Trump administration wants to go on cyber offensive against China
(2024/12/16)
- Reference: 1734377411
- News link: https://www.theregister.co.uk/2024/12/16/trump_administration_china_offensive/
- Source link:
President-elect Donald Trump's team wants to go on the offensive against America's cyber adversaries, though it isn't clear how the incoming administration plans to achieve this.
Speaking to CBS News' Margaret Brennan on Face the Nation Sunday, Congressman Mike Waltz (R-FL), Trump's pick for national security advisor, [1]said that years of the US prioritizing cyber defense isn't working.
"We have been, over the years, trying to play better and better defense when it comes to cyber," Waltz said. "We need to start going on offense and start imposing, I think, higher costs and consequences to private actors and nation state actors."
[2]
Despite being specifically asked about China-linked Salt Typhoon's compromise of multiple US telecom networks and [3]snooping on US officials , Waltz called attention to Volt Typhoon, another Chinese threat actor that's been operating a botnet of compromised Cisco routers used to attack critical infrastructure. Volt Typhoon's botnet [4]resurged in late 2024 despite being [5]wiped by the FBI earlier this year, which Waltz said is "wholly unacceptable."
[6]
[7]
"We need to start changing behaviors on the other side, rather than just constantly having this kind of escalation of their offense and our defense," Waltz added, while suggesting the Trump administration may call on the private sector for support to that end.
"We've got a tremendous private sector with a lot of capability," Waltz told Brennan. "That relationship between public and private, with our tech industry, they could be doing a lot of good and helping us defend, but also making our adversaries vulnerable."
[8]
When asked what form such a response could take, like sanctions, Waltz declined to get into specifics.
"I'm not going to get ahead of everything that we're doing day one, but taking a different approach to cyber, looking at our doctrine, and starting to impose costs on the other side to get them to knock this off, is something we'll be taking a look at, I think," the Congressman said on Sunday.
A tit-for-tat between US and Chinese cyber agencies could spell chaos, though it's possible that [9]recent [10]escalations in China's activity on US networks could already be reactive.
[11]China's Volt Typhoon spies broke into emergency network of 'large' US city
[12]China again claims Volt Typhoon cyber-attack crew was invented by the US to discredit it
[13]Congress told how Chinese goons plan to incite 'societal chaos' in the US
[14]Salt Typhoon's surge extends far beyond US telcos
China [15]accused the US Central Intelligence Agency last year of conducting years of intrusions into Chinese networks and devices, dubbing the US an "Empire of Hacking" for the continued intrusions and the US tech industry's support for revolutionary movements in countries like Tunisia and Egypt. The report largely relied on older information exposed by WikiLeaks in 2017.
The US and China signed a pact in 2015 [16]pledging not to attack each other , but neither side has upheld its commitments, assuming US and Chinese allegations are accurate.
[17]
Critics might suggest US tech companies would not want to face consequences from China and other US adversaries as "payback" for playing along with the incoming government's offensive cybersecurity strategy, and The Register was unable to reach anyone for comment on the matter before publication.
What the incoming US government might do to quash cyber attacks is not known. Sanctions are likely to be met with [18]retaliation , and the Justice Department can issue all the [19]arrest warrants it wants for China's state-sponsored online attackers – it's not like Beijing is going to extradite them to appease the President-elect.
"I think we need to take a much stronger stance," Waltz said. "President Trump has indicated that as well." There remains a possibility that stance will set off a cyber arms race more serious than the one we're already engaged in. ®
Get our [20]Tech Resources
[1] https://www.cbsnews.com/news/michael-waltz-trump-national-security-adviser-face-the-nation-transcript-12-15-2024/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2024/12/09/white_house_salt_typhoon/
[4] https://www.theregister.com/2024/11/13/china_volt_typhoon_back/
[5] https://www.theregister.com/2024/01/30/fbi_china_volt/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2023/09/06/microsoft_stolen_key_analysis/
[10] https://www.theregister.com/2024/12/06/chinese_cyberspy_us_data/
[11] https://www.theregister.com/2024/02/14/volt_typhoon_emergency_network/
[12] https://www.theregister.com/2024/10/15/china_volt_typhoon_false_flag/
[13] https://www.theregister.com/2024/02/01/china_attack_warning/
[14] https://www.theregister.com/2024/11/27/salt_typhoons_us_telcos/
[15] https://www.theregister.com/2023/05/05/china_labels_us_hacking_empire/
[16] https://www.theregister.com/2015/09/25/us_china_promise_to_stop_hacking/
[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[18] https://www.theregister.com/2024/11/13/president_trump_tech/
[19] https://www.justice.gov/opa/pr/seven-hackers-associated-chinese-government-charged-computer-intrusions-targeting-perceived
[20] https://whitepapers.theregister.com/
Speaking to CBS News' Margaret Brennan on Face the Nation Sunday, Congressman Mike Waltz (R-FL), Trump's pick for national security advisor, [1]said that years of the US prioritizing cyber defense isn't working.
"We have been, over the years, trying to play better and better defense when it comes to cyber," Waltz said. "We need to start going on offense and start imposing, I think, higher costs and consequences to private actors and nation state actors."
[2]
Despite being specifically asked about China-linked Salt Typhoon's compromise of multiple US telecom networks and [3]snooping on US officials , Waltz called attention to Volt Typhoon, another Chinese threat actor that's been operating a botnet of compromised Cisco routers used to attack critical infrastructure. Volt Typhoon's botnet [4]resurged in late 2024 despite being [5]wiped by the FBI earlier this year, which Waltz said is "wholly unacceptable."
[6]
[7]
"We need to start changing behaviors on the other side, rather than just constantly having this kind of escalation of their offense and our defense," Waltz added, while suggesting the Trump administration may call on the private sector for support to that end.
"We've got a tremendous private sector with a lot of capability," Waltz told Brennan. "That relationship between public and private, with our tech industry, they could be doing a lot of good and helping us defend, but also making our adversaries vulnerable."
[8]
When asked what form such a response could take, like sanctions, Waltz declined to get into specifics.
"I'm not going to get ahead of everything that we're doing day one, but taking a different approach to cyber, looking at our doctrine, and starting to impose costs on the other side to get them to knock this off, is something we'll be taking a look at, I think," the Congressman said on Sunday.
A tit-for-tat between US and Chinese cyber agencies could spell chaos, though it's possible that [9]recent [10]escalations in China's activity on US networks could already be reactive.
[11]China's Volt Typhoon spies broke into emergency network of 'large' US city
[12]China again claims Volt Typhoon cyber-attack crew was invented by the US to discredit it
[13]Congress told how Chinese goons plan to incite 'societal chaos' in the US
[14]Salt Typhoon's surge extends far beyond US telcos
China [15]accused the US Central Intelligence Agency last year of conducting years of intrusions into Chinese networks and devices, dubbing the US an "Empire of Hacking" for the continued intrusions and the US tech industry's support for revolutionary movements in countries like Tunisia and Egypt. The report largely relied on older information exposed by WikiLeaks in 2017.
The US and China signed a pact in 2015 [16]pledging not to attack each other , but neither side has upheld its commitments, assuming US and Chinese allegations are accurate.
[17]
Critics might suggest US tech companies would not want to face consequences from China and other US adversaries as "payback" for playing along with the incoming government's offensive cybersecurity strategy, and The Register was unable to reach anyone for comment on the matter before publication.
What the incoming US government might do to quash cyber attacks is not known. Sanctions are likely to be met with [18]retaliation , and the Justice Department can issue all the [19]arrest warrants it wants for China's state-sponsored online attackers – it's not like Beijing is going to extradite them to appease the President-elect.
"I think we need to take a much stronger stance," Waltz said. "President Trump has indicated that as well." There remains a possibility that stance will set off a cyber arms race more serious than the one we're already engaged in. ®
Get our [20]Tech Resources
[1] https://www.cbsnews.com/news/michael-waltz-trump-national-security-adviser-face-the-nation-transcript-12-15-2024/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://www.theregister.com/2024/12/09/white_house_salt_typhoon/
[4] https://www.theregister.com/2024/11/13/china_volt_typhoon_back/
[5] https://www.theregister.com/2024/01/30/fbi_china_volt/
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://www.theregister.com/2023/09/06/microsoft_stolen_key_analysis/
[10] https://www.theregister.com/2024/12/06/chinese_cyberspy_us_data/
[11] https://www.theregister.com/2024/02/14/volt_typhoon_emergency_network/
[12] https://www.theregister.com/2024/10/15/china_volt_typhoon_false_flag/
[13] https://www.theregister.com/2024/02/01/china_attack_warning/
[14] https://www.theregister.com/2024/11/27/salt_typhoons_us_telcos/
[15] https://www.theregister.com/2023/05/05/china_labels_us_hacking_empire/
[16] https://www.theregister.com/2015/09/25/us_china_promise_to_stop_hacking/
[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Z2CxEXKFsntpXb-3spzdPgAAANM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[18] https://www.theregister.com/2024/11/13/president_trump_tech/
[19] https://www.justice.gov/opa/pr/seven-hackers-associated-chinese-government-charged-computer-intrusions-targeting-perceived
[20] https://whitepapers.theregister.com/
vtcodger
The US and China signed a pact in 2015 pledging not to attack each other, but neither side has upheld its commitments, assuming US and Chinese allegations are accurate.
And who among us would doubt the word of US and/or Chinese intelligence agencies, for is not written that spies never lie?
Enemy Image
Lil Endian
A positive step moving into a predominantly cyber world. Sovereign states underpinning enemy image in order to maintain power through group identity no longer require millions of souls to perish. It can be reported ad infinitum with no tangible effect, now "we're the best" is on paper (maybe in tape form).
Don't press 'em on it, or they'll have to prove it's not the case by obliterating some pleebs.
Are we on the verge of a serious conflict? Quite possibly, let's hope sabre-rattling from yesteryear stays cyber-rattling.
"We've got a tremendous private sector with a lot of capability"
Howard Sway
Sounds like somebody's thoughts on cybersecurity have not progressed much further than "capitalism good, commies bad" here. If you're confident that putting profit first means that the most popular operating system in use in your country is also the most secure, then I fear you may be in for some disappointment regarding its robustness when the inevitable retaliation arrives.
Sora2566
"Defending is too hard, and costs too much money - I know! We'll go on the offensive! After all, that'll be much easier and cheaper! And if there's anything the last few years has shown us, it's that another country cyber-attacking yours makes you just roll over and give up!"
"We have been, over the years, trying to play better and better defense when it comes to cyber"
Bollocks. Every time anyone tries to improve security and reslience they get resistance from the companies, states and representatives.
From May this year
https://www.nextgov.com/cybersecurity/2024/05/more-70-surveyed-water-systems-failed-meet-epa-cyber-standards/396727/]
The report found "More than 70% of surveyed water systems failed to meet EPA cyber standards"
and states,
"The EPA has tried to push hardened security mandates onto water operators, but the agency in October rescinded a memorandum that would have directed providers to evaluate the cyber defenses of their water systems when conducting sanitation surveys. The measure, which the agency said was permissible under the Safe Water Drinking Act, faced legal pushback from GOP-led states and trade groups."