National Security Agency (NSA) released The 2023 Cybersecurity Report, released on December 19, found that China and Russia remain exposed to huge cyber threats, the promise and dangers of artificial intelligence (AI) increase, and cyber threats to critical infrastructure become more prevalent. We look back on a year in which the situation was alarming.
The NSA Director and the United States. Cyber Command Commander Gen. Paul M. The sophistication of the threat posed by
Nakasone added that Russia “remains a serious threat” thanks to both its military invasion of Ukraine and “information operations aimed at undermining democratic institutions around the world.”
The NSA director said AI “has the ability to upend multiple sectors of society simultaneously,” especially if an adversary develops a significant advantage in AI technology. The NSA established a new Artificial Intelligence Security Center in 2023 with the goal of studying both the benefits and risks of this emerging technology.
Quantum cryptography is a new technology that holds great promise for protecting critical data and systems unless it first creates an unstoppable threat.
quantum computer It's not just faster than previous systems.Can handle huge number of operations at the same time, By using the principles of quantum physics, we achieve exhilarating and frightening vistas that are difficult to explain in terms of speed and processing power alone. Simply put, while powerful modern computers can count grains of sand on a beach in a reasonable amount of time, quantum computers can count the number of atoms in the entire Earth with comparable effort.
Peng Chengzhi operates Zucongzhi 2, a 66-qubit programmable quantum computing system, at QuantumCTek Co., Ltd. in Hefei, eastern China's Anhui province, on July 21, 2023. (Photo: Jin Liwang/Xinhua , Getty Images)
Quantum computers' ability to do multiple things at the same time is extremely useful for encryption and data security, but it can also be incredibly destructive depending on whether white hats or black hats master the technology first . The only reliable defense against quantum attacks is the quantum shield.
2023 was the year when the quantum sun began to rise on the cybersecurity horizon and all the possibilities of technology came into focus.For example, cybersecurity experts speak more and more Quantum computers will become incredibly good at guessing passwords, ushering in a future without passwords. The NSA states: “Quantum computing may not feel like an immediate threat, but it is an immediate threat that requires action now.”
NSA Cybersecurity Director Rob Joyce said a powerful new threat discovered in 2023 is the development of “off-the-land techniques” by hostile nation-state hackers.
Joyce was referring to report In December, an operation linked to the People's Liberation Army (PLA) that US cybersecurity analysts dubbed “Bolt Typhoon” had “compromised the computer systems of approximately two dozen sensitive organizations over the past year.” Reported about hackers.
Vault Typhoon hackers essentially “live” inside compromised computer systems, using the infiltrated malware to lurk and perform legitimate network functions, potentially deteriorating undetected for years before becoming active. created a threat. “Living off the land” is a stealth technique that can hide large-scale intrusions into critical systems until a hostile government orders the mayhem.
Joyce spotlighted the successful hunt An example of cybersecurity cooperation between government agencies is a highly sophisticated Russian virus called “Snake.”
Snake was, as far as is publicly known, the most sophisticated malware ever deployed by Russia's Federal Security Service (FSB), the successor to the KGB. The worm infiltrated targeted systems and established a massive secret network spanning more than 50 countries, including the United States. FSB hackers were able to use Snake to steal large amounts of sensitive information before networks were detected, and their targets ranged from government agencies to journalists.
Russian Federal Security Service personnel patrol the street next to the FSB Security Service office in Moscow on December 19, 2019. (STR/AFP via Getty Images)
The NSA said international cooperation is becoming increasingly important to thwart major cybersecurity threats, including successful cooperation with Japan and South Korea in 2023. Such cooperation is particularly urgent as the Russia-Ukraine war has exposed the cyber element of modern warfare. Military alliances like NATO will require advanced electronic harmonization to prevent attacks on computer networks and automated weapons systems by a capable adversary.
The conflict between Russia and Ukraine has made 2023 a watershed year for cyber warfare. Limited deployment Part of the first fully autonomous drone weapon, or a killer robot if you prefer. Electronic espionage is as much a part of this war as the roar of artillery.
The conflict between Israel and Hamas has been characterized by a great deal of cyberwarfare, including constant mischief by Iran, Hamas's terrorist sponsor.
Israeli Cyber Directorate Estimation In late December, it was revealed that at least 15 groups linked to Iran and its proxies, Hamas and Hezbollah, had launched large-scale cyberattacks against Israel since the October 7 Hamas atrocities. Ta.
Researchers at Mandiant, a security company owned by Microsoft and Google, Said At a cybersecurity conference in November, he said there probably would have been more numerous and more sophisticated attacks if Iran had had more time to prepare before Hamas sent its rape gangs and murder squads into Israeli communes.
forbes I got it. This year has also been a significant year for civilian cybersecurity, with global attacks spiking by up to 45% as vulnerable cloud systems become increasingly popular with consumers.
Cloud computing is incredibly valuable and useful, and has gained popularity among consumers and businesses who just a few years ago would have scoffed at storing all their valuable data in cyberspace. It has become widely accepted. Unfortunately, the cloud has become a very attractive target for hackers, and security experts are realizing that defenses cannot compromise the speed and ease of access that consumers desire.
In its year-end cybersecurity analysis, Trend Micro concluded AI is not truly creative or adaptive, so for now it will be an overblown sideshow. AI can quickly regurgitate data and detect patterns, but it can be easily fooled by feeding it fake data, which limits its “cybercrime usability.”
Things may change in the future, but for now, artificial intelligence's biggest contribution to online sleaze is likely to be in ways such as phishing, where hackers trick targeted users with realistic-looking but harmful documents and emails. It's about accelerating existing tactics. AI is so good at generating realistic phishing baits that it can advance its hacking campaigns with little human oversight, making it effective even for cybercriminals with limited skills. Now you can easily launch targeted and profitable attacks.
