Cybersecurity and the COVID-19 Pandemic
Cybersecurity during COVID-19
The COVID-19 pandemic significantly increased cyber threat complexity due to the rapid shift to telework.
Attack surfaces multiplied, requiring immediate IT focus on employees' home systems, networks, and ISPs.
Teleconference providers (e.g., Zoom) and Virtual Private Networks (VPNs) saw unprecedented growth.
Second and Third-Order Effects on Cybersecurity
Scamming: Increased use of Information Operations (IO) principles and emotional narratives (e.g., fake charity funds).
Work-Life Merge: Telework blurred boundaries between private and work worlds, increasing expectations for after-hours availability.
Economic Shifts: Companies recognized potential savings from reduced office space; employees saved on commutes.
E-commerce Growth: Significant increase in online shopping led to the decline of many brick-and-mortar stores.
Politicization of Issues: Hostile actors leveraged pandemic-related divisions (e.g., mask-wearing, vaccine hesitancy) to sow dissent.
Future Outlook and Key Articles
Anticipated Annual Pandemic Responses: Future annual flu seasons may become significant events with widespread cyber implications.
"Cybersecurity within a Pandemic Environment" (Jeffrey M. Erickson): Introduces the cyber challenges amplified by the pandemic.
"COVID-19 and the Cyber Challenge" (GEN (Ret.) Keith Alexander & Jamil Jaffer): Stresses the need for a whole-of-society approach and clear rules of behavior against threats.
"COVID-19 and Cyber – Foreshadowing Future Non-Kinetic Hybrid Warfare" (Rob Schrier): Argues for a whole-of-nation approach against asymmetrical hybrid attacks in pandemic environments.
"Seven Cybersecurity Lessons Coronavirus Can Teach the Armed Forces (and Us All)" (Ray Rothrock & Dr. Mike Lloyd): Uses the pandemic as an analogy for cybersecurity best practices, cyber hygiene, and building resilience.
Research Articles:
"Great Systems Conflict" (Dr. Chris Demchak): Discusses the paradigm shift to great systems conflict and the need for cyber resilience domestically and with allies.
"Unleash the Dragon: China’s Resilience in a Great Systems Conflict Era" (Mark Bryan Manantan): Examines China's use of information warfare to advance strategic narratives during COVID-19.
"Homefront to Battlefield: Why the U.S. Military Should Care About Biomedical Cybersecurity" (Nataliya Brantley): Explores risks and vulnerabilities of medical devices.
"The Initiation of State-Sponsored Cyberattacks" (Dr. Lance Hunter, Dr. Craig Albert, & Eric Garrett): Analyzes factors indicating which states are most likely to initiate cyberattacks.
The COVID-19 pandemic greatly amplified cybersecurity threats as the rapid shift to telework expanded attack surfaces and highlighted vulnerabilities in home systems and networks. This led to increased scamming leveraging emotional narratives, blurred work-life boundaries, significant economic shifts towards e-commerce, and the politicization of pandemic-related issues by hostile actors. Looking forward, annual health crises may continue to have major cyber implications, necessitating a whole-of-society approach to address evolving challenges like hybrid warfare, cyber hygiene, and resilience in an era of great systems conflict. Key research also focuses on topics such as China's information warfare, biomedical cybersecurity, and the factors behind state-sponsored cyberattacks.
Dumbed down:
When COVID-19 hit, lots of people started working from home. This made it easier for hackers to find ways into computer systems because home setups aren't as secure as office ones. Hackers also created more scams, often playing on people's feelings. The lines between work and home life got blurry, and businesses saw a big move to online shopping. Bad actors also used pandemic topics like masks or vaccines to cause arguments. In the future, big health problems might keep causing similar cybersecurity issues. To fight this, everyone needs to work together, practice good online habits