Anne Neuberger, White House deputy national security advisor for cyber and emerging technologies, emphasised the need for clarity in distinguishing between cyberespionage and potential cyberattacks. Her remarks followed a recent advisory from federal agencies warning about Chinese hackers infiltrating US critical infrastructure.

Speaking at the Munich Cyber Security Conference, Neuberger highlighted a shift in cybersecurity concerns, moving beyond data theft to activities observed in groups like the Volt Typhoon. She notes that the activities of these groups targeting sectors like water and civilian airports deviate from traditional espionage motives due to their limited intelligence value.

In response to this evolving threat, Neuberger outlined the US government's approach, which includes adopting cybersecurity regulations similar to the European NIS2 Directive for protecting key sectors and strengthening partnerships and information sharing with foreign allies.

Secondly, Neuberger addressed the ongoing battle against ransomware. While acknowledging the impact of recent law enforcement takedowns on cybercrime, she expressed concern that these actions have not significantly raised the costs for potential attackers. Neuberger highlighted the temporary nature of measures such as sanctioning cryptocurrency mixers and called for a more comprehensive strategy to combat the ransomware threat.

Despite recent high-profile takedowns, Neuberger stressed the need for more frequent and sustained law enforcement efforts. She characterised the current operations cadences as inadequate in addressing the evolving cyber threats facing critical infrastructure and national security.

Neuberger's remarks bring the complexity of modern cybersecurity challenges and the ongoing efforts to effectively adapt strategies to mitigate these risks.