What happens to CISA now? Is deterrence in cyber possible?

Security Conversations

Three Buddy Problem - Episode 21: We dig into an incredible government report on Iranian hacking group Emennet Pasargad and tradecraft during the Israel/Hamas war, why Predatory Sparrow could have been aimed at deterrence in cyber, and the FBI/CISA public confirmation of the mysterious Salt Typhoon hacks.

Plus, discussion on hina’s cyber capabilities, the narrative around “pre-positioning” for a Taiwan conflict, the blending of cyber and kinetic operations, and the long tail of Chinese researchers reporting Microsoft Windows vulnerabilities. The future of CISA is a recurring theme throughout this episode with some speculation about what happens to the agency under the Trump administration.

Cast: Juan Andres Guerrero-Saade (SentinelLabs), Costin Raiu (Art of Noh) and Ryan Naraine (SecurityWeek).

Links:

• Transcript (unedited, AI-generated)
• CISA/Israel gov report on Iranian hacking operations
• Check Point: A deep-dive of Iran's WezRat malware
• Trend Micro report on Earth Estries
• FBI/CISA on China hacking US telcos
• US accuses China of vast cyberespionage against telecoms
• Volt Typhoon hackers hit SingTel in Singapore
• New Palo Alto firewall 0day attack
• CVE-2024-43450 - China reports Windows DNS Spoofing vuln