Serious Cybersecurity Podcast

EP 09: U.S. CYBER COMMAND (USCYBERCOM), AMERICA’S ELITE CYBER OPERATIONS U.S. Cyber Command (USCYBERCOM), located at Fort Meade, Maryland, is the nation’s 10th Unified Combatant Command. USCYBERCOM is responsible for directing, synchronizing, and coordinating cyberspace planning and operations in defense of the United States and its interests. As early as 1972, external consultants to the Department of Defense warned of grave dangers in terms of vulnerabilities in computers and network security. Fast forward to 1995, and then Director of the Defense Information Systems Agency (DISA) – Air Force Lt. Gen. Albert Edmonds told a gathering at the John F. Kennedy School of Government that the United States military was indeed vulnerable to remote network attacks. Aware of the growing threats, the DoD and the armed forces responded with a series of measures aimed at addressing the issue head on. Various task forces and operations were created, yet it wasn’t until then Secretary of Defense Bob Gates inquired about – and ultimately put forth – a new sub-unified command – known as U.S. Cyber Command (USCYBERCOM) on November 12, 2008, to which USCYBERCOM achieved operational status on May 1, 2010. With the launch of USCYBERCOM, the United States was ready and armed for battle in the new world of cyberwarfare. In a memo sent to the top brass of the entire United States military, Secretary Gates reinforced the importance of such unit like USCYBERCOM, noting how “Cyberspace and its associated technologies offer unprecedented opportunities to the United States and are vital to our Nation’s security…To address this risk effectively and to secure freedom of action in cyberspace, the Department of Defense requires a command that possesses the required technical capability and…must be capable of synchronizing warfighting effects across the global security environment…” And a massive data breach that occurred in 2008 within the Department of Defense highlighted the need for a unit such as USCYBERCOM. It all began when an infected flash drive was inserted into a U.S. military laptop at a base in the Middle East, whereby the flash drive’s malicious computer code then uploaded itself onto a network run by the U.S. Central Command. According to a cybersecurity report published by the DoD, it noted the following “That code spread undetected on both classified and unclassified systems, establishing what amounted to a digital beachhead, from which data could be transferred to servers under foreign control. It was a network administrator’s worst fear: a rogue program operating silently, poised to deliver operational plans into the hands of an unknown adversary.” This previously classified incident was the most significant breach of U.S. military computers ever, and it served as an important wakeup call. The Pentagon’s operation to counter the attack, known as Operation Buckshot Yankee, marked a turning point in U.S. cyber defense strategy. ACCORDING TO USCYBERCOM, THEY HAVE THREE MAIN FOCUS AREAS: (1).Defending the Department of Defense Information Network (DoDIN) (2). Providing support to combatant commanders for execution of their missions around the world, and (3). Strengthening our nation’s ability to withstand and respond to significant cyber-attacks. So, a quick note to technology gurus out there, if you’re interested in an exciting government job, USCYBERCOM is seeking the following types of professionals: Cyber security specialists, cyber operations specialists, along with Network and Database Administrators. USCYBERCOM also played a role in the 2020 presidential election. Weeks before election day – November 3, 2020 – the United Stated deployed cyber operatives to Estonia in an effort to learn more about Russia’s cyberattack measures. Because Estonia has one of the more advanced I.T. networks in Europe, it allows the United States to work side-by-side with another country who has expertise in combatting ongoing Russian cyberattacks. This exercise, just prior to America’s election, gave USCYBERCOM an opportunity to observe and learn more about Russia’s cyber techniques. According to Brig. Gen. William J. Hartman, the commander of the Cyber National Mission Force, “The ability to share that information back with our whole of government partners is a key component of the defense of the elections,” General Hartman said. Estonian officials said Russia did not attack its military networks while the American team was deployed there, from Sept. 23 to Nov. 6.” And USCYBERCOM is reaching out thousands of miles away, to Australian, one of America’ longstanding allies, in developing joint cybersecurity initiatives. Specifically, the United States and Australia have signed an agreement to jointly develop and share a virtual cyber training range as the two countries seek to strengthen their partnership in cyberspace. The bilateral agreement will enable the US Cyber Command to incorporate the Australian Defense Force’s (ADF) feedback into its simulated training domain called Persistent Cyber Training Environment (PCTE). The PCTE, an essential component of the US military’s Joint Cyber Warfighting Architecture, allows for supporting of multiple independent cyber operations training activities simultaneously. And just in a blink of the eye, USCYBERCOM turned a young ten years old in 2020, and much has changed in the world of cybersecurity, which in turn, will require USCYBERCOM to change also – and it has. Specifically, USCYBERCOM began with the assumption that their core task was preventing attacks on the military’s networks – a defensive posture. But that has proven to be inadequate. Waiting for attacks to come the military’s way is not a method to success, which has resulted in USCYBERCOM initiating operations outside of its military networks – that’s code for saying that they’re on the offensive now, a shift from its original intent. But also, a shift that had to happen. In response to growing threats against America’s military, USCYBERCOM has the ability to “defend forward” anywhere in the world, in effect, responding to cyber threats before they reach America’s digital doorstep. That, according to Madeline Mortelmans, Senior Director for Cybersecurity Policy at the U.S. Department of Defense Additionally, she also acknowledged that USCYBERCOM has the resources and expertise to conduct both defensive and offensive cyber operations. In all reality, USCYBERCOM has no choice but to go on offense as growing threats from China, Russia, Iran, North Korea – and other nation states – are forcing America’s hand in cyberspace. While the public is well aware of recent high-profile cyber attacks from these countries – such as the Sony Picture hack in 2014 by North Korea, or the attack on Saudi-Aramco in 2012 by Iran, there’s been a plethora of other nefarious cyber-attacks not as well-known. But going on the offensive also means having highly capable, well-trained personnel ready to take USCYBERCOM’s missions. And that’s a big challenge for USCYBERCOM – and many other federal agencies – finding talented cyberwarriors ready to serve their country. > According to the NSA, “Our greatest challenge—also our greatest opportunity—is recruiting, training, and retaining a world-class force”. As these countries – and others – see it, they see their cyber capabilities as a way to level the playing in field in terms of offensive weaponry in today’s digital world. If they are going to continue to be denied nuclear weapons – as is America’s firm stance regarding North Korea and Iran – then why not turn to cyber? That’s exactly what countries are doing, and it’s exactly why USCYBERCOM is going on offense in recent years, and will continue to do so. To learn more about cybersecurity and how to protect your organization, visit charlesdenyer.com today and get access to a wide range of world-class resources on all things cyber. Additionally, my companies offer comprehensive cybersecurity, data privacy, and regulatory compliance services & solutions for businesses all across the globe. Book a call with me today at charlesdenyer.com/contact [https://charlesdenyer.com/contact/] and let’s discuss your needs. The post EP 09: U.S. Cyber Command (USCYBERCOM), America’s Elite Cyber Operations [https://charlesdenyer.com/serious-cybersecurity-podcast/ep-09-u-s-cyber-command-uscybercom-americas-elite-cyber-operations/] appeared first on Charles Denyer [https://charlesdenyer.com].

EP 08: THE TWENTY-ONE BIGGEST CYBERSECURITY THREATS, TRENDS, PREDICTIONS FOR 2021 – #5. RANSOMWARE ON THE RISE Ransomware is a type of malware that prevents or limits users from accessing their system, either by locking the system’s screen or by locking the users’ files unless a ransom is paid. Ransomware variants have been employed for several years, with the goal of extorting money from victims by displaying an on-screen alert. Typically, these alerts state that the user’s systems have been locked or that the user’s files have been encrypted. Users are then told that unless a ransom is paid, access will be denied. The ransom demanded from individuals varies greatly, from as a little as a few hundred dollars to as much as hundreds of thousands of dollars. And ransomware attacks are growing more common with each passing day. Just ask City Hall in Atlanta, GA how damaging ransomware attacks can be. The City of Atlanta spent millions fighting a 2018 ransomware attack that was now believed to be perpetrated by two Iranians thousands of miles away. According to industry experts, businesses in 2021 will fall victim to a ransomware attack every 11 seconds. Additionally, it is estimated that the cost of ransomware to businesses will be more than $20 billion in 2021. Don’t want to become another ransomware statistic? Then make sure you’re undertaking the following I.T. best practices: 1. Back up your Data: This is the most obvious – and most critically important measure – any organization should be undertaking. As bad as a ransomware attack can be, not all is lost if you have a regimented backup system of critical files. I recommend redundancy in backups – specifically – a local backup of files, along with a secondary backup of files, such as backing up in the cloud. All three of the major cloud players – Amazon AWS, Microsoft Azure, and Google GCP – all offer long-term storage services that are relatively inexpensive. 2. Perform Annual Security Awareness Training: While organizations spend untold sums of money on industry leading and next-generation security tools and solutions, they often fail to invest in security awareness training. After all, the best security tools are essentially worthless without trained, knowledgeable, and competent employees who are aware of emerging security issues and threats. There are a number of high-quality – and cost-effective – security awareness training solutions online. My two favorite are ESET and WEBROOT, so check them out today. In terms of ROI when it comes to protecting your organization, nothing beats out security awareness training. The more knowledgeable a user is about today’s growing cybersecurity threats, the safer your organization will be. 3. Think Before you Click!: Ransomware can enter into an environment in any number of ways, but often, it’s a click of a link that the trouble begins. Word to the wise – think before you click. More specifically, think twice about emails, links, and attachments from unknown or suspicious sources. I’ve personally seen a number of “too good to be true” emails come my way. From a free cruise to the Bahamas to a guaranteed loan up to $50,000, and many more, these type of solicitations may very well be nothing more than overzealous marketers, but they may also be ransomware attacks. Don’t take chances on emails, links, and attachments that you’re unsure of. 4. Patch your Information Systems: One of the most fundamentally important – yet often ignored measures – is undertaking regular security updates and patching to critical systems. Security and patching should be an “across the board” measure, meaning such initiatives need to be applied to the network and infrastructure, to production servers, to end-user workstations – essentially all the computing systems that could be affected my ransomware. High-profile reaches in recent years were often the result of security patches not being applied to information systems. What organizations need are clearly defined security and patch management policies, procedures, and processes. 5. Protect your Network with an IDS: An IDS, technically known as an “Intrusion Detection System” helps in alerting of suspicious network traffic and related activity. One properly fined-tuned by an experienced network engineer, and IDS becomes an essential element of an organization’s information security framework. 6. Whitelist Applications: Applications that are not allowed on your network need to be blocked – blacklisted. Similarly, applications that are allowed – those trusted – are to be whitelisted. The concept is relatively straightforward, unfortunately, many organizations fail to employ such basic measures. Whitelisting – and/or blacklisting – is a good practice, so make sure your organization is doing it. 7. Employ Role Based Access Control: Not every employees needs access to every information system, not even close. That’s why organizations need to employ the well-known concept of Role Based Access Control, simply known as RBAC. In the world of RBAC, users are only given the minimum and necessary access and permissions to systems for which they need to perform their job functions, and nothing more. 8. Separate Networks: It’s probably not a good idea in anything in life to put all your eggs in one basket, as they old saying goes. This is especially true when it comes to information security. Information systems should be logically and/or physically siloed out into buckets for ensuring proper isolation from one environment to the next. After all, an attack against a flat network – where everything is behind one main network that has no segregation – could effectively knock out your entire I.T. environment. Separate your network as best you can as this helps protect your network in the event of an attack. 9. Perform Vulnerability Scans Regularly: Scanning both internal and external facing networks – known as vulnerability scanning – is essential for identifying critical security gaps and vulnerabilities. There are dozens of high-quality providers offering cost-effective vulnerability scanning tools, such as NESSUS TENABLE and INRUDERO.IO 10. Conduct an Annual Penetration Test: It’s a good idea to perform a penetration test annually – or at least after significant changes to an environment – as pen testing, in my opinion, is arguably the single best indicator how secure – or how vulnerable – an organization’s network is. When performed by capable personnel, a pen test provides very meaningful evidence regarding the overall security of one’s I.T. environment. Many of today’s regulatory compliance mandates – PCI DSS, SOC audits, and more – require a pen test, regardless, every – and I mean every business – should perform an annual penetration test. 11. Monitor Who Has Access to your Environment: Access control is not just about internal employees, it’s about who on the outside can and does have access. Consultants, contractors, managed security services providers – they all are given access to your environment, and that’s where the problem begins. It’s not that these individuals or companies are malicious in nature, the bigger problem is that such access rights go unchecked, often left open and available long after somebody doesn’t need it. Hackers can often find these windows of opportunities, resulting in breaches. 12. Put in place a Comprehensive Telecommuting/Remote Work Policy: Everyone is remote working these days – and it’s not a fad – so companies need to have in place comprehensive policies and procedures that outline telecommuting and remote work practices. A good starting point is to begin by developing a telecommuting policy, one that covers best practices in terms of systems that can be accessed, the types of access used for secure connections, and much more. 13. Prohibit Removable Media Devices: Did you know that one the biggest data breaches ever at the Department of Defense happened years ago when unsuspecting DoD personnel inserted USB/thumb drives loaded with malicious software onto the government’s military network? It took the DoD years to recover from the breach, but as a business, you don’t have years to recover from an attack, or could you ever. Bottom line – ditch the removable media devices and don’t allow them – EVER – on your network. 14. Watch Where You Surf: Safe websites – those that you frequent regularly – can pose a risk in terms of ransomware and other dangerous malware finding its way onto your computer, and ultimately, your network. What you need to be careful of are websites that offer enticing offers – and more specifically – websites that you’ve never heard of before. One of the most common ways that malware can be spread are through websites with poisoned advertisements – a well-known concept known as Malvertizing. Specifically, Malvertising is the use of online advertising to spread malware, which typically involves injecting malicious or malware-laden advertisements into legitimate online advertising networks and webpages. To learn more about cybersecurity and how to protect your organization, visit charlesdenyer.com today and get access to a wide range of world-class resources on all things cyber. Additionally, my companies offer comprehensive cybersecurity, data privacy, and regulatory compliance services & solutions for businesses all across the globe. Book a call with me today at charlesdenyer.com/contact [https://charlesdenyer.com/contact/] and let’s discuss your needs. The post EP 08: The Twenty-One Biggest Cybersecurity Threats, Trends, Predictions for 2021 – #5. Ransomware on the Rise [https://charlesdenyer.com/serious-cybersecurity-podcast/ep-08-the-twenty-one-biggest-cybersecurity-threats-trends-predictions-for-2021-5-ransomware-on-the-rise/] appeared first on Charles Denyer [https://charlesdenyer.com].

EP 07: THE TWENTY-ONE BIGGEST CYBERSECURITY THREATS, TRENDS, PREDICTIONS FOR 2021 – #4. CYBERCRIME EXPANDS What technically is cybercrime? Well, not to get all wrapped up in a long-winded definition, cybercrime is essentially criminal activity that either targets or uses a computer, a computer network or a networked device. The vast majority, but not all, of cybercrime is committed by cybercriminals or hackers seeking to make a financial profit. And cybercrime can be carried out by both individuals and/or organizations. Some cybercriminals are very well-organized and sophisticated, use advanced techniques and are highly technically skilled. Others are novice hackers that probably barely know how to connect to the Internet (now that’s a scary thought!). There’s no end in sight with cybercrime. It’s simply going to expand – rapidly and aggressively – costing the global economy a staggering $6 Trillion annually by 2021. “DDoS attacks, ransomware, and an increase in zero-day exploits are contributing to last year’s prediction becoming a reality,” according to IT businessman and celebrity Robert Herjavec, more commonly known as a Shark on ABC’s Shark Tank. Furthermore, according to Herjavec, “It’s concerning that all of the hype around cybercrime – the headlines, the breach notices etc. – makes us complacent. The risk is very real and we can’t allow ourselves to be lulled into a sense of inevitability. We all have a role to play in how we protect our businesses from the accelerating threat of cybercrime.” And here are some of the most common forms of cybercrime: * Email and internet fraud. * Identity fraud (where personal information is stolen and used). * Theft of financial or credit card payment information. * Theft and sale of corporate data. * Cyberextortion (demanding money or an attack will be undertaken). * Ransomware attacks (which is essentially a type of cyberextortion). * Cryptojacking (where hackers mine cryptocurrency using resources they do not own). * Cyberespionage (where hackers access government or company data). So, let’s take a look at very disturbing statistics on cybercrime: An attack happens every 39 seconds. That, according to a study conducted by at the University of Maryland. The study is one of the first to actually quantify the near-constant rate of hacker attacks of computers with Internet access. Cyber Attacks are common. How common? According to a recent study, approximately 78 percent of organization throughout the U.S. have experienced a cyber-attack in the past year. Cybercrime is Rampant for Individuals. Roughly in in four Americans say that they or someone in their household has been a victim of cybercrime in the past year. Phishing Scams are Everywhere. According to a recent Federal Trade Commission (FTC) report, close to $2 Billion was lost in a recent year for consumers. That number actually seems low – and it is – because not everyone reports fraud, and that’s for a number of reasons. Perhaps they just ignore it. Perhaps they’re too embarrassed to report it. Who knows, but what we do know is that fraud reports are vastly understated in terms of occurrences and money lost. So, what really is phishing? Phishing is a form of social engineering — phishers essentially pose as a trusted organization, then hope to trick you into providing valuable information. Phishing attacks are showing no signs of slowing down, but, if you’re careful, you can avoid falling victim to them. Remember something very important, your bank or credit card provider will never ask you to provide account information online. When emails ask for this information, that’s the first sign that this is probably a scam. The vast majority of phishing scams are sent by email – after all, email is one of society’s main forms of communication Additionally, these scams are rampant, and cybercriminals are getting very good in terms of phishing scams looking authentic. Email phishing scams are essentially designed to look like they originate from a legitimate source, such as your bank, PayPal, Amazon customer support, you name it. I won’t bore you with the details of all the technical jargon regarding the different types and classifications of email phishing scams, but what’s you do need to be aware of are some of the most common examples of these scams, such as the following: * Your account is about to be suspended or deactivated for any number of reasons. * We need your bank account credentials to confirm a recent transaction. * We need your social security number and date of birth to confirm your identity Remember this, if it sounds suspicious, it probably is. To be on the look for phishing campaigns, ask yourself these following questions when an email comes your way that you’re not sure of: 1. Does the URL, the actual web address (if it is provided in the email), look correct? 2. Are there any grammatical errors and typos in the message? 3. Does the message seem overly aggressive and urgent? 4. Have you ever had a message from this organization before in terms of the subject matter and request? > If it looks suspicious, don’t click on any link or download any attachment! Predators are on the Prowl Online: Here is a scenario that plays out tens of millions of times each day in the United States; Your child comes home from school and goes up to his/her bedroom, closes the door and goes online. Who is he or she engaging with online? It’s one of the biggest concerns that parents have when their children go online. The biggest fear of all? Are they unknowingly engaging with sexual predators? According to FBI, “online predators are everywhere online,” and are working hard to engage children online. Predators aren’t scary looking and don’t stand out. They look like you or me or anyone down the street. They are “mostly male, although we are seeing an alarming trend of female predators. Male predators are often married with children. A professional, upstanding in the community but leading a deviant lifestyle through the Internet.” The costs are enormous: How much is cybercrime costing the global economy? It’s hard to put an exact number on it, but it’s in the hundreds of billions, according to most experts. According to a recent estimate published by the White House Council of Economic Advisors, the U.S. economy is losing roughly $100 billion a year to malicious cyber activity – yes, I said BILLIONS! The stark reality about cybercrime in 2021 – and for the foreseeable future – is clear; it’s here to stay, will only increase over time, and the hackers – and their attack methods – will become more brazen and sophisticated at every click of the mouse. Your best defense? Begin implementing a rock-solid cybersecurity program, and now! According to most security experts, adopting a comprehensive, well though-out cybersecurity program yields benefits that far exceed such costs. And to be clear, such a program simply can’t be developed overnight, but when complete, organizations should see a true change in terms of overall security posture. You’ve got to start somewhere, so start developing your every own customized cybersecurity program today. To learn more about cybersecurity and how to protect your organization, visit charlesdenyer.com today and get access to a wide range of world-class resources on all things cyber. Additionally, my companies offer comprehensive cybersecurity, data privacy, and regulatory compliance services & solutions for businesses all across the globe. Book a call with me today at charlesdenyer.com/contact [https://charlesdenyer.com/contact/] and let’s discuss your needs. The post EP 07: The Twenty-One Biggest Cybersecurity Threats, Trends, Predictions for 2021 – #4. Cybercrime Expands [https://charlesdenyer.com/serious-cybersecurity-podcast/ep-07/] appeared first on Charles Denyer [https://charlesdenyer.com].

EP 06: CHINA’S RELENTLESS WAR OF CYBER ESPIONAGE & CYBER ATTACKS AGAINST THE UNITED STATES – PART III China seeks a methodical, deliberate, and calculated approach to cyberwarfare against the United States. Instead of making front page news with likes of the Sony attacks and WannaCry ransomware attacks like North Korea, the China are the “silent dragon”, pushing forth with a plan to seamlessly infiltrate America’s economic engine by any number of means. According to security expert Kevin Townsend, “China is conducting a low and slow cyberwar, attempting to stay under the radar of recognition in the same way that individual hackers use low and slow techniques to remain hidden. If this analysis of the long-term goal of China is correct, then the threat from Chinese cyber operations is more dangerous and insidious than commonly thought. The policy is not one of direct confrontation but more designed to slowly maneuver the global economy until dominance shifts from the U.S. to China.” Further evidence of China’s aggressive tactics against the United States are highlighted in a recent report (2018) report from the National Counterintelligence and Security Center. Titled, “Foreign Economic Espionage in Cyberspace,” the report offers a scathing indictment of China’s nefarious activities: “China has expansive efforts in place to acquire U.S. technology to include sensitive trade secrets and proprietary information. It continues to use cyber espionage to support its strategic development goals—science and technology advancement, military modernization, and economic policy objectives. China’s cyberspace operations are part of a complex, multipronged technology development strategy that uses licit and illicit methods to achieve its goals. Chinese companies and individuals often acquire U.S. technology for commercial and scientific purposes. At the same time, the Chinese government seeks to enhance its collection of U.S. technology by enlisting the support of a broad range of actors spread throughout its government and industrial base.” The report’s most damming statement; “We believe that China will continue to be a threat to U.S. proprietary technology and intellectual property through cyber-enabled means or other methods. If this threat is not addressed, it could erode America’s long-term competitive economic advantage.” Shell companies. Cyber espionage. Attacks on America’s critical infrastructure. Aggressive tactics on the world stage. China is flexing its muscles – make no mistake – a serious concern for America. AVOIDING DIRECT CONFLICT As of now – and this may change – China’s intent is not to provoke direct conflict with the United States, rather, to observe, survey, and gain access to America’s technologies for helping China compete against the West. No question, China wants to dominate the world in almost every imaginable way – economically, militarily, socially – yet they’re playing the game with a certain element of elusiveness. At a Senate Judiciary Committee, assistant attorney general John Demers noted the following regarding the Chinese, “The playbook is simple — rob, replicate and replace. Rob the American company of its intellectual property. Replicate the technology. And replace the American company in the Chinese market and one day in the global market.” Almost every military, economic, and cybersecurity expert agrees that China is America’s biggest long-term strategic threat. China wants to be what the United States has been for the past century – the world’s leading superpower, and it will use every available resource it has to achieve this lofty goal. Its military is growing, its economy is modernizing, and its technology capabilities are rapidly improving. China is on the move and the United States should be very concerned in terms of its long-term impact. China’s defense spending is second only to the United States. It’s built and launched its first aircraft carrier. It’s developing advanced defense systems. It’s also establishing overseas military bases. Chinese President Xi Jinping has grand ambitions for his military, such as a pledge to fully complete the modernization of China’s armed forces by 2035, and by 2050, he wants a military in place capable of winning wars all throughout the world. Huang Xueying, a member of the Chinese People’s Political Consultative Conference confidently stated how “We [China] are now more focused on boosting indigenous research and development capabilities in all possible ways, especially precision…”. That’s because in the no-so-distant past, China relied heavily on foreign technology, and when it couldn’t get it, it would simply try and copy it as best as possible. The Chinese are now pulling away from being an importer of other technologies, instead, pushing hard to design, develop, manufacture, and put to use their own intellectual property. It’s based on national pride, and also a sounding to the world that China has arrived and is ready to dominate – at least in their eyes. > And according to then Vice President Mike Pence, “China wants nothing less than to push the United States of America from the Western Pacific and attempt to prevent us from coming to the aid of our allies”. Muddying the waters even more between the United States and China is the ongoing trade wars that have erupted in recent years. With the election of Donald Trump in 2016, the White House has become fixated on slapping China with a barrage of tariffs – and to no surprise – China retaliating back with their own financial muscle. The back and forth tariffs and tough-talk seems to have no real end in sight, and while scores of studies have been published both embracing and criticizing the Trump’s tough stance on trade with China, some experts worry about that the real issue is being overshadowed – China’s growing cyber-espionage measures. > Perhaps the most ominous reflection regarding China came from FBI Director Wray, who in 2018 stated that “China’s goal, simply put, is to replace the U.S. as the world’s largest global superpower.” Trade wars. Cyber wars. The real battle for America in the new millennium will be with China. To learn more about cybersecurity and how to protect your organization, visit charlesdenyer.com today and get access to a wide range of world-class resources on all things cyber. Additionally, my companies offer comprehensive cybersecurity, data privacy, and regulatory compliance services & solutions for businesses all across the globe. Book a call with me today at charlesdenyer.com/contact [https://charlesdenyer.com/contact/] and let’s discuss your needs. The post EP 06: China’s Relentless War of Cyber Espionage & Cyber Attacks against the United States – Part III [https://charlesdenyer.com/serious-cybersecurity-podcast/ep-06-chinas-relentless-war-of-cyber-espionage-cyber-attacks-against-the-united-states-part-iii/] appeared first on Charles Denyer [https://charlesdenyer.com].

EP 05: CHINA’S RELENTLESS WAR OF CYBER ESPIONAGE & CYBER ATTACKS AGAINST THE UNITED STATES – PART II What’s on China’s wish list when it comes to nation state attacks? Almost anything, the experts say. Anything that can disrupt our economic way of life. Anything that can give the Chinese an upper hand over the Unites States. In late January, 2019, the United States Justice Department announced criminal charges against Huawei Technologies, the largest communications equipment manufacturer in the world. Included in the litany of charges in the court filings were bank and wire fraud, violating U.S. sanctions on Iran, along with conspiring to obstruct justice relating to the actual investigation. FBI Director Christopher A. Wray noted how “firms like Huawei “pose a dual threat to both our economic and national security, and the magnitude of these charges make clear just how seriously the FBI takes this threat.” > Wray also stated how China is trying to “to get secret information about our trade, our ideas, and innovations…” using “…an expanding set of unconventional methods each time to achieve their goals.” Wray warned that the threat of cyber espionage from China “affects companies in all regions and in all sectors of the US economy.” Authorities also unsealed a separate 10-count indictment in Washington state, charging two affiliates — Huawei Device Co. and Huawei Device USA — with conspiring to steal trade secrets from T-Mobile regarding a phone-testing robot. According Annette Hayes, first assistant U.S. attorney for the Western District of Washington. “Huawei clearly knew it was part of an organized effort to steal technology…This is part of Huawei’s M.O.” In the summer of 2020, Wray was on the offensive again, unleashing a blistering attack on the Chinese, arguing that their cybersecurity attacks amount to one of the largest transfers of wealth in human history.” Said Wray during an address at the Hudson Institute, “The stakes could not be higher, and the potential economic harm to American businesses and the economy as a whole almost defies calculation.” When asked if the United States had any idea of the financial damage incurred on America’s economy due to Chinese Cybersecurity attacks, Wray said he didn’t know of an exact number, but added that “every figure I’ve seen is breathtaking.” Wray also added that “To achieve its goals and surpass America, China recognizes it needs to make leaps in cutting edge technology, but the sad fact is that instead of engaging in the hard slog of innovation, China often steals American intellectual property and then uses it to compete against the very American companies it victimizes, in effect, cheating twice.” A THIRST FOR GLOBAL POWER AND DOMINANCE So, how did the world’s most populous country (1.4 billion) become such a force in cyberterrorism? For starters, more than half of China’s population is online, so that’s quite a few hackers to choose from when the government goes looking for the best and brightest. And China has been launching cyber-attacks for the last two decades, with great success. As far back as 1999, the Chinese government was busy hitting foreign websites with a series of Denial of Service (DoS) attacks. But that was child’s play compared to China’s current cyberterrorism climate – state sponsored, covert cyber espionage. Over the years, China has been able to steal highly sensitive source code from Google, break into government databases, and much more. Even more alarming was a report from the nonprofit Institute for Critical Infrastructure Technology describing how China’s espionage essentially supports the country’s 13th Five-Year Plan for the 2016 to 2020 period, which calls for technology innovations and socioeconomic reforms. China’s goal? An “innovative, coordinated, green, open and inclusive growth.” Even more disturbing from the report is the charge that most of the technology needed to make China’s plan a reality will come from theft of trade secrets from companies in other countries. According to Michael Fuchs, senior fellow at the Center for American Progress, a think tank. “I think it is very fair to say that China sees this cyber espionage for economic purposes as a necessary component of its national strategy to grow economically and to become a more powerful country, and that it is not going to stop — at least not with the current set of pressure that is being exerted by the U.S. and others.” China shows no slowing down with its extensive list of cyberterrorism and cyberespionage measures. It continues to attack America’s critical infrastructure, going after aerospace, technology, and much more. Though there is not an exact number on the financial damage inflicted on the United States from China’s cyber-attacks, an independent commission recently reported the costs to be as high as $300 billion, with approximately 50 to 80 percent of the attacks coming from China. America’s response to the growing cyber threats from China – and other nation-state cyber attackers – has to be multi-faceted, and must include collaboration with the U.S. government and the private sector. A recently issued United States Department of Defense Cyber Strategy noted that “we must ensure the U.S. military’s ability to fight and win wars in any domain, including cyberspace. This is a foundational requirement for U.S. national security and a key to ensuring that we deter aggression, including cyber-attacks that constitute a use of force, against the United States, our allies, and our partners.” A HISTORY OF CYBERATTACKS THAT KEEPS GROWING Make no mistake, China has an army of hacker’s intent on attacking the United States with sophisticated methods in the ever-escalating cyber war. Some of the more recent attacks tied to China include the following: A Chinese national by the name of Lizhong Fan who worked for an Arizona counterterrorism center reportedly stole a massive amount of sensitive American security information and then suddenly disappeared. Fan was hired by the Arizona Counter Terrorism Information Center in 2007, subsequently given access to large amounts of data – such as Arizona’s driver’s licenses list, police databases, and possible intelligence information. Fan walked out of the building one day, never to return, but took with him a number of laptops and hard drives. Not surprising, the Chinese have vehemently denied any of the charges levied against them. And a Shanghai-based group of hackers based in Shanghai with reported ties to the People’s Liberation Army in China had, in recent years, undertaken dozens of cyber-attacks on U.S. companies, such as Coca-Cola, Lockheed Martin, and others. Embassy officials have once again denied that China’s involvement with thy cyber-attacks, stating such allegations were “unprofessional.” William Carter, deputy director of the Technology Policy Program at the Center for Strategic and International Studies (CSIS), views the professionalization of China’s cyber capabilities as another way to delegitimize the United States. Specifically, not only is China seeking to gain influence in Asia, it desperately seeks to raise its standing in the international arena for all things related to cyber. In its push toward professionalization, China is therefore consolidating its private-sector capabilities with its military intelligence services, effectively focusing on long-term strategic goals, rather than disruptive attacks that are the norm for countries like Russia, North Korea, and Iran. China wants to have its cake and eat it too. They want to be seen as good guys, but also a country with formidable cyberwarfare skills that can be unleashed at a moment’s notice. To learn more about cybersecurity and how to protect your organization, visit charlesdenyer.com today and get access to a wide range of world-class resources on all things cyber. Additionally, my companies offer comprehensive cybersecurity, data privacy, and regulatory compliance services & solutions for businesses all across the globe. Book a call with me today at charlesdenyer.com/contact [https://charlesdenyer.com/contact/] and let’s discuss your needs. The post EP 05: China’s Relentless War of Cyber Espionage & Cyber Attacks against the United States – Part II [https://charlesdenyer.com/serious-cybersecurity-podcast/ep-05-chinas-relentless-war-of-cyber-espionage-cyber-attacks-against-the-united-states-part-ii/] appeared first on Charles Denyer [https://charlesdenyer.com].