Andrew Garabino on Evolving Cyber Threats to US Critical Infrastructure

The Evolution of Cyber Threats

• ⚠️ The discovery of Stuxnet 15 years ago marked a turning point, demonstrating the physical impact of malware on industrial control systems and critical infrastructure.
• 🎯 Cyber threats have evolved beyond just malware to include phishing, social engineering, and denial-of-service attacks.
• 💻 Malware remains a significant concern, with ransomware accounting for one-third of all cyber attacks in 2024.

Securing Operational Technology (OT)

• 🏭 Operational Technology (OT), used in industrial control systems, is a key target for cyber attacks.
• 🌐 Cybersecurity is not solely an IT issue; threats to OT can affect essential services like water treatment and energy facilities.
• 🤝 Strengthening public and private sector collaboration is crucial for rapid response to cyber threats.

Zero-Day Vulnerabilities and Iranian Threats

• 🚨 Zero-day vulnerabilities are still a major concern and are far from being eliminated.
• 📈 Cyber attacks from Iranian threat actors have surged significantly, with affiliated actors targeting OT in sectors like water and healthcare.
• ⚠️ The US Department of Homeland Security has issued advisories highlighting the need for high alert regarding Iranian cyber threats to critical infrastructure.

Key Legislative Priorities

• 📜 Reauthorizing the Cybersecurity Information Sharing Act (CISA) is important for encouraging rapid and trusted information sharing.
• 💰 Extending the State and Local Cybersecurity Grant Program will provide essential funding for states and localities to enhance their cybersecurity posture.
• 🏛️ These legislative actions are vital for strengthening domestic cybersecurity resilience against sophisticated threats.