Why the Old Approach to Cyberattacks No Longer Works | Opinion

In today's digital age, the threat of cyberattacks to vital infrastructure has evolved into a constant danger, not just during wartime but also in peacetime. Despite this, many organizations continue to rely on outdated strategies to combat these threats. The consequences of a successful cyberattack can be devastating, affecting critical services such as communications, energy, retail, transport, and water.

The recent incidents in the United States and France serve as stark reminders of the potential impact of such attacks, causing operational disruptions, financial losses, and even shortages of essential resources.

Threat actors are increasingly adopting a more sophisticated approach, aiming to gain strategic pre-positioning by securing hidden footholds within compromised networks. This allows them to activate their full capabilities at any moment, posing a significant risk to national security and the stability of essential services. In light of these developments, governments and businesses must reassess their cyber defense strategies and focus on anticipation, preparation, and cooperation.

Firstly, it is crucial to identify and eliminate persistent access as soon as possible. Organizations must enhance their visibility into critical systems, assets, and dependencies to better detect anomalous activity and hidden threats. Leveraging artificial intelligence can help defenders identify vulnerabilities faster and take proactive measures to contain incidents and understand potential future attacks.

Secondly, building resilience is essential to withstand and recover from cyber disruptions. Critical infrastructure operators should minimize dependencies on third-party software, simplify supply chains, and enhance the ability of core systems to withstand and recover from attacks. Regular testing of essential functions and alternative operating arrangements can help ensure that critical services remain operational even when systems are compromised.

Lastly, fostering collective defense strategies is vital to address the multi-stakeholder nature of cyber threats. Governments, infrastructure operators, and technology providers must establish trusted mechanisms for sharing indicators of compromise, understanding common dependencies, and coordinating action before tensions escalate. Clear responsibilities, decision-making authorities, and legal boundaries should be established beforehand to ensure a coordinated response when a crisis strikes.

The time for action is now. Governments and businesses must shift their focus from reactive measures to a more proactive and comprehensive approach to cyber defense. By prioritizing anticipation, preparation, and cooperation, they can significantly reduce the risk of devastating cyberattacks and protect the stability of essential services.