WEBVTT 1 00:00:00.040 --> 00:00:01.760 Welcome to the Deep Dive, the show where we take 2 00:00:01.760 --> 00:00:03.640 a stack of sources and distill them into the most 3 00:00:03.640 --> 00:00:07.240 important nuggets of knowledge just for you. Today, we're plunging 4 00:00:07.280 --> 00:00:12.839 into a topic that, well, it touches everyone every single day, cybersecurity. 5 00:00:13.080 --> 00:00:15.439 Think back to the early vision of the Internet. It 6 00:00:15.480 --> 00:00:21.079 was meant to be boundless, free, universally accessible, a revolutionary tool. 7 00:00:21.199 --> 00:00:24.280 Yeah, a tool for communication, for data exchange, and honestly, 8 00:00:24.280 --> 00:00:27.480 for millions it did deliver on that. It allowed better lives, 9 00:00:27.519 --> 00:00:28.280 greater connection. 10 00:00:28.480 --> 00:00:33.200 But fast forward today and we're seeing a vastly different landscape. 11 00:00:33.240 --> 00:00:37.479 It's become a domain kind of rife with disruption, chaos, compromise. 12 00:00:37.119 --> 00:00:40.159 Absolutely and what's emerged from our sources, and these are 13 00:00:40.280 --> 00:00:43.840 ripped straight from today's headlines, is this comprehensive picture of 14 00:00:43.880 --> 00:00:47.719 how that original promise has been well overshadowed. You've got nations, 15 00:00:47.759 --> 00:00:51.840 private groups, individual hackers all using the Internet now for 16 00:00:51.880 --> 00:00:55.200 deeply misleading and frankly often malicious purposes. 17 00:00:54.840 --> 00:00:59.359 Right, creating these complex political, economic, social challenges all in 18 00:00:59.399 --> 00:01:03.200 this cyberdie and our mission today is really to navigate 19 00:01:03.679 --> 00:01:07.400 these significant, sometimes troubling elements. We want to give you 20 00:01:07.439 --> 00:01:11.079 a shortcut to being well informed, hopefully packed with some 21 00:01:11.120 --> 00:01:14.560 surprising facts, maybe some practical insights on the topic that, 22 00:01:14.799 --> 00:01:17.680 let's face it, affects everyone. So yeah, let's dive in 23 00:01:17.680 --> 00:01:20.719 and unpack this. We started by acknowledging that early promise 24 00:01:20.840 --> 00:01:24.680 how the Internet genuinely improved countless lives, But then came 25 00:01:24.719 --> 00:01:28.359 that unexpected turn where it's dark side, you could say, 26 00:01:28.719 --> 00:01:31.120 began to emerge right alongside the good. 27 00:01:31.400 --> 00:01:33.519 That's right, I mean, the Internet is still a force 28 00:01:33.560 --> 00:01:36.560 for good, no question, But it's also clear that nations, 29 00:01:36.680 --> 00:01:42.000 private groups, individual hackers, they're now profiting from exploiting its vulnerabilities. 30 00:01:42.079 --> 00:01:44.959 Are there any bright spots though, any signs of pushback? 31 00:01:45.319 --> 00:01:47.840 Well, yeah, there are glimmers of hope. Look at Mark 32 00:01:47.920 --> 00:01:51.319 Zuckerberg being held accountable for Facebook's failings, you know, in 33 00:01:51.319 --> 00:01:54.879 that nationally televised forum. That might signal a shift, a 34 00:01:54.920 --> 00:01:58.439 shift in public tolerance, maybe possibly. And then there's the 35 00:01:58.599 --> 00:02:03.000 European Union's GDP, the General Data Protection Regulation. That's another 36 00:02:03.359 --> 00:02:04.640 significant step. 37 00:02:04.480 --> 00:02:07.719 Right, holding companies accountable for data problems exactly. 38 00:02:07.799 --> 00:02:10.240 It shows a willingness to enforce accountability. 39 00:02:10.319 --> 00:02:13.639 That focus on accountability is crucial. Now let's take a 40 00:02:13.719 --> 00:02:17.159 kind of fascinating historical detour because, believe it or not, 41 00:02:17.879 --> 00:02:22.080 the roots of modern cyber terrorism they stretch back centuries. 42 00:02:22.319 --> 00:02:26.360 It's amazing, isn't it. Our sources highlight three ancient precursors. 43 00:02:26.400 --> 00:02:29.280 It really shows that while the tools change, some of 44 00:02:29.360 --> 00:02:32.080 the core motivations while they endure. 45 00:02:32.439 --> 00:02:33.800 So who are we talking about? 46 00:02:34.159 --> 00:02:37.879 Well, first consider the Zealots operating against the Roman Empire. 47 00:02:38.080 --> 00:02:41.439 They use daggers, knives, often in crowded places. You make 48 00:02:41.479 --> 00:02:44.879 a statement, a violent political statement, yeah, demanding Rome give 49 00:02:44.960 --> 00:02:49.080 up Palestine. Their impact was brief but intense, and interestingly, 50 00:02:49.159 --> 00:02:51.560 the word Hammas today it actually means zeal Wow. 51 00:02:51.680 --> 00:02:51.960 Okay. 52 00:02:52.479 --> 00:02:55.680 Then you have the assassins Shia Muslims Middle East eleven 53 00:02:55.719 --> 00:02:59.240 to thirteenth centuries, another striking parallel. That's so their stated 54 00:02:59.280 --> 00:03:01.479 goal was to pure urifi Islam, a claim we hear 55 00:03:01.520 --> 00:03:04.759 echoed even today. Like the Zelots, they use knives, but 56 00:03:05.400 --> 00:03:08.439 in an uncanny foreshadowing of groups like Isis, they sought 57 00:03:08.520 --> 00:03:13.280 territorial control and they fostered this culture of martyrdom, chilling. 58 00:03:13.680 --> 00:03:14.840 And the third group. 59 00:03:14.759 --> 00:03:17.599 In India, you had the Thugi, where we get our 60 00:03:17.639 --> 00:03:22.039 word thugs. These were Hindus operating for nearly six hundred years, 61 00:03:22.199 --> 00:03:23.680 defying local authorities. 62 00:03:23.840 --> 00:03:24.759 Six hundred years. 63 00:03:24.840 --> 00:03:30.120 Yeah, their goals were mainly religious, not political, and horrifyingly, 64 00:03:30.280 --> 00:03:32.960 they managed to kill at least half a million people 65 00:03:33.560 --> 00:03:37.120 in the name of religion before the British finally defeated. 66 00:03:36.759 --> 00:03:39.560 Them half a million. That's daggering, it is. 67 00:03:39.639 --> 00:03:43.719 And what this historical journey chillingly reveals isn't just a 68 00:03:43.840 --> 00:03:47.120 change in weapons, you know, daggers to digital bombs. It's 69 00:03:47.159 --> 00:03:51.039 a consistent, enduring human drive for impact, but now it's 70 00:03:51.080 --> 00:03:55.520 amplified exponentially by the Internet's borderless reach. The mindset of terror, 71 00:03:55.560 --> 00:04:00.039 it seems, remains unchanged, but the means they've become globally pervasive. 72 00:04:00.039 --> 00:04:03.280 Really powerful distinction. So with that context, how exactly do 73 00:04:03.319 --> 00:04:05.759 our sources define what we're facing now in the digital age? 74 00:04:05.759 --> 00:04:06.840 What is cyber terrorism? 75 00:04:07.000 --> 00:04:10.319 Well, the definition the use is pretty specific. Premeditated politically 76 00:04:10.319 --> 00:04:14.400 motivated to tacks against information, computer systems, computer programs, and 77 00:04:14.479 --> 00:04:18.240 databases that result in violence against governments, businesses, and individuals. 78 00:04:18.639 --> 00:04:20.399 Premeditated politically motivated. 79 00:04:20.720 --> 00:04:24.439 Okay, and the Internet has become absolutely critical for this. 80 00:04:24.720 --> 00:04:29.040 Visis For example, they successfully recruited and estimated twenty thousand 81 00:04:29.120 --> 00:04:31.160 jihattists from around the. 82 00:04:31.120 --> 00:04:34.519 Globe, twenty thousand globally. That kind of reach is just 83 00:04:35.399 --> 00:04:37.040 unimaginable for those ancient groups. 84 00:04:37.120 --> 00:04:41.439 Exactly ancient terrorists would have marveled at it. And beyond recruitment, 85 00:04:41.519 --> 00:04:46.199 it's a powerful propaganda machine. Like how well Al Qaeda's 86 00:04:46.240 --> 00:04:49.360 Inspire magazine it's an online English language thing. They once 87 00:04:49.399 --> 00:04:52.720 provided these chillingly detailed instructions on how to make a 88 00:04:52.839 --> 00:04:56.000 car bond Oh my god, yeah, and ISIS videos have 89 00:04:56.120 --> 00:04:59.759 even you know, exhorted followers to exploit lax US gun 90 00:04:59.839 --> 00:05:02.560 law to get weapons for attacks against citizens. 91 00:05:02.639 --> 00:05:04.720 Really makes you stop and think, doesn't it The same 92 00:05:04.759 --> 00:05:07.480 tech that lets us talk instantly across continents or helps 93 00:05:07.480 --> 00:05:12.000 with medical research simultaneously empowers these malicious actors. It's a 94 00:05:12.000 --> 00:05:15.800 stark reminder the tool enhancing your daily life is vulnerable 95 00:05:15.839 --> 00:05:18.120 to the same dangerous forces we used to just read 96 00:05:18.120 --> 00:05:21.360 about in history books. Precisely so, if individuals and terror 97 00:05:21.399 --> 00:05:26.399 groups can exploit these vulnerabilities, what about entire nations. Let's 98 00:05:26.439 --> 00:05:30.560 pivot now to the global stage. Countries like Russia, they 99 00:05:30.560 --> 00:05:34.480 seem to be redefining conflict through what they call nonlinear war. 100 00:05:34.879 --> 00:05:37.160 That's a key concept. We saw it with the annexation 101 00:05:37.199 --> 00:05:42.639 of Crimea in twenty fourteen, swift, stealthy aggression and immediately 102 00:05:42.720 --> 00:05:45.879 followed by cyber attacks immediately like the Soak Fussy hack 103 00:05:46.040 --> 00:05:49.120 on Ukraine's Central Election Commission that same year. 104 00:05:49.319 --> 00:05:50.560 That it didn't stop there, No. 105 00:05:50.560 --> 00:05:54.199 It escalated significantly. In December twenty fifteen, there was that 106 00:05:54.319 --> 00:05:57.360 power grid attack in the Ivano Frankkifsk region of Ukraine, 107 00:05:57.560 --> 00:06:00.040 left two hundred and thirty thousand residents without. 108 00:06:00.439 --> 00:06:02.279 That might have been the first time a hack actually 109 00:06:02.360 --> 00:06:02.920 took down a. 110 00:06:02.839 --> 00:06:05.360 Power It may well have been, and the coordination involved, 111 00:06:05.360 --> 00:06:08.639 the operational, the logistics planning. It strongly indicated a state 112 00:06:08.720 --> 00:06:09.639 sponsored operation. 113 00:06:09.920 --> 00:06:12.240 And then not Petcha in twenty seventeen. 114 00:06:11.959 --> 00:06:14.800 Right that ransomware attack, it was widespread, targeting not just 115 00:06:14.920 --> 00:06:20.000 energy but government agencies, transport banks across Ukraine and frankly beyond. 116 00:06:20.199 --> 00:06:22.000 What really stood out to me in the sources was 117 00:06:22.040 --> 00:06:25.240 how closely Russia's cyber tactics align with this thing called 118 00:06:25.240 --> 00:06:28.279 the Jurassumov doctrine. Can you unpack that a bit. 119 00:06:28.279 --> 00:06:30.920 Yeah, it's really important for understanding their strategy. It was 120 00:06:30.959 --> 00:06:34.519 laid out in twenty thirteen by Valerie jurassim Off, the 121 00:06:34.639 --> 00:06:37.759 chief of the Russian General Staff. He basically said that 122 00:06:38.519 --> 00:06:41.079 the lines between war and peace had become blurred. 123 00:06:41.160 --> 00:06:43.199 Blurred lines exactly. 124 00:06:42.800 --> 00:06:46.600 That non military means of achieving political and strategic goals 125 00:06:46.959 --> 00:06:50.399 have grown, and in many cases they have exceeded the 126 00:06:50.399 --> 00:06:52.680 force of weapons in their effectiveness. 127 00:06:53.000 --> 00:06:58.040 So information warfare, cyber attacks, they're just as important as 128 00:06:58.120 --> 00:06:59.839 tanks and missiles, maybe more so. 129 00:06:59.759 --> 00:07:02.279 In their of you. Yes, they even created a new 130 00:07:02.560 --> 00:07:06.439 one thousand person cyber warfare unit, the Keebra Voyiska, to 131 00:07:06.480 --> 00:07:07.639 boost their capabilities. 132 00:07:07.639 --> 00:07:10.519 They take this very seriously, and that doctrine that thinking 133 00:07:11.079 --> 00:07:13.720 it directly informed their election interference in the West didn't. Oh. 134 00:07:13.720 --> 00:07:17.000 Absolutely, their role in the twenty sixteen US presidential election 135 00:07:17.279 --> 00:07:20.759 came under intense scrutiny. You had wikiliks releasing over forty 136 00:07:20.759 --> 00:07:22.079 four thousand DNC. 137 00:07:21.759 --> 00:07:25.120 Emails revealing bias. Yeah. Even Donna Brazil, who took over 138 00:07:25.160 --> 00:07:27.720 the DNC called it unethical, right. 139 00:07:27.759 --> 00:07:31.000 And the Department of Homeland Security, the Director of National Intelligence, 140 00:07:31.360 --> 00:07:33.399 they were confident Russia was behind that hack. 141 00:07:33.759 --> 00:07:36.079 And it wasn't just the US. France had its own 142 00:07:36.079 --> 00:07:37.720 problems in twenty seventeen. 143 00:07:37.519 --> 00:07:41.079 Big problems. The TV five Monday news channel got hacked 144 00:07:41.120 --> 00:07:44.279 by APT twenty eight. That's a group widely believed to 145 00:07:44.319 --> 00:07:47.120 be linked to Russian military intelligence. Knock them off the 146 00:07:47.120 --> 00:07:49.439 air for hours, cost millions. 147 00:07:49.480 --> 00:07:51.079 And the metcron smear campaign. 148 00:07:51.199 --> 00:07:56.720 Yeah, rumors calling him a CIA operative or homosexual, all baseless, 149 00:07:56.759 --> 00:07:57.920 designed to undermine him. 150 00:07:57.959 --> 00:07:59.519 But Germany seemed less effective. 151 00:07:59.639 --> 00:08:03.920 Interesting, Yes, they weren't heavily targeted, probably because they were prepared. 152 00:08:03.959 --> 00:08:06.759 They used paper ballots, harder to hack, and there's high 153 00:08:06.759 --> 00:08:09.439 public trust in their media who formed fact checking teams. 154 00:08:10.199 --> 00:08:11.519 Preparedness mattered. 155 00:08:11.839 --> 00:08:15.759 What about Russia's use of disinformation? The sources mentioned contradictory 156 00:08:15.800 --> 00:08:17.920 stories like around the Skipol poisoning. 157 00:08:18.240 --> 00:08:21.879 Yeah, that's a fascinating and frankly disturbing aspect of their strategy. 158 00:08:22.000 --> 00:08:25.519 Those contradictory descriptions and assertions. They're not a bug, they're 159 00:08:25.519 --> 00:08:25.920 a feature. 160 00:08:26.040 --> 00:08:26.480 A feature. 161 00:08:26.639 --> 00:08:30.240 How so, it's intended to unsettle governments and citizens to 162 00:08:30.319 --> 00:08:33.440 so confusion make it hard to discern any single truth 163 00:08:33.440 --> 00:08:35.679 amidst all the noise. It erodes trust. 164 00:08:36.360 --> 00:08:40.960 But the US response it had its own issues, definitely. 165 00:08:41.000 --> 00:08:43.960 The FBI, for instance, had what one source called an 166 00:08:44.000 --> 00:08:47.759 abject failure in alerting nearly five hundred American officials known 167 00:08:47.799 --> 00:08:51.159 to be targeted by Fancy Bear, another Russian hacking group. 168 00:08:51.279 --> 00:08:52.200 How many did they alert? 169 00:08:52.440 --> 00:08:55.799 Only two out of almost five hundred known targets. That's 170 00:08:55.879 --> 00:08:57.519 not good, not good at all. And then there was 171 00:08:57.519 --> 00:09:00.320 the whole Kasperski software issue. The Department of on Land 172 00:09:00.360 --> 00:09:03.159 Security had to order it removed from all government computers. 173 00:09:03.279 --> 00:09:03.840 How was that? 174 00:09:04.399 --> 00:09:08.279 Because an NSA employee improperly stored classified documents on a 175 00:09:08.320 --> 00:09:11.559 home computer that happened to be running Kasperski, it highlighted 176 00:09:11.559 --> 00:09:13.720 a serious insider threat vulnerability. 177 00:09:13.840 --> 00:09:16.559 Okay, so Russia's tactics are clear. Let's turn to China. 178 00:09:16.639 --> 00:09:19.039 What's their focus in the cyberrom. 179 00:09:19.080 --> 00:09:23.320 China's game is often more about espionage, particularly economic and political. 180 00:09:23.679 --> 00:09:27.279 One of the most audacious examples was the attack on 181 00:09:27.320 --> 00:09:29.960 the US Office of Personnel Management OPM. 182 00:09:30.039 --> 00:09:32.360 Right, that was twenty fourteen, twenty fifteen. 183 00:09:32.360 --> 00:09:37.000 Yeah, over twenty one million personnel file stolen past and 184 00:09:37.039 --> 00:09:43.440 present government employees, contractors, their personal information security clearance details. 185 00:09:43.559 --> 00:09:45.879 A gold mine for intelligence. 186 00:09:45.360 --> 00:09:49.519 And absolute treasure trove. And the worst part, the Office 187 00:09:49.519 --> 00:09:52.559 of the Inspector General had warned opm its network was 188 00:09:52.679 --> 00:09:54.200 highly vulnerable. 189 00:09:53.639 --> 00:09:55.399 A year before, but they didn't act. 190 00:09:55.519 --> 00:09:59.960 Senior executives failed to act. It exposed frankly bureaucratic malfila 191 00:10:00.440 --> 00:10:03.799 and poor leadership. The director eventually resigned, and. 192 00:10:03.759 --> 00:10:05.559 They target corporations too, oh heavily. 193 00:10:05.919 --> 00:10:08.080 Since at least two thousand and six, they've gone after 194 00:10:08.120 --> 00:10:12.879 technical designs for things like Westinghouse nuclear reactors, US Steel Alcoa, 195 00:10:13.360 --> 00:10:15.879 aiming right at economic competitiveness. 196 00:10:15.279 --> 00:10:17.440 And domestically, China tries to control the Internet. 197 00:10:17.600 --> 00:10:20.559 Yes, they actively work to enforce greater control over the Internet, 198 00:10:20.559 --> 00:10:24.120 employing censorship that great firewall concept, and their reach is 199 00:10:24.120 --> 00:10:26.639 global too. Germany reported China. 200 00:10:26.480 --> 00:10:28.759 Using LinkedIn LinkedIn seriously yep. 201 00:10:28.600 --> 00:10:31.840 To target as many as ten thousand prominent German citizens, 202 00:10:31.840 --> 00:10:34.480 presumably gathering business and political intelligence. 203 00:10:34.519 --> 00:10:37.840 Wow, okay, Russia, China? What about North Korea? 204 00:10:37.960 --> 00:10:43.399 North Korea is known more for retaliatory or disruptive hacks. 205 00:10:43.799 --> 00:10:46.600 The Sony Pictures attack is the classic example. 206 00:10:46.200 --> 00:10:48.480 Because of that movie The Interview. 207 00:10:48.159 --> 00:10:53.679 Exactly, hackers breached Sony's cybersecurity, causing chaos. They released tons 208 00:10:53.720 --> 00:10:58.039 of proprietary and personal files info from forty seven thousand employees. 209 00:10:58.480 --> 00:11:01.039 The cost and disruption must have been immense. 210 00:11:01.200 --> 00:11:02.879 And they stole military documents too. 211 00:11:03.080 --> 00:11:05.440 There was a claim, yes, that North Korean hackers stole 212 00:11:05.519 --> 00:11:09.759 a huge trove of classified US and South Korean military documents, 213 00:11:10.039 --> 00:11:13.600 including apparently plans for taking out Pyongyang's leadership in a 214 00:11:13.639 --> 00:11:14.440 war scenario. 215 00:11:14.720 --> 00:11:17.720 So the takeaway for you listening this isn't just abstract 216 00:11:17.759 --> 00:11:20.279 stuff happening far away, not at all. These are tangible 217 00:11:20.320 --> 00:11:23.799 impacts on national security, on the economy, and potentially on 218 00:11:23.840 --> 00:11:27.720 the privacy of millions, including possibly your own data. 219 00:11:27.799 --> 00:11:30.440 Right it connects directly back to individual security. 220 00:11:30.639 --> 00:11:33.200 So how do we defend against all this, these evolving 221 00:11:33.240 --> 00:11:36.279 threats from states from roague groups. Let's talk defense. Maybe 222 00:11:36.279 --> 00:11:38.559 start with Stuxnet. That seems we had a turning point. 223 00:11:38.840 --> 00:11:42.440 It absolutely was code named Olympic Games. It was the 224 00:11:42.480 --> 00:11:47.279 world's first known physically destructive cyber attack, a collaboration reportedly 225 00:11:47.360 --> 00:11:49.480 between US and Israeli. 226 00:11:49.200 --> 00:11:52.200 Experts targeting Iran's nuclear program precisely. 227 00:11:52.679 --> 00:11:56.600 Its effects were dramatic. It disabled almost one thousand centrifuges 228 00:11:57.080 --> 00:11:59.120 nine hundred and eighty four. I think the number was 229 00:11:59.679 --> 00:12:04.200 set back their uranium enrichment for months, maybe a year. 230 00:12:04.200 --> 00:12:06.960 So it showed that cyber weapons could have real world 231 00:12:07.159 --> 00:12:08.879 physical consequences exactly. 232 00:12:08.919 --> 00:12:12.279 It was a political game changer, forced everyone to recognize 233 00:12:12.279 --> 00:12:15.440 this emerging power. It showed you could achieve strategic goals 234 00:12:15.440 --> 00:12:18.039 digitally without traditional kinetic warfare, and. 235 00:12:18.000 --> 00:12:21.679 The US military adapted. US Cyber Command evolved. 236 00:12:21.360 --> 00:12:24.399 It certainly did. In twenty sixteen, they created Joint Task 237 00:12:24.480 --> 00:12:27.480 Force ERRORS. That was significant because it represented the first 238 00:12:27.559 --> 00:12:30.639 publicly acknowledged plan by a Western military to use digital 239 00:12:30.679 --> 00:12:32.600 weapons alongside traditional. 240 00:12:32.159 --> 00:12:33.840 Combat against groups like ISIS. 241 00:12:33.960 --> 00:12:36.519 Yes, and the Pentagon is also trying to partner more 242 00:12:36.559 --> 00:12:40.639 with Silicon Valley through the Defense Innovation Unit DIUX, trying 243 00:12:40.679 --> 00:12:43.960 to bridge that gap between defense needs and commercial tech innovation. 244 00:12:43.919 --> 00:12:46.919 Bringing startup solutions to defense challenges makes. 245 00:12:46.759 --> 00:12:49.879 Sense, but a key takeaway, maybe the key takeaway from 246 00:12:49.919 --> 00:12:53.600 the sources on defense is how critical the human factor is. 247 00:12:53.679 --> 00:12:57.120 And all this the human factor meaning people making. 248 00:12:56.919 --> 00:13:02.200 Mistakes partly yes, but also leadership awareness culture. There was 249 00:13:02.240 --> 00:13:06.320 a Villanova University survey of MBA students. Only about ten 250 00:13:06.360 --> 00:13:10.039 percent felt their C suite gave cybersecurity the right level 251 00:13:10.039 --> 00:13:10.559 of support. 252 00:13:10.759 --> 00:13:12.360 Only ten percent. That's worrying. 253 00:13:12.440 --> 00:13:15.320 It's fully disappointing. As the source put it, and then 254 00:13:15.360 --> 00:13:19.000 an executive from locked In Insurance observes something stark. As 255 00:13:19.039 --> 00:13:22.000 many as half of their cyber insurance claims resulted from 256 00:13:22.039 --> 00:13:26.720 human error percent fifty percent either inadvertent mistakes or deliberate actions, 257 00:13:26.799 --> 00:13:29.639 often by junior or low ranking employees. It's like you know, 258 00:13:29.759 --> 00:13:33.879 hitting reply all on that sensitive email, but magnified massively. 259 00:13:33.960 --> 00:13:37.360 That's huge and it reinforces that idea from those University 260 00:13:37.399 --> 00:13:40.799 of Lendin researchers Atoms and strass right that users are 261 00:13:40.840 --> 00:13:42.320 not the enemy exactly. 262 00:13:42.480 --> 00:13:45.679 They found that some common security practices can actually backfire, 263 00:13:45.799 --> 00:13:48.519 like asking for multiple complex passwords. 264 00:13:48.559 --> 00:13:49.440 How did that backfire? 265 00:13:49.720 --> 00:13:53.639 Well, counterintuitively, it can lead to weaker security. People write 266 00:13:53.679 --> 00:13:57.399 them down or they create easily related passwords because they 267 00:13:57.399 --> 00:13:58.919 can't remember them all ah. 268 00:13:59.039 --> 00:14:02.519 Right, making it easier for attackers if one gets compromised. 269 00:14:02.559 --> 00:14:06.559 Precisely. Plus, they found that if security departments treat employees 270 00:14:06.639 --> 00:14:11.159 as inherently unsafe and don't share much information. 271 00:14:10.879 --> 00:14:14.200 Employees don't really understand why security matters exactly. 272 00:14:14.240 --> 00:14:17.000 They don't grasp the importance, they don't feel trusted, and 273 00:14:17.080 --> 00:14:19.440 security becomes just another hoop to jump through. 274 00:14:19.720 --> 00:14:22.399 So how do we build a stronger human defense. Then 275 00:14:23.080 --> 00:14:25.440 what did Adams and Strasses suggest? 276 00:14:25.559 --> 00:14:29.720 Pretty common sense stuff, actually make system security visible, show 277 00:14:29.759 --> 00:14:33.440 that it's taken seriously. Keep employees informed about existing and 278 00:14:33.519 --> 00:14:38.120 potential threats. Build awareness and testing. Yeah, implement red team programs, 279 00:14:38.440 --> 00:14:41.639 Simulate attacks to test employee attentiveness, see if they click 280 00:14:41.679 --> 00:14:44.240 on phishing links, that kind of thing. But do it 281 00:14:44.279 --> 00:14:47.559 constructively for training, It's about trust and transparency. 282 00:14:47.679 --> 00:14:51.200 But building that stronger human defense, it runs into another 283 00:14:51.279 --> 00:14:54.639 huge problem, doesn't it. Finding the people. The talent gap. 284 00:14:54.879 --> 00:14:59.279 Oh, it's massive, a chronic shortage of qualified cybersecurity staff. 285 00:14:59.279 --> 00:15:03.240 Some estimates projecting like three point five million job openings 286 00:15:03.240 --> 00:15:04.320 by twenty twenty. 287 00:15:04.039 --> 00:15:06.840 One, with zero percent unemployment in the field in the US. 288 00:15:06.919 --> 00:15:11.159 Basically, yeah, zero percent unemployment. Compare that to Russia. They 289 00:15:11.200 --> 00:15:15.240 created the Serious Center for Gifted Education and soci inspired 290 00:15:15.279 --> 00:15:16.279 by Putin himself. 291 00:15:16.600 --> 00:15:16.919 What's that. 292 00:15:17.159 --> 00:15:20.360 It's like a dedicated academy for top talent in science, 293 00:15:20.480 --> 00:15:24.080 tech arts. Students live in a former four star hotel, 294 00:15:24.159 --> 00:15:28.279 pop labs, and Putin reportedly monitors its progress closely. It's 295 00:15:28.320 --> 00:15:31.279 a very strategic long term play for developing talent. 296 00:15:31.440 --> 00:15:33.919 So for you listening, the bottom line, here is. 297 00:15:34.000 --> 00:15:36.840 It's that cybersecurity is just as much about human behavior, 298 00:15:36.960 --> 00:15:41.200 about organizational culture, about leadership as it is about fancy technology. 299 00:15:41.360 --> 00:15:46.000 Right understand, the human element is absolutely key to strengthening defenses, 300 00:15:46.240 --> 00:15:48.600 whether it's in your own digital life or within your organization. 301 00:15:48.679 --> 00:15:49.480 Couldn't agree more. 302 00:15:49.519 --> 00:15:53.639 Okay, let's just focus now towards the future innovation, ethics, governance. 303 00:15:54.080 --> 00:15:58.200 These are constantly shaping the cyber domain. First up, emerging tech, 304 00:15:58.519 --> 00:15:59.519 let's talk big data. 305 00:15:59.720 --> 00:16:03.759 Big data's impact is just sweeping. You see it everywhere 306 00:16:04.000 --> 00:16:07.360 like where. Well, in prese sports, it can predict when 307 00:16:07.360 --> 00:16:10.360 a baseball pitcher might get tired based on analyzing tons 308 00:16:10.399 --> 00:16:15.000 of past performance data. In healthcare, this is huge. It's 309 00:16:15.080 --> 00:16:17.360 moving us beyond homogenized. 310 00:16:16.679 --> 00:16:19.039 Medicine towards more personalized stuff. 311 00:16:18.840 --> 00:16:23.960 Exactly targeted treatments based on an individual's genome, even for 312 00:16:24.080 --> 00:16:26.440 rare cancers. Think of the lives that could save. 313 00:16:26.840 --> 00:16:28.240 And businesses use it too. 314 00:16:28.240 --> 00:16:31.879 Constantly optimizing operations, finding the best spots for new stores, 315 00:16:31.879 --> 00:16:36.039 whether it's fast food chains or fashion retailers, analyzing customer behavior. 316 00:16:36.200 --> 00:16:38.519 But there's a flip side, right, risks. 317 00:16:38.279 --> 00:16:41.600 Oh, definitely, there are negative couticiles. As one source put it. 318 00:16:41.840 --> 00:16:44.919 George Soros, the investor painted a pretty disturbing picture of 319 00:16:44.960 --> 00:16:47.360 the power these big data companies wield. 320 00:16:47.120 --> 00:16:48.519 And the Facebook issues right. 321 00:16:48.759 --> 00:16:51.679 Mark Zuckerberg acknowledged that breach of trust after the Cambridge 322 00:16:51.679 --> 00:16:55.679 Analytica scandal cost Facebook fifty billion dollars in market value 323 00:16:55.679 --> 00:16:59.240 in just two days. Privacy concerns are real and costly. 324 00:16:59.639 --> 00:17:04.559 So big data powerful but potentially problematic. What about AI 325 00:17:04.680 --> 00:17:05.480 and machine learning? 326 00:17:05.680 --> 00:17:10.279 Okay? So AI? Artificial intelligence is basically the mimicking of 327 00:17:10.359 --> 00:17:15.440 human thought to solve complex problems automatically. Machine learning is related. 328 00:17:15.519 --> 00:17:19.000 It's the ability of computers to automatically acquire new knowledge 329 00:17:19.359 --> 00:17:20.440 learn from data. 330 00:17:20.599 --> 00:17:22.039 Like with driverless cars. 331 00:17:21.839 --> 00:17:26.200 Perfect example, AI helps the car follow rules, make decisions 332 00:17:26.240 --> 00:17:29.359 based on sensors. Machine learning lets the car improve its 333 00:17:29.440 --> 00:17:32.039 driving over time learning from experience, and. 334 00:17:32.000 --> 00:17:33.839 The dental impact there is huge too. 335 00:17:34.079 --> 00:17:39.000 Massive projections suggest autonomous vehicles could save like six hundred 336 00:17:39.000 --> 00:17:41.960 and ninety thousand to one point two million lives over 337 00:17:41.960 --> 00:17:45.079 fifty years just by reducing human error accidents. 338 00:17:45.240 --> 00:17:48.880 And how are AI in machine learning used in cybersecurity itself? 339 00:17:49.160 --> 00:17:52.920 They're vital for anomaly spotting, detecting unusual patterns that might 340 00:17:52.920 --> 00:17:55.799 indicate an attack, especially those slow onset attacks that try 341 00:17:55.839 --> 00:17:57.279 to stand to the radar, which. 342 00:17:57.039 --> 00:17:58.880 Means you need the data for them to learn. 343 00:17:58.720 --> 00:18:01.839 From exactly, which is why longer log retention is becoming 344 00:18:01.839 --> 00:18:04.880 so crucial. Companies often delete logs after a few months 345 00:18:04.920 --> 00:18:07.720 to save space, but AI needs that history to spot 346 00:18:07.759 --> 00:18:09.319 subtle long term threats. 347 00:18:09.720 --> 00:18:15.240 Okay AI machine learning. Then there's the really mind bending 348 00:18:15.279 --> 00:18:16.720 one quantum computing. 349 00:18:16.920 --> 00:18:20.680 Yeah, this is revolutionary stuff. Instead of bits being zero 350 00:18:20.759 --> 00:18:22.759 or one, quantum computers. 351 00:18:22.279 --> 00:18:24.200 Use kubits and quivits can be. 352 00:18:24.359 --> 00:18:26.000 They can represent a one and a zero at the 353 00:18:26.000 --> 00:18:29.359 same time. That's called superposition, and they can be linked 354 00:18:29.720 --> 00:18:34.079 or correlated with each other through entanglement, which leads to 355 00:18:34.559 --> 00:18:38.359 enormous computing power, far far beyond anything we have today. 356 00:18:38.519 --> 00:18:40.039 What's the promise there? What could it do? 357 00:18:40.599 --> 00:18:44.519 Huge potential for things like discovering new medicines, revolutionizing healthcare, 358 00:18:44.799 --> 00:18:47.599 creating incredibly sophisticated financial models. 359 00:18:47.680 --> 00:18:49.880 But there's a dark side here too, isn't there? For 360 00:18:49.920 --> 00:18:51.799 cybersecurity a major one. 361 00:18:52.160 --> 00:18:55.079 The big threat is that a powerful quantum computer could 362 00:18:55.079 --> 00:18:58.519 potentially crack most of the encryption keys we rely on today. 363 00:18:58.960 --> 00:19:00.599 Public key in cryption. 364 00:19:00.400 --> 00:19:02.400 Specifically crack them how fast. 365 00:19:02.279 --> 00:19:05.799 Potentially in minutes, which would basically break Internet security as 366 00:19:05.799 --> 00:19:06.119 we know it. 367 00:19:06.200 --> 00:19:09.039 Okay, that's terrifying. Is there a defense, Well, people are 368 00:19:09.039 --> 00:19:09.599 working on it. 369 00:19:09.920 --> 00:19:15.200 Quantum key distribution or QKD is one developing countermeasure using 370 00:19:15.279 --> 00:19:19.160 quantum principles to create inherently secure communication channels. 371 00:19:19.240 --> 00:19:21.680 So the cyber arms race just moves to the quantum level. 372 00:19:21.720 --> 00:19:24.160 It seems that way. It's a constant cat and mouse game. 373 00:19:24.079 --> 00:19:26.920 Which brings us squarely to the challenge of governance and ethics. 374 00:19:27.680 --> 00:19:29.720 How do we manage all this power responsibly? 375 00:19:29.960 --> 00:19:34.960 That's the billion dollar question. The EU's GDPR is one 376 00:19:35.400 --> 00:19:39.359 major attempt. It's staggeringly complex, but it tries to provide 377 00:19:39.480 --> 00:19:41.920 legal direction on automated decision making and. 378 00:19:41.880 --> 00:19:44.519 Profiling with real teeth fines. 379 00:19:44.640 --> 00:19:48.119 Oh yeah, heavy financial fines, and it introduces the concept 380 00:19:48.200 --> 00:19:50.960 of data subjects having rights over their information. 381 00:19:51.200 --> 00:19:53.559 Is there anything comparable historically. 382 00:19:53.279 --> 00:19:56.039 Well, one source draws an analogy to the UK's Health 383 00:19:56.039 --> 00:19:58.880 and Safety at Work Act from nineteen seventy four that 384 00:19:58.920 --> 00:20:02.039 combined clear principle with strong enforcement and led to an 385 00:20:02.039 --> 00:20:05.200 eighty six percent reduction in fatal workplace injuries over time. 386 00:20:05.440 --> 00:20:07.400 So principles plus enforcement can work. 387 00:20:07.680 --> 00:20:10.559 It suggests it can. You also see things like the 388 00:20:10.640 --> 00:20:15.440 Engineering Council's Statement of Ethical Principles or the IoT Security 389 00:20:15.480 --> 00:20:19.960 Foundation pushing principles like what like functionality without the necessary 390 00:20:20.000 --> 00:20:24.400 security should not be considered functional. Basically, security needs to 391 00:20:24.440 --> 00:20:27.920 be built in, not an afterthought, and liability lies with 392 00:20:27.960 --> 00:20:29.039 those who generate the. 393 00:20:29.079 --> 00:20:33.599 Risk, making vendors responsible. Interesting and different nations are tackling 394 00:20:33.599 --> 00:20:34.559 this strategically too. 395 00:20:34.720 --> 00:20:38.799 Yes, the US National Security Strategy from twenty seventeen had 396 00:20:38.920 --> 00:20:43.400 four pillars that integrated cyber considerations. The EU is taking 397 00:20:43.440 --> 00:20:48.720 a more proactive stance, strengthening ANISSA, their cybersecurity agency, promoting 398 00:20:48.720 --> 00:20:52.400 security by design, and NATO. NATO has the Tall and Manual. 399 00:20:52.519 --> 00:20:56.039 It's not binding law, but it's comprehensive advice from experts 400 00:20:56.039 --> 00:20:59.759 on how international law up or should apply in cyberspace. 401 00:21:00.200 --> 00:21:01.480