Pentagon officials float possible NSA, Cyber Command split

The debate on the dual hat is back on.

Officials at the Department of Defense have floated a proposal in recent days that could sever the dual-hatted relationship between the National Security Agency and Cyber Command, according to a U.S. official.

The NSA, the Defense Department’s foreign signals intelligence agency, and Cyber Command, the department’s offensive cyber arm, are currently both led by Gen. Paul Nakasone in an arrangement that allows them to share resources and coordinate on priorities, such as protecting U.S. elections against foreign meddling.

A proposal to end that arrangement was circulated among Pentagon officials in recent days, according to The Wall Street Journal. DefenseOne first reported the news Saturday.

Whether Defense Department officials intend to follow through on the idea remains unclear.

Separating Cyber Command from the NSA is something lawmakers, the military and the intelligence community have mulled since the creation of Cyber Command a decade ago. Some, including Gen. Nakasone, have said they see the dual-hatted structure as a powerful partnership. Nakasone has said previously that working together allows the NSA and Cyber Command to more effectively share indicators of digital compromise and collaborate more effectively with other agencies, including the FBI, on national security matters.

Critics of the current organization say it can introduce bureaucratic red tape and that it pits espionage and military priorities against one another. While the NSA may want to maintain access to targets for surveillance, for instance, Cyber Command’s mission, at times, is to disrupt targets.

Although the prospect of separating the two has been raised on several occasions in recent years, the renewed interest in possibly separating the NSA and Cyber Command comes as the U.S. government is currently working to respond to a sweeping software supply chain attack. The proposal to reorganize Fort Meade, where Cyber Command and the NSA are co-located, also coincides with efforts to transition in a new administration.

The supply chain attack, in which suspected Russian hackers distributed malware to potentially tens of thousands of victim organizations, including a range of U.S. government agencies, is so extensive that the White House National Security Council activated an emergency response group to triage the damage in recent days. National security officials also have continued to brief President-elect Joe Biden on the extent of the damage.

In a tweet Saturday, President Trump claimed without evidence that media reports have exaggerated the size of the incident.

The notion is raising concern on Capitol Hill, in part because there are congressionally-mandated standards that the Defense Department must meet before going through with any split. The standards are in place to ostensibly ensure that a split would not reduce Cyber Command’s military effectiveness.

The chair of the House Armed Service Committee, Rep. Adam Smith, D-Wash., said in a statement Saturday he is “profoundly concerned about reports that the Department is unilaterally seeking to end the dual-hat relationship between the National Security Agency (NSA) and U.S. Cyber Command (CYBERCOM) without consulting Congress or meeting the conditions required by Law.”

Smith sent letters to Acting Secretary of Defense Christopher Miller and Chairman of the Joint Chiefs of Staff General Mark Milley earlier this week to request they not separate the NSA and Cyber Command.

Miller and Milley would need to certify the move fulfills congressionally-mandated conditions before any split could take place.

A Pentagon spokesperson declined to comment on the reported proposal.

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure