DNI official: Leaks won’t stop intelligence agencies' digitization

The leaks of sensitive cyber tools will not impede the intelligence community’s push to adopt cloud computing, according to a top intelligence official.

The leaks of sensitive cyber tools from U.S. spy agencies in recent years will not impede the intelligence community’s push to adopt cloud computing and other hallmarks of a digitized world, according to a top intelligence official.

“In a world that is more connected, I worry about security all the time,” Sue Gordon, principal deputy director of national intelligence, told CyberScoop, but “I’m not disproportionately worried about cloud security because I can see some real advantages to it.”

“I think what’s nice about a more connected infrastructure is the ability to monitor” networks and detect threats, Gordon said.

The U.S. intelligence community has suffered high-profile exposures of its hacking capabilities, including last year’s “Vault 7” episode, in which a former CIA employee allegedly leaked information on numerous U.S. government zero-day exploits, among other tools. In the wake of the leaks, U.S. intelligence agencies have continued to wrestle with how to take advantage of convenient networking technology while protecting their prized digital assets.

“With each one of the exposures, [we have] addressed that exposure and then tried to create an environment that is more protected,” Gordon said. Artificial intelligence, and the network visibility it provides, can help boost security, she added.

Speaking Tuesday at FedScoop’s FedTalks, Gordon reflected on the security considerations that factor into adopting cloud computing on intelligence agencies’ computer networks across the world. “Security will be the piece that is most deterministic of how far we can go” with cloud computing at the edge of networks, she said.

“Here in the intelligence community, we are living through a constant struggle between protecting information and sharing information,” Gordon said. “Because we are a worldwide business, we need the same performance wherever we are,” she added.

U.S. intelligence agencies have increasingly embraced commercial cloud computing, most notably through a landmark $600 million project with Amazon Web Services that went online in 2014.

Gus Hunt, a former CTO of the CIA and current executive at Accenture Federal Services, told CyberScoop that adopting cloud computing “significantly limits exposure to cyber risks and allows organizations to leverage cloud technology to eliminate vulnerabilities, create a more defensible barrier and enable more dynamic cybersecurity.”

‘Whole of nation’ response

Gordon spoke to CyberScoop hours after Microsoft announced that it had shut down six internet domains set up by the same group of Russian military hackers that breached Democratic Party organizations ahead of the 2016 U.S. presidential election. Gordon welcomed Microsoft’s action, saying it was evidence of the U.S. government’s progress in working with the private sector to thwart advanced hacking threats.

“You’re seeing the whole of our nation coming up with responses to something that we find intolerable, which is messing with democracy,” Gordon told CyberScoop.

“If you think about where most of the exposure is [to] our adversaries, it’s not within protected systems of the government, but outside of that” in the private sector, she said. 

FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

The remarks, to both CyberScoop and at the Billington CyberSecurity Summit, dovetail with the release of a new bureau cyber strategy.

CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

The push to designate AI as the next critical infrastructure sector

Government

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• The G7 tells industry to hurry up and prep for post-quantum encryption

• Jail time for Maine child in 764 marks turning point in federal law enforcement

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure