NSA Director asks American CEOs to prioritize cybersecurity

NSA Director Michael Rogers told a crowded room full of corporate executives Tuesday they had a role to play in strengthening the U.S.’ cybersecurity posture.

National Security Agency Director Michael Rogers told a crowded room full of corporate executives Tuesday that they play a role in strengthening the entire country’s cybersecurity posture.

“I spend a lot of talking with the private sector, as a result of the missions assigned to both U.S. Cyber Command and the NSA, and when I would talk to the C-suite, one of the things I would normally ask is: talk to me about some of the conversations you’re having with your CIO, with your CISO, talk to me about how you as a leader are setting basic expectations,” Rogers told the audience.

In a conference hosted by the Wall Street Journal, the head of America’s most powerful spy agency explained that the Sony data breach incident — widely believed to be orchestrated by hackers affiliated with North Korea — accurately showed how private organizations can work together with the U.S. government to both mitigate damages and recover from a cyberattack.

“From a cyber defensive standpoint, probably 60 to 65 percent of the total activity can be discerned as criminal,” Rogers said, “it is individuals looking to access systems for access to personal identifiable information, which they use to generate revenue, it includes stealing intellectual property.”

The NSA Director’s public appearance is the first since President-elect Donald Trump bested his Democratic challenger Hillary Clinton in what some have called the biggest upset in U.S. history. Outside press, beyond the WSJ’s own team, were not permitted into the main conference area where the talks took place to ask questions.

With a new administration on the horizon, national security experts have voiced concerns about how the NSA and larger intelligence community will function under a Trump administration. While on the campaign trail, the President-elect called into question the U.S. intelligence community’s effectiveness and at one point also said the NSA possessed copies of scandal-laden emails once written by Clinton.

It remains unclear how Trump’s White House will foster greater collaboration between the private sector and U.S. government in cyberspace, including the sharing of threat intelligence and law enforcement requests for user data. Existing collaboration is “not where we need it to be or want it to be,” Rogers summarized. 

“Clearly we’re going to have to wait and see what the future holds,” Rogers said regarding the power shift in Washington, “My concern is: I don’t want it to get to the point where it takes some significant calamity to drive us to a conclusion. We’ve got to do something different than we’re doing now. The ultimate solution in my mind is how you bring the public-private partnership forward.”

On Tuesday morning, former House intelligence committee chairman Rep. Michael Rogers announced his resignation from Trump’s national security advisory group; tasked with staffing the next administration with top security advisors. Vice President-elect Mike Pence is now leading that group. The two Rogers’ are close friends.

“Cyber doesn’t recognize these arbitrary lines we’ve drawn,” NSA’s Rogers said Tuesday. “I think it is totally unrealistic to expect the private sector to withstand the literal onslaught of activity directed against them by nation states and other actors. Likewise, I don’t think it is realistic to say, ‘Well, the government is going to do this.’ Because the challenge with the government doing it is: if you want me to defend something then I can’t do it from the outside. I can’t defend a network unless I have access to that network structure — it is like fighting with one hand tied behind your back.”

AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn

The agencies said the hackers are taking aim at Siemens S7 Series programmable logic controllers in what could be a first.

Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks

Where’s the Trump administration line on AI regulation?

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure