A recent debate at the RSA Conference (RSAC) featured four former National Security Agency (NSA) directors, representing a broad spectrum of US Cyber Command history, discussing the role of offensive cyber operations in government.
The discussion centered on the notion of a ‘red line’ for such attacks, with the former directors considering what constitutes an acceptable use of offensive cyber capabilities and how these boundaries are established and maintained.
The conversation highlighted the complexities and challenges associated with offensive cyberattacks, including the potential for unintended consequences and the difficulty of attributing attacks to specific actors.
The debate underscored the need for clear guidelines and policies governing the use of offensive cyber capabilities, as well as the importance of international cooperation in establishing norms for cyber warfare.
The former NSA directors’ discussion comes at a time when the use of cyberattacks is becoming increasingly prevalent, with vulnerabilities such as CVE-2021-44228 (Log4Shell) and CVE-2021-34473 (PrintNightmare) being exploited by threat actors to compromise systems and gain unauthorized access.
Source: Original Article
