Cyber security specialists are asking the wrong question when it comes to securing computer networks against external threats, said Richard Bejtlich, chief security officer for private security contractor Mandiant of Alexandria, Va. Testing for network vulnerably gives Air Force cyber officials no idea of the enemy they are up against, said Bejtlich Friday at AFA’s Cyber Futures Conference in National Harbor, Md. Instead, cyber defenders should develop requirements for an “Are you compromised?” assessment to provide real intelligence on the enemy, he suggested. “I think that could be a real game changer, because right now we’re going onto a football field—nobody knows what the score is, we have a sense that we’re getting killed, but the only metrics we have” are on our own defenses and not the forces the enemy is bringing to bear, he explained. “You just paid a lot of money for a test [for which] you know what the answers are going to be,” he added.
House lawmakers unveiled a new reconciliation package July 15 with $60 billion for defense, $290 billion less than the Pentagon has been seeking, a day after a Senate vote to advance the annual defense policy bill failed—developments that show the perilous state of the Pentagon’s ambitious plans for fiscal 2027.