The next is a transcript of an interview with CBS Information cybersecurity professional and analyst Chris Krebs that aired Sunday, February 20, 2022, on "Face the Nation."
MARGARET BRENNAN: U.S. intelligence officers stated Friday that Russia was behind this previous week's cyber-attacks in Ukraine that knocked banks and authorities web sites offline. Now, there is a warning that American firms have to be on alert. For extra, we go to CBS Information cybersecurity professional and analyst Chris Krebs. Good morning to you.
CBS NEWS CYBERSECURITY EXPERT AND ANALYST CHRIS KREBS: Morning, MARGARET.
MARGARET BRENNAN: CBS reported that the Treasury Division truly sat down with some company leaders, together with from JPMorgan, from Citigroup, a few of the nation's largest monetary establishments. What do you see as essentially the most quick menace right here within the U.S. from a cyber-attack that occurs, you recognize, in a rustic 5,000 miles away?
KREBS: Effectively, the U.S. authorities has been assembly with essential infrastructure companions now for a lot of months, so it hasn't simply been final couple of weeks, as I perceive it is going again so far as November and even earlier particular to the escalation of tensions right here. What they've completed is look again during the last a number of years of the place Russian safety companies and cyber actors have focused U.S. infrastructure, and that is power, that is transportation, logistics and, after all, finance. And so they're additionally combining it via a sequence of battle video games and situation playing- situations enjoying out how the Russians might reply to any sanctions we might impose. And that is, I feel, the place we get to the monetary companies trade. And in order that's in all probability on the high of the record as you think about a few of the sanctions we have talked about. And that may be in all probability the- the counter transfer by the Kremlin and a few of these safety companies.
MARGARET BRENNAN: So, two kind of distinct threats. One, unintended penalties of spillover, and the opposite if Russia decides to focus on the USA. What precisely is the cyber doctrine of the Biden administration? Are you aware?
KREBS: Effectively, I feel- I feel that is unclear. I feel it is in all probability a continuation of the prior administration the place we enabled the Cyber Command actors and a few of these different operators to exit over there underneath the defend ahead and protracted engagement philosophy to get into the networks of our adversaries to grasp the place they're, the place they are going and to place sand of their gear, so to talk, and add friction to their operations in order that they're too busy cleansing up their mess over there moderately than- than coming right here. And I feel we're seeing a little bit of that forward- defend ahead mission manifesting in a few of the latest disclosures.
MARGARET BRENNAN: The White Home briefed on this Friday, and the cyber director stated that whereas there is not any credible menace at this precise second, if the U.S. is hit, we're ready to reply. The president himself stated if American firms are hit, we'll reply. What does the response appear to be? Would we even realize it occurred?
KREBS: That is- I feel that is an important query of whether or not it might be an overt or covert, and it is not essentially that it might be cyber for cyber, so to talk. You might even see financial measures; you may even see diplomatic measures in response to any kind of cyber exercise in opposition to U.S. infrastructure. However at a minimal, what I'd anticipate is, once more, concentrating on of the programs, the infrastructure that the Russian operators use to conduct their assaults and make it in order that they can't do a observe up assault utilizing that- that very same recognized infrastructure.
MARGARET BRENNAN: How, you recognize, extra broadly by way of the technique of the Biden administration, what do you consider their choice to declassify this cyber-attack, which they did fairly darn rapidly and a few of the different intelligence that they've picked up?
KREBS: Effectively, first, I feel it's- it is price mentioning that, as I discussed earlier, they- they've had a reasonably ahead leaning engagement effort with infrastructure companions, with trade to guard home programs right here at dwelling. As just lately as final Saturday, CISA, the company that I led within the final administration launched their Shields Up marketing campaign, which supplies sources to guard programs right here within the U.S. However extra importantly, and I say this can be a former counteractive measures aficionado within the authorities, I have been actually impressed with how they've proactively referred to as out the dangerous exercise, the malign exercise of the Russian authorities to once more delay a few of their efforts. I imply, this can be a fast declassification that in years previous, notably on cyber actions, has taken months, if not a 12 months or extra. We're seeing it occur in a matter of hours. And it is it's- it is a devoted effort, it is purposeful and it's- I hope we see extra of it sooner or later.
MARGARET BRENNAN: How would you assess NATO's capacity to reply to a cyber-attack? You heard Secretary Blinken say, you recognize, it's one thing that shall be addressed. What would NATO do? Do they also have a plan?
KREBS: Effectively, NATO has capabilities, they usually've- they've declared that cyber falls underneath the- cyber-attack, moderately, on a member would fall underneath the Article 5 provisions that may allow them as a- NATO as a group to reply to an assault on a NATO member. Nevertheless it's not clear what that appears like simply in follow, a minimum of simply but. The language in Article 5 is- is about restoring stability and restoring safety, in addition to simply the edge matter of an assault must be intentional and devoted, possible on a NATO member. So, at this level, not Ukraine, however as a substitute maybe Poland, the U.S. or anybody else. However within the meantime, NATO can present help groups for defensive functions, and the U.S. has been supporting Ukrainian cyber- cyber efforts for fairly a while to assist bolster these networks, as you simply heard the ambassador speak about a few of the focus that they've had bettering their cybersecurity.
MARGARET BRENNAN: All proper. Chris Krebs, thanks for the warning to be on alert. Admire your time right now.