{"id":11485,"date":"2018-02-14T10:45:11","date_gmt":"2018-02-14T18:45:11","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/02\/14\/news-5256\/"},"modified":"2018-02-14T10:45:11","modified_gmt":"2018-02-14T18:45:11","slug":"news-5256","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/02\/14\/news-5256\/","title":{"rendered":"2018 Worldwide Threats Briefing: 5 Takeaways, From Russia to China"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5a8339ca7b7bd44d86b87f8f\/master\/pass\/WorldwideThreatsHearing-RTX4WDY9.jpg\"\/><\/p>\n<p><strong>Credit to Author: Wired Staff| Date: Tue, 13 Feb 2018 20:56:30 +0000<\/strong><\/p>\n<p><span class=\"lede\">On Tuesday, the <\/span>heads of the NSA, CIA, FBI, and ODNI\u2014America&#x27;s intelligence community brain trust\u2014gathered before members of the Senate Select Committee on Intelligence to discuss various worldwide threats. And while most of the topics were familiar, the hearing also included a few revelatory moments, insights into fears that were either detailed or confirmed.<\/p>\n<p>The following doesn&#x27;t comprise every single morsel shared by NSA chief Mike Rogers, CIA head Mike Pompeo, <a href=\"https:\/\/www.wired.com\/2017\/06\/christopher-wray-fbi-director\/\">FBI director Christopher Wray<\/a>, and Director of National Intelligence Dan Coats on Tuesday. But it does take a closer look at what keeps US intelligence agencies up at night\u2014and what they&#x27;re doing about it.<\/p>\n<p class=\"paywall\">Coats made clear from the beginning of the hearing that the chaos Russia created during the 2016 election was only the beginning. \u201cPersistent and disruptive cyber operations will continue against the United States and our European allies, using elections as opportunities to undermine democracy, sew discord, and undermine our values,\u201d DNI Coats said during his opening remarks.<\/p>\n<p class=\"paywall\">&quot;There should be no doubt that Russia perceived its past efforts as successful, and views the 2018 US midterm elections as a potential target for Russian influence operations.&quot;<\/p>\n<p>&#x27;There should be no doubt that Russia perceived its past efforts as successful.&#x27;<\/p>\n<p name=\"inset-left\" class=\"inset-left-component__el\">Dan Coats, Director of National Intelligence<\/p>\n<p class=\"paywall\">His intelligence community colleagues, and members of Congress, clearly agreed with that assessment. It&#x27;s less clear, though, what the country has actually done to mitigate those threats. Asked by senator Kamala Harris whether the intelligence community has any written policy laying out whose responsibility it is to handle the abuse of social media by foreign adversaries, Coats said he was unsure, and would need to get back to her.<\/p>\n<p class=\"paywall\">Both Coats and Wray agreed social media companies have been increasingly cooperative with intelligence, but senator Warner expressed skepticism that companies like Facebook and Twitter can adequately police themselves. \u201cI think the companies are slow to recognize this threat,\u201d Warner said. \u201cI don\u2019t believe we have a full plan.\u201d<\/p>\n<p class=\"paywall\">Despite the unanimous agreement by the intelligence officials that Russian interference would continue to be a threat in the 2018 and 2020 elections, senators repeatedly noted that President Trump has made no such acknowledgement. Instead, Trump has often conflated the issues of Russian interference with the investigation into his own campaign\u2019s possible coordination with Russian actors.<\/p>\n<p class=\"paywall\">\u201cI wish you could persuade the president as a matter of national security to separate these two issues,\u201d said senator Angus King from Maine. \u201cWe cannot confront this threat, which is a serious one, with a whole of government response when the leader of the government continues to deny that it exists.\u201d<\/p>\n<p class=\"paywall\">Although not included in his oral testimony, Coats also provided a written \u201c<a href=\"https:\/\/www.dni.gov\/files\/documents\/Newsroom\/Testimonies\/2018-ATA%E2%80%94Unclassified-SSCI.pdf\" target=\"_blank\">Global Threat Assessment<\/a>\u201d to Congress. In it, the intelligence community ticks off expected digital threats from North Korean theft to Chinese hacking of defense contractors to Iranian disruptive attacks against Saudi Arabia and Israel.<\/p>\n<p>The document is clear that Russia has been laying the groundwork for similar attacks on American infrastructure, and isn\u2019t stopping now.<\/p>\n<p class=\"paywall\">Perhaps most disturbing among those is a warning that Russia will <a href=\"https:\/\/www.wired.com\/story\/russian-hackers-attack-ukraine\/\">continue to escalate its attacks on Ukraine<\/a>, where it\u2019s been testing critical infrastructure hacking technique that have included the first-ever hacker-induced blackouts. \u201cWe expect that Russia will conduct bolder and more disruptive cyber operations during the next year, most likely using new capabilities against Ukraine,\u201d it reads. \u201cThe Russian Government is likely to build on the wide range of operations it is already conducting, including disruption of Ukrainian energy distribution networks, hack-and-leak influence operations, distributed denial-of-service attacks, and false flag operations.\u201d<\/p>\n<p class=\"paywall\">While that might sound like a faraway Ukrainian problem, the document is clear that Russia has been laying the groundwork for similar attacks on American infrastructure, and isn\u2019t stopping now. \u201cIn the next year, Russian intelligence and security services will continue to probe US and allied critical infrastructures,\u201d it reads.<\/p>\n<p class=\"paywall\">Given repeated testimony that Russia will likely attempt to meddle in the 2018 midterm elections and other upcoming democratic NATO elections around the world, some senators pressed the question of how to deter cyberattacks proactively, and how to respond if and when they occur.<\/p>\n<p class=\"paywall\">&quot;We&#x27;ve had more than a year to get our act together and address the threat posed by Russia and implement a strategy to deter further attacks,&quot; Warner said. &quot;I believe we still don&#x27;t have a comprehensive plan.&quot;<\/p>\n<p class=\"paywall\">Again, many of the senators noted the disparity between Trump&#x27;s remarks about the Russian threat and the intelligence community&#x27;s conclusions.<\/p>\n<p class=\"paywall\">&quot;Has the president directed you and your agency to take specific actions to confront and blunt Russian influence activities that are ongoing?&quot; asked senator Jack Reed of Rhode Island.<\/p>\n<p class=\"paywall\">&quot;We&#x27;re taking a lot of specific efforts to blunt Russia,&quot; Wray answered. But he added when pressed, &quot;Not as specifically directed by the President.&quot;<\/p>\n<p class=\"paywall\">Some senators also expressed frustration that President Trump did not enact sanctions Congress passed against Russia in response to 2016 election meddling. &quot;There are no repercussions,&quot; senator King said, noting that the inaction existed during the Obama Administration as well. &quot;We have no doctrine of deterrence. How are we ever going to get them to stop doing this if all we do is patch our software and try to defend ourselves?&quot;<\/p>\n<p>&#x27;It&#x27;s important that the adversary know it; it is not a requirement that the whole world know it.&#x27;<\/p>\n<p name=\"inset-left\" class=\"inset-left-component__el\">CIA Director Mike Pompeo<\/p>\n<p class=\"paywall\">But Pompeo offered a soft rebuttal, alluding to retaliatory cyberattacks or other clandestine operations. &quot;While I can\u2019t say much in this setting, I would argue that your statement that we have done nothing does not reflect the responses that, frankly, some of us at this table have engaged in and the United States government has engaged in both during and before this administration,&quot; Pompeo said. Though observers widely assume that the US participates in &quot;hacking back,&quot; it is rare to hear acknowledgement of these campaigns.<\/p>\n<p class=\"paywall\">Senator King pressed that &quot;deterrence doesn&#x27;t work unless the other side knows it.&quot; To which Pompeo replied, &quot;It&#x27;s important that the adversary know it; it is not a requirement that the whole world know it.&quot;<\/p>\n<p class=\"paywall\">Senators on both sides of the aisle showed early anxiety over China&#x27;s role in the world Tuesday. \u201cI\u2019m not sure in the 240-some-odd year history of this nation we\u2019ve ever faced an adversary to have this scale, scope, and capacity,\u201d said senator Marco Rubio of Florida.<\/p>\n<p class=\"paywall\">Both Democrat Mark Warner and Republican Tom Cotton expressed fears over the close relationship between Chinese tech companies like Huawei and the Chinese government. In particular, they expressed concerns that this technology could be used for surveillance purposes. During the hearing, Cotton asked the full panel of intelligence experts to raise their hands if they would recommend consumers use products made by Huawei or ZTE, another Chinese telecom giant. None raised their hands.<\/p>\n<p class=\"paywall\">This mounting pressure on Capitol Hill is <a href=\"https:\/\/www.wired.com\/story\/a-trade-war-with-china-could-catch-tech-in-the-crossfire\/\">already prompting changes in the private sector<\/a>. Last month, Verizon reportedly decided it would <a href=\"https:\/\/www.bloomberg.com\/news\/articles\/2018-01-30\/verizon-is-said-to-drop-plans-to-sell-phones-from-china-s-huawei\" target=\"_blank\">no longer sell<\/a> Huawei phones\u2014under pressure from the US government\u2014following AT&amp;T\u2019s decision to also pull out of a deal to sell the Chinese company\u2019s new phone.<\/p>\n<p class=\"paywall\">In a statement, a Huawei spokesperson said the company is &quot;aware of a range of U.S. government activities seemingly aimed at inhibiting Huawei&#x27;s business in the U.S. market&quot;  and that its technology &quot;poses no greater cybersecurity risk&quot; than any other vendor.<sup>1<\/sup><\/p>\n<p class=\"paywall\">Rubio\u2019s line of inquiry extended beyond business to the world of academia, asking the FBI director Christopher Wray about the \u201crisk posed to US national security by <a href=\"https:\/\/www.wired.com\/story\/david-ignatius-quantum-spy-high-tech-espionage\/\">Chinese students<\/a>, particularly those in advanced programs in science and mathematics.\u201d Wray said that the use of \u201cnon-traditional collectors\u201d of intelligence is common in academic settings.<\/p>\n<p class=\"paywall\">\u201cThey\u2019re exploiting the very open research and development environment we have, which we all revere, but they\u2019re taking advantage of it,\u201d Wray said. Even if his comments have a kernel of truth, Wray&#x27;s comments still amount to a sweeping generalization about students from China, one that could complicate an already <a href=\"https:\/\/www.wired.com\/story\/pausing-international-entrepreneur-rule-sends-jobs-to-canada\/\">fraught period in immigration policy<\/a> in America.<\/p>\n<p class=\"paywall\">Pompeo also expressed displeasure with a pair of articles last week that described how the US government attempted to negotiate with Russians in an attempt to buy back highly NSA secret documents and hacking tools obtained by an unknown group <a href=\"https:\/\/www.wired.com\/2017\/04\/major-leak-suggests-nsa-deep-middle-east-banking-system\/\">calling itself the Shadow Brokers<\/a>. In response to questions from senator Susan Collins, he called media reports from <em><a href=\"https:\/\/www.nytimes.com\/2018\/02\/09\/us\/politics\/us-cyberweapons-russia-trump.html\" target=\"_blank\">The New York Times<\/a><\/em> and <a href=\"https:\/\/theintercept.com\/2018\/02\/09\/donald-trump-russia-election-nsa\/\" target=\"_blank\">the Intercept<\/a> \u201catrocious, ridiculous, totally inaccurate.\u201d<\/p>\n<p class=\"paywall\">Pompeo flatly denied that the CIA had offered any money to Russian sources, countering the <em>Times<\/em> and Intercept accounts that those sources were offered $1 million, and received $100,000, in US government funds as an initial payment. \u201cThe Central Intelligence Agency did not provide any resources or money to these individuals who proffered government information, directly or indirectly, at any time,\u201d Pompeo said.<\/p>\n<p class=\"paywall\">But Pompeo\u2019s denial itself contained confirmations of elements of the story. He argued, for instance, that the agency hadn\u2019t sought any of the compromising information, or \u201ckompromat,\u201d about Russian collusion with Donald Trump that the Russian sources had offered unsolicited\u2014exactly as the articles stated. And he reinforced the articles\u2019 central accounts: That the US government had in fact negotiated to achieve the return of the NSA\u2019s secrets. \u201cThe information we were working to try to retrieve might well have been stolen from the US government,\u201d Pompeo said. \u201cIt was unrelated to to the issue of kompromat that appears in each of those two articles.\u201d<\/p>\n<p class=\"paywall\"><em>Andy Greenberg, Issie Lapowsky, and Lily Hay Newman contributed to this report.<\/em><\/p>\n<p class=\"paywall\"><sup>1<\/sup><em>Update: 9:12 AM ET 02\/14\/2017 This story has been updated to include comment from Huawei.<\/em><\/p>\n<p class=\"related-cne-video-component__dek\">It\u2019s 2017! It\u2019s time to start using an encrypted messaging app. Why? Using end-to-end encryption means that no one can see what you\u2019re sharing back and forth.<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/worldwide-threats-briefing-russia-election-china\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/5a8339ca7b7bd44d86b87f8f\/master\/pass\/WorldwideThreatsHearing-RTX4WDY9.jpg\"\/><\/p>\n<p><strong>Credit to Author: Wired Staff| Date: Tue, 13 Feb 2018 20:56:30 +0000<\/strong><\/p>\n<p>In a Senate hearing Tuesday, the heads of the three-letter intelligence agencies detailed their greatest concerns.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714],"class_list":["post-11485","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11485","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=11485"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/11485\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=11485"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=11485"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=11485"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}