\n<\/p>\n
Cyberattacks, regional conflict<\/span>, weapons of mass destruction, terrorism, commercial spyware, AI, misinformation, disinformation, deepfakes and TikTok. These are just some of the top perceived threats that the United States faces, according to the U.S. government\u2019s intelligence agency\u2019s latest global risk assessment.<\/p>\n The unclassified report published Monday \u2014 sanitized for public release<\/a> \u2014 gave a frank annual window into the U.S. intelligence community\u2019s collective hive mind about the threats it sees facing the U.S. homeland based on its massive banks of gathered intelligence. Now in an election year, the top U.S. spies increasingly cite emerging technology and cybersecurity as playing a factor in assessing its national security posture.<\/p>\n In an unclassified session<\/a> with the Senate Intelligence Committee on Monday, the top leaders across the U.S. government\u2019s intelligence agencies \u2014 including the FBI, NSA, CIA and others \u2014 testified to lawmakers largely to answer their questions about the current state of global affairs.<\/p>\n Here\u2019s what we learned from the hearing.<\/p>\n In the last few years, the U.S. government turned its attention to the government spyware industry, currently made of companies like NSO Group<\/a> and Intellexa<\/a>, and previously Hacking Team and FinFisher. In its annual report, the intelligence community wrote that, \u201cfrom 2011 to 2023, at least 74 countries contracted with private companies to obtain commercial spyware, which governments are increasingly using to target dissidents and journalists.\u201d<\/p>\n The report does not clarify where the intelligence community got that number, and the Office of the Director of National Intelligence did not respond to a request for comment asking to clarify.<\/p>\n But last year, the Carnegie Endowment for International Peace, a Washington, D.C. think-tank, released a report on the global spyware industry<\/a> that included the same number of countries as well as the same dates as the new intelligence community report. The Carnegie report, written by Steven Feldstein and Brian Kot, referenced data that the two collected<\/a>, which they said came from sources such as digital rights groups and security researchers that have studied the spyware industry like Citizen Lab, the Electronic Frontier Foundation and Privacy International, as well as news reports.<\/p>\n It\u2019s important to note that the Carnegie dataset, as the authors explained last year<\/a>, includes what we refer to as government or commercial spyware, meaning tools to remotely hack and surveil targets remotely, such as those that NSO and Intellexa make. But it also includes digital forensic software used to extract data from phones and computers that are physically in the possession of the authorities. Two of the most well-known makers of this type of tools are Cellebrite<\/a> and Grayshift<\/a>, both of which are widely used in the United States as well as in other countries.<\/p>\n The U.S. says ransomware is an ongoing risk to U.S. public services and critical infrastructure because cybercriminals associated with ransomware are \u201cimproving their attacks, extorting funds, disrupting critical services, and exposing sensitive data.\u201d<\/p>\n Ransomware has become a global problem, with hacking gangs extorting companies in some cases millions of dollars in ransom payments to get their stolen files back. Some cybersecurity experts have called on governments to outright ban ransom payments<\/a> as necessary to stop hackers profiteering from cybercrime.<\/p>\n But the U.S. has shunned that view and takes a different approach, opting to systematically disrupt, dismantle<\/a> and sanction some of the worst offenders<\/a>, who are based in Russia and outside of the reach of U.S. justice.<\/p>\n \u201cAbsent cooperative law enforcement from Russia or other countries that provide cyber criminals a safe haven or permissive environment, mitigation efforts will remain limited,\u201d the threat assessment reads. In other words, until Russia \u2014 and a few other hostile states \u2014 give up their criminals, expect ransomware to continue to be the modern-day snow day.<\/p>\n The use of generative AI in digital influence operations isn\u2019t new, but the wide availability of AI tools is lowering the bar for malicious actors engaging in online influence operations, like election interference and generating deepfakes.<\/p>\n The rise of detailed and convincing deepfake imagery and video is playing its role in information warfare by deliberately sowing confusion and discord, citing Russia\u2019s use of deepfake imagery against Ukraine on the battlefield.<\/p>\n \u201cRussia\u2019s influence actors have adapted their efforts to better hide their hand, and may use new technologies, such as generative AI, to improve their capabilities and reach into Western audiences,\u201d warned the report.<\/p>\n This was something echoed by NSA cybersecurity director Rob Joyce earlier in January about how foreign hackers are using chatbot tools to generate more convincing phishing emails<\/a>, but that AI is also useful for digital defense.<\/p>\n The report also noted that China is increasingly experimenting with generative AI, noting that TikTok accounts run by a Chinese military propaganda arm \u201creportedly targeted candidates from both political parties during the U.S. midterm election cycle in 2022.\u201d<\/p>\n U.S. spy agencies have caught on to a popular practice: Why get a warrant for data when they can just buy it online? Given how much data we share from our phone apps (which many don\u2019t give a second thought), U.S. spy agencies are simply buying up vast troves of Americans\u2019 commercially available location data<\/a> and internet traffic<\/a> from the data brokers.<\/p>\n How is that legal? After a brief exchange with the head of the Defense Intelligence Agency \u2014 one of the agencies confirmed to have bought access to a database containing Americans\u2019 location data<\/a> \u2014 Sen. Ron Wyden noted that the practice was allowed because there is no constitutional or statutory limit on buying commercially available data.<\/p>\n In other words, U.S. spy agencies can keep buying data on Americans that is readily available for purchase until Congress puts a stop to the practice \u2014 even if the root of the problem is that data brokers shouldn\u2019t have our data to begin with.<\/p>\n<\/p><\/div>\nAt least 74 countries use commercial spyware<\/h2>\n
U.S. says it\u2019s struggling to counter ransomware<\/h2>\n
U.S. warns of growing use of AI in influence operations<\/h2>\n
There are no laws limiting U.S. spies from buying Americans\u2019 data<\/h2>\n