Cyber Security: A Pre-War Reality Check - Bert Hubert's writings
a day ago
- The speaker warns that Europe is in a 'pre-war era,' citing Donald Tusk's similar warnings about Russia, and emphasizes the need for a wartime mindset in cybersecurity.
- EU has introduced multiple new cybersecurity laws (post-Titanic regulatory environment) to address vulnerabilities, though implementation is still ongoing.
- Critical infrastructure (e.g., telecommunications, bridges) is overly complex and fragile, often failing without attacks; examples include the Botlek Bridge and the Dutch emergency communication network.
- Reliance on foreign maintenance (e.g., from China or India) for telecommunications and IT creates geopolitical risks, especially if those countries align with adversaries.
- The netherlands and Europe are losing technical expertise and ownership of their infrastructure, with non-technical decision-makers outsourcing to cloud providers like Microsoft, Google, and AWS.
- Simple security flaws (e.g., directory traversal, weak password resets) remain common in major software, undermining resilience against attacks.
- Ukraine's Kyivstar attack shows that preparedness and local expertise can enable rapid recovery, whereas Netherlands' similar systems could fail for months due to lack of in-house knowledge.