Viktor Zhora, the Ukrainian cybersecurity expert who played a crucial role in countering Russian cyber attacks, was given a warm reception at the recent Black Hat conference in Las Vegas. Zhora, the deputy chair at Ukraine’s special communication and information protection service, spoke about the country’s evolution in cyber warfare since Russia’s annexation of Crimea in 2014. He also shared a fist-bump with Jen Easterly, the director of the US Cybersecurity and Infrastructure Agency, who praised Ukraine’s playbook and the lessons learned from their experiences.
However, behind the scenes, delegates at the conference expressed concerns that the US and its allies have failed to fully embrace Ukraine’s collaborative approach to cyber defense. Cyber executives argued that regulatory and legal roadblocks hinder fast-moving responses that require open sharing of sensitive information. Matt Olney from Cisco Systems highlighted the stark reality faced by Ukraine and the need for swift action in times of crisis.
The US and its allies are already engaged in low-level cyber aggression and espionage against countries like Russia, China, Iran, and North Korea. Despite efforts to block them, government-backed hackers from Russia and China regularly infiltrate Western systems for disinformation and spying campaigns.
The article also highlighted instances where information sharing was lacking. For example, when the State Department discovered that officials’ emails focused on China had been hacked, they claimed to have received inadequate information. Similarly, UK authorities took 10 months to inform citizens that their data had been exposed to hackers. Cybersecurity experts argue that timely sharing of critical technical data is essential to prevent similar attacks elsewhere.
One obstacle to information sharing is the US government’s classification of certain details as classified. Another challenge is the reluctance of listed companies to disclose breaches due to potential impacts on their share prices. The overlapping authority of various agencies also creates chaos rather than discipline in the cybersecurity landscape.
Despite these challenges, progress is being made towards transparency and collaboration. The fear of tit-for-tat attacks has deterred some chaos, and there is a growing understanding that a threat to one is a threat to all. While there is still work to be done, the cybersecurity community is striving for radical transparency and proactive measures to ensure collective resilience against cyber threats.