending in our stovepipes, fighting alone, being picked off one at a time."
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Not just the adrenaline rush of the heist, but also the exquisite characterization and exposition packed in alongside the main event.
I continue to be impressed by how effectively they're serving so many people and storylines.
Let’s start with Cassian. I absolutely did not expect him to kill Skeen. Yes, we’ve seen him in cold blood before, but I thought he'd bonded too much with Skeen for that.
Also didn't expect him to take his cut of the job this way, even though we knew he was a mercenary.
Skeen said Cassian was just like him, and that pretty shocking ending proved that, at least for now, he was right.
It's still hard to get used to seeing Cassian like this, but the show is doing it in a way that makes sense.
New: Cellular modems that transmit unofficial election-night results could put the midterms at risk, fueling false fraud claims or letting hackers access sensitive systems and data.
Experts say it's time to ditch modems, but election officials love them.
I found that at least 36 counties in Florida, Illinois, Iowa, Massachusetts, Michigan, and Minnesota use modems. D.C. uses them citywide. Rhode Island uses them statewide.
In Florida, 18 counties including Broward (2nd most populous) use modems.
Modems transmit results from voting machines to central computers over cell networks, creating a new way to remotely compromise election equipment.
Hackers could plant malware on voting devices or election management systems, or they could corrupt unofficial results in transit.
Speaking at an Axios event tonight, Anne Neuberger, the deputy national security adviser for cyber, suggests that industry pushback to pipeline cyber rules was partly driven by executives' lack of appreciation for the scope of the threat facing them.
(quote in next tweet)
As the Biden administration digested industry criticism, Neuberger said, they realized, “Here’s a key gap: We see the classified intelligence around threats. … Leaders in that sector need to know that as well.”
After delivering classified threat briefings for pipeline executives, “TSA … used that model of bringing in executives and briefing them with aviation and rail," Neuberger said.
Speaking at Washington Post event, NSC top cyber official Anne Neuberger says Russia may have held off from cyberattacks on Ukraine that would have burned capabilities they needed for intelligence gathering, especially as they got bogged down.
There's "a tradeoff between using accesses for intelligence collection versus attack," Neuberger said. "And it may well be that as the invasion went poorly and continued to go poorly, the priority [was placed on] intelligence collection."
Next cyber regulations from the Biden admin, per Neuberger:
1. FCC rulemaking for "emergency and public warning systems"
2. EPA rule for water sector
3. HHS rule for hospitals, followed by rules for medical "devices and broader healthcare as well"
.@RepJohnKatko is speaking at a Washington Post event this morning on cybersecurity.
"We need to do more to empower Chris Inglis as the national cyber directo," Katko says. "Inglis is the head coach. He needs to have the powers of the head coach."
@RepJohnKatko Katko on calls for more regulation: "The private sector is incentivized to work with CISA. If you get a regulatory scheme, it becomes almost like shirts and skins," where CISA and the private sector feel like they're on opposing teams.
Katko on global cyber norms: "We don't know what should be considered an act of war yet. But I think we need to decide within our team here … what is an act of war in the United States, or is any cyber attack an act of war?"