Citizen Lab director warns cyber industry about US authoritarian descent

The head of Citizen Lab, a leading organization focused on exposing government misuse of spyware, is urgently calling on the cybersecurity sector to confront the mounting threats of authoritarianism. Ron Deibert is set to deliver a keynote address at the Black Hat cybersecurity conference in Las Vegas, one of the year's largest gatherings of cybersecurity professionals. In an interview with TechCrunch prior to his speech, Deibert expressed his intention to highlight what he perceives as a troubling blend of technology and authoritarianism. He pointed to big tech companies as playing a significant role in fostering what he terms a "collective insecurity" that is often overlooked by the cybersecurity community. He described the current political climate in the United States as a "dramatic descent into authoritarianism," but emphasized that the cybersecurity field holds the power to counteract this trend. Deibert believes it's crucial for cybersecurity experts to remain aware of the political landscape and to take a stand, saying, "Alarm bells need to be rung for this community. At the very least, they should be aware of what’s going on and, hopefully, they can not contribute to it, if not help reverse it." Historically, the cybersecurity industry has often sidestepped political issues, but recent events have thrust politics into the forefront of the cybersecurity narrative. This year, former President Donald Trump initiated an investigation into Chris Krebs, the former CISA director, after Krebs publicly defended the integrity of the 2020 election. Following this, Krebs was dismissed via a tweet, leading to significant fallout in the cybersecurity community. Jen Easterly, who succeeded Krebs at CISA, has also called for a proactive approach from cybersecurity professionals. In a LinkedIn post, she warned of the dangers of remaining silent as experienced leaders face political backlash, stating that it threatens the very institutions the community aims to protect. Deibert, who recently authored "Chasing Shadows: Cyber Espionage, Subversion, And The Global Fight For Democracy," echoes Easterly's concerns. He cautioned that the evolving landscape of security issues may render traditional cybersecurity challenges trivial when viewed against the broader context of diminishing checks and balances. Of particular concern to Deibert is the potential reduction of threat intelligence teams within major tech firms like Meta, Google, and Apple. These teams are essential in monitoring government hackers and detecting threats to users, having previously thwarted significant hacking attempts. Deibert noted that although these teams have been performing exceptional work, there is uncertainty regarding their future as companies continue to cut back on safety and moderation resources. "The question is how long will that last?" he pondered, emphasizing the critical role these teams play in safeguarding against government spyware threats.