Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Attacks/Breaches

7/10/2017
05:11 PM
Connect Directly
Twitter
LinkedIn
Google+
RSS
E-Mail
50%
50%

Trump Suggests, Then Pulls Back on Joint Russian Cybersecurity Unit

President Donald Trump proposed, and quickly rescinded, the idea of a joint cybersecurity unit with Russian President Vladimir Putin during this week's G20 summit.

On Saturday, July 9, President Donald Trump suggested via a tweet the formation of a cybersecurity alliance with Russia following a conversation with Russian President Vladimir Putin. But later that day, Trump pulled back from that statement.

The two leaders met during the G20 summit in Hamburg, Germany. Their meeting, which lasted two hours and fifteen minutes, centered on the current and future nature of the relationship between the United States and Russia.

Trump tweeted about the potential for a cybersecurity unit after, he claimed, Putin "vehemently denied" Russia's meddling in the 2016 US presidential election. The "impenetrable Cyber Security unit" would guard against "election hacking, & many other negative things."

(Source: Twitter)

(Source: Twitter)

The tweet instantly sparked criticism from officials who were outraged at the idea that Moscow could be trusted in such a collaboration. US intelligence has discovered evidence indicating Russia did interfere with the 2016 election and targeted voting systems in multiple states.

Some security experts took Trump's tweet with a grain of salt.

"As a professional, I tune out his tweets to a degree … you couldn't take them literally as serious policy statements unless there's a follow-up," says John Bambenek, manager of threat systems at Fidelis Cybersecurity. "It seems so out of left field it's hard to take it seriously."

However, he continues, the idea could have serious implications if it became reality, as "a large part of our cybersecurity concerns emanate from that part of the world." Further, Russian intelligence services have relationships with many of the same criminals to share information, a structural impediment that would prevent the two from collaborating.

"How that cooperation would work would be awkward," he notes.

Michael McFaul, former US ambassador to Russia, said such a collaboration "just will not happen," Reuters reports. Restrictions on sharing information with Russia would prevent giving the country a closer look at US cyber capabilities; similarly, Moscow would also be resistant to sharing its own capabilities with the US.

Never Mind

When Trump changed his tune later on July 9 after his initial Russian cybersecurity unit statement, he said his mention of a joint cybersecurity unit with Russia does not mean he thinks it will become reality.

"It can't," he noted, though a ceasefire in Syria did happen. Trump also mentions the negotiation of a ceasefire in a separate tweet, adding how it's time to "move forward" in collaborating with Russia.

(Image: Twitter)

(Image: Twitter)

Russian Foreign Minister Sergey Lavrov reported after the meeting that Trump accepted Putin's statements claiming Russia was not involved in the election, according to a CNN translation. A White House briefing on the meeting, which has since been deleted, placed more focus on moving forward than enforcing consequences for the alleged interference.

"I think what the two Presidents, I think rightly, focused on is how do we move forward; how do we move forward from here," said Secretary of State Rex Tillerson in a statement. "Because it's not clear to me that we will ever come to some agreed-upon resolution of that question between the two nations."

Bambenek says he would be surprised if there is anything legitimate behind Trump's tweet. He does acknowledge the US and Russia will eventually need to cooperate on cybersecurity -- though doing so for elections "would be amusing."

"As a general rule, all things being equal, we're nations with our own laws," he explains. "But the Internet respects no international boundaries. We're not going to solve cybercrime unless we get nations to play in the sandbox somehow."

Such a collaboration would ideally focus on solving conventional cybercrime and protecting citizens from threat actors. While it's theoretically conceivable for nation-states to work together on this, it's tricky because of how foreign policy works.

"Is it possible? Yes, human beings can decide to play nice," he says. "Is it reasonable to expect they would? All foreign policy is based on exchanges. If they ask for 'X', they'll want 'X' in return. There could be a deal, but nations will act in their own self-interest."

Related Content:

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
7 Tips for Infosec Pros Considering A Lateral Career Move
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2020
For Mismanaged SOCs, The Price Is Not Right
Kelly Sheridan, Staff Editor, Dark Reading,  1/22/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
IT 2020: A Look Ahead
Are you ready for the critical changes that will occur in 2020? We've compiled editor insights from the best of our network (Dark Reading, Data Center Knowledge, InformationWeek, ITPro Today and Network Computing) to deliver to you a look at the trends, technologies, and threats that are emerging in the coming year. Download it today!
Flash Poll
How Enterprises are Attacking the Cybersecurity Problem
How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-3154
PUBLISHED: 2020-01-27
CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email.
CVE-2019-17190
PUBLISHED: 2020-01-27
A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastBrowserUpdate.exe (which is running as NT AUTHORITY\SYSTEM) when AvastSecureBrowser.exe checks for new updates. When the update check is triggered, the...
CVE-2014-8161
PUBLISHED: 2020-01-27
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.
CVE-2014-9481
PUBLISHED: 2020-01-27
The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.
CVE-2015-0241
PUBLISHED: 2020-01-27
The to_char function in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a (1) large number of digits when processing a numeric ...