Understanding the Cybersecurity Threat Landscape

During a recent House Committee on Homeland Security hearing titled “Unconstrained Actors: Assessing Global Cyber Threats to the Homeland,” Congressman Pfluger (TX-11) emphasized the urgency of addressing cyber threats to U.S. infrastructure. Pfluger, who chairs the Subcommittee on Counterterrorism and Intelligence, engaged with cybersecurity experts on imminent risks and government preparedness. Witnesses included Adam Meyers of CrowdStrike, retired Rear Admiral Mark Montgomery from the Foundation for Defense of Democracies, Brandon Wales of SentinelOne, and Kemba Walden of the Paladin Global Institute.

Pfluger opened the discussion by citing the increasing frequency of cyber incidents, such as those caused by groups like Volt Typhoon, Storm-0558, and Salt Typhoon. These incidents, he noted, highlight vulnerabilities in critical infrastructure, including telecommunications and energy production. Pfluger underscored the need for a unified government response, asking the experts to outline their concerns and recommend strategies to bolster the nation’s defenses.

Congressman Pfluger: Legislative Efforts to Address Vulnerabilities

A focal point of the hearing was Pfluger’s proposed Securing Every Vector, Enhancing Networks (SEVEN) Act, which aims to strengthen cybersecurity defenses against attacks exploiting the Signaling System 7 (SS7) telecommunications protocol. SS7 is integral to global communication systems, managing call routing, messaging, and billing. However, its vulnerabilities allow hackers with specialized access to intercept calls, read messages, and track users’ locations.

Pfluger explained the SEVEN Act’s goal of addressing these risks by creating a dedicated task force of cybersecurity experts and coordinating efforts across federal agencies. “Our adversaries are exploiting weaknesses in the digital backbone of our telecommunications infrastructure to spy on Americans,” Pfluger said. “The SEVEN Act is critical to ensuring the safety of U.S. networks.”

Previously, Pfluger and Congressman Randy Weber had written to the Federal Communications Commission (FCC) and the Cybersecurity and Infrastructure Security Agency (CISA), raising concerns over unauthorized attempts to access user data via SS7. By advancing the SEVEN Act, Pfluger seeks to ensure national security through a proactive and comprehensive response to such threats.

Expert Recommendations and Government Response

During the hearing, the witnesses stressed the importance of collaboration between the government and private sector to address cybersecurity challenges. They highlighted the need for a centralized lead agency to oversee cybersecurity initiatives, ensure rapid incident response, and prevent overlapping efforts that may weaken national defenses.

Congressman Pfluger pressed the experts on what they viewed as the most pressing threats. The panel pointed to nation-state actors, including those linked to China and other adversaries, targeting critical sectors like telecommunications and energy. Pfluger urged swift action, noting the global scale of cyber threats and their potential to disrupt essential services.

The hearing underscored the critical need for legislation like the SEVEN Act and a unified government approach to safeguarding the nation’s infrastructure. Pfluger’s leadership in addressing these cybersecurity concerns reflects a broader push to ensure that the U.S. remains resilient against evolving global cyber threats.