Latest / The Infographics Show Podcast / How the U.S. Attacked Iran’s Nuclear Facilities

Transcript

How the U.S. Attacked Iran’s Nuclear Facilities · The Infographics Show Podcast

• 0:10
  Speaker 1: Welcome to the deep dive well, a place you come
• 0:13
  Speaker 1: to get complex topics unpacked, where we unearth those fascinating insights,
• 0:18
  Speaker 1: really cutting through the noise so you get genuinely well
• 0:20
  Speaker 1: informed fast. Today we're jumping into something we're calling beyond infographics.
• 0:25
  Speaker 1: We're going to pull back the curtain on the surprising
• 0:28
  Speaker 1: truth about supposedly isolated computer systems. You know, the ones
• 0:32
  Speaker 1: that are meant to be completely secure. We'll look at
• 0:34
  Speaker 1: how they can actually be compromised, often in ways you
• 0:37
  Speaker 1: might not expect, and the very real world impact of
• 0:40
  Speaker 1: these incredibly sophisticated attacks. We've gathered a lot of material
• 0:43
  Speaker 1: on this and we're excited to explore the layers of
• 0:46
  Speaker 1: this digital mystery with you.
• 0:47
  Speaker 2: It's a really critical topic, especially now the lines between
• 0:51
  Speaker 2: let's say, physical conflict and cyber warfare are blurring more
• 0:55
  Speaker 2: and more. It's happening right before our eyes. We'll be
• 0:58
  Speaker 2: looking at how systems that people once thought were genuinely
• 1:01
  Speaker 2: unhackable are in fact being breached, how data believed to
• 1:06
  Speaker 2: be perfectly safe gets stolen, and crucially, what all this
• 1:09
  Speaker 2: means for things like national security and you know, the
• 1:11
  Speaker 2: critical infrastructure we all rely on every single day. We've
• 1:14
  Speaker 2: got some specific examples that really highlight the sheer ingenuity
• 1:18
  Speaker 2: of attackers and also the immense, constantly shifting challenges for
• 1:22
  Speaker 2: the defenders.
• 1:23
  Speaker 1: Okay, so let's start right there. Let's unpack this whole
• 1:25
  Speaker 1: idea of an air gap. I think when most people
• 1:27
  Speaker 1: imagine the ultimate secure computer, you know, the fort Knox
• 1:31
  Speaker 1: of data, they probably picture something totally disconnected, completely off
• 1:36
  Speaker 1: the Internet, no Wi Fi, no modem connection, maybe even
• 1:40
  Speaker 1: you know, literally surrounded by guards and fences, locked deep
• 1:43
  Speaker 1: inside some hardened facility for a chief information security officer
• 1:48
  Speaker 1: a Cso this is kind of the dream setup, isn't
• 1:51
  Speaker 1: it an air gapped system? It's supposed to be hack
• 1:53
  Speaker 1: proof simply because it's physically isolated from any unsecured network,
• 1:57
  Speaker 1: especially the Internet.
• 1:58
  Speaker 2: Exactly that physical so operation is the core idea.
• 2:02
  Speaker 1: And this isn't just theoretical. We see this used in
• 2:04
  Speaker 1: really high stakes environments. I think top secret military agencies,
• 2:07
  Speaker 1: defense contractors, places where data leaks are absolutely.
• 2:10
  Speaker 2: Catastrophic acial defense secrets.
• 2:12
  Speaker 1: Yeah, but it goes beyond that too, right, It's used
• 2:14
  Speaker 1: in less obvious places that still affect us directly.
• 2:17
  Speaker 2: Oh. Absolutely, life sustaining medical equipment and hospitals, for instance,
• 2:22
  Speaker 2: a hack there could be well unthinkable.
• 2:24
  Speaker 1: Or think about highly valuable intellectual property, you know, the
• 2:29
  Speaker 1: secret sauce for some huge tech company. They'd log that
• 2:32
  Speaker 1: down on an air gapped system.
• 2:34
  Speaker 2: Trade secrets, research data designs. Yeah, billions could be at stake.
• 2:38
  Speaker 1: And then there are SCATUS systems. Yeah, supervisory control and
• 2:42
  Speaker 1: data acquisition systems. These are the brains behind our infrastructure, are.
• 2:46
  Speaker 2: Power grids, water treatment plants, pipelines, the silent digital backbone. Really,
• 2:52
  Speaker 2: they often rely on air gaps.
• 2:54
  Speaker 1: Well. Even in the newer world of cryptocurrency, those cold
• 2:57
  Speaker 1: wallets people used to store bitcoin or ethereum keys offline.
• 3:01
  Speaker 2: That's fundamentally an air gap principle, keeping those private keys
• 3:04
  Speaker 2: completely disconnected from the Internet to prevent theft.
• 3:07
  Speaker 1: So the logic seems solid. If it's not connected, it
• 3:10
  Speaker 1: can't be hacked remotely.
• 3:11
  Speaker 2: Yeah, simple, that's the foundational assumption. It makes perfect and
• 3:15
  Speaker 2: plutive sense.
• 3:16
  Speaker 1: That assumption isn't holding up so well anymore, is it?
• 3:18
  Speaker 2: No? Not really, And that's what's truly fascinating and frankly
• 3:22
  Speaker 2: a bit terrifying, that comforting dream of the unhackable, isolated computer.
• 3:27
  Speaker 2: It can turn into a nightmare surprisingly quickly when faced
• 3:30
  Speaker 2: with determined, sophisticated attackers. The hard truth is the truly
• 3:35
  Speaker 2: unhackable computer is largely a myth. Now. It's a concept
• 3:38
  Speaker 2: from maybe a simpler digital time. Even using tools that
• 3:41
  Speaker 2: are let's say, fairly common for advanced attackers these days,
• 3:45
  Speaker 2: these supposedly isolated systems can be compromised.
• 3:48
  Speaker 1: And they are being compromised. Yes.
• 3:50
  Speaker 2: The most famous, maybe the most infamous example that really
• 3:53
  Speaker 2: blew this whole idea apart, was back in twenty ten
• 3:55
  Speaker 2: the discovery of the Stuxnet malware. This thing was a
• 3:58
  Speaker 2: piece of code, so advanced, so incredibly clever, it managed
• 4:01
  Speaker 2: to actually jump an air gap. It got into highly
• 4:04
  Speaker 2: secure networks in Iran and ended up compromising get this,
• 4:08
  Speaker 2: nearly a fifth of their nuclear centrifuges, physically damaging them,
• 4:11
  Speaker 2: physically damaging them, causing huge setbacks to their nuclear program.
• 4:16
  Speaker 2: It was essentially a digital act of sabotage, widely believed
• 4:19
  Speaker 2: to be a joint US Israeli operation. The goal was
• 4:22
  Speaker 2: to cripple Iran's nuclear efforts without firing a single missile.
• 4:25
  Speaker 1: So this isn't just theory. This actually happened.
• 4:29
  Speaker 2: Proven history, devastatingly effective history, and it sent absolute shock
• 4:34
  Speaker 2: waves through the entire cybersecurity world at the time, and
• 4:38
  Speaker 2: it forces us to ask a really fundamental question, doesn't
• 4:40
  Speaker 2: it If systems specifically designed engineered to be totally cut
• 4:45
  Speaker 2: off from the outside world can be.
• 4:47
  Speaker 1: Breached like that with such significant consequences, right, what.
• 4:50
  Speaker 2: Does that mean for everything else? For all the systems
• 4:53
  Speaker 2: and devices that are connected to the Internet that are
• 4:55
  Speaker 2: inherently exposed every single day, our phones.
• 4:58
  Speaker 1: Are laptops, the servers running banks.
• 5:00
  Speaker 2: Everything exactly. It forces a complete reevaluation of our basic
• 5:04
  Speaker 2: security assumptions, from the individual user right up to national
• 5:09
  Speaker 2: security strategy. The idea that just physically separating something guarantees
• 5:13
  Speaker 2: its safety was proven to be well dangerously naive.
• 5:17
  Speaker 1: That is a chilling thought, and it leads us straight
• 5:19
  Speaker 1: into Stuck's net. As you said, probably the most famous,
• 5:22
  Speaker 1: maybe the most impactful example of an air gap breach
• 5:25
  Speaker 1: we know of.
• 5:26
  Speaker 2: It completely changed the game, absolutely a watershed moment.
• 5:29
  Speaker 1: It's widely seen as the world's first true digital weapon,
• 5:34
  Speaker 1: specifically engineered not just to spy or steal data, but
• 5:38
  Speaker 1: to cause actual physical destruction. Its deployment against Iran's nuclear
• 5:42
  Speaker 1: program was part of this secret campaign, right, Operation Olympic Games,
• 5:46
  Speaker 1: that's the.
• 5:47
  Speaker 2: Name it was given. Yes, an unacknowledged campaign, and.
• 5:49
  Speaker 1: It started under President George W. Bush apparently back in
• 5:52
  Speaker 1: two thousand and six, and then President Obama actually accelerated it.
• 5:55
  Speaker 2: That's right. Reports suggests Bush advised Obama to continue the
• 5:59
  Speaker 2: cyber attacks, seeing it as made the only way to
• 6:02
  Speaker 2: avoid a conventional military strike by Israel on Iran's facilities,
• 6:06
  Speaker 2: which Bush feared was imminent otherwise.
• 6:08
  Speaker 1: So it was a high stakes digital strategy aimed at
• 6:10
  Speaker 1: achieving major geopolitical.
• 6:12
  Speaker 2: Goals precisely using cyber means to prevent kinetic warfare essentially.
• 6:17
  Speaker 1: And Stuxnet itself the malware it's specifically targeted Siemens Step
• 6:21
  Speaker 1: seven software, didn't that software that controls industrial equipment.
• 6:24
  Speaker 2: Yes, crucial software for things like the centrifuges used in
• 6:27
  Speaker 2: uranium enrichment. And this was very much a joint US
• 6:31
  Speaker 2: Israeli effort. Israel's intelligence contribution was apparently vital. Why was
• 6:35
  Speaker 2: that they reportedly provided incredibly detailed, granular intelligence about the
• 6:41
  Speaker 2: specific setup and operations inside Iran's Natam's facility. That kind
• 6:46
  Speaker 2: of deep inside knowledge was absolutely critical for tailoring the
• 6:49
  Speaker 2: malware so precisely, thinking it effective and stealthy. The whole
• 6:53
  Speaker 2: point was to cause physical damage, make the centrifuges literally
• 6:58
  Speaker 2: tear themselves apart, but do it in a way that
• 7:00
  Speaker 2: looked like simple hardware failure, keep Iran guessing.
• 7:03
  Speaker 1: How do you even test something like that?
• 7:05
  Speaker 2: Well, reports indicate the US actually built a full scale
• 7:08
  Speaker 2: replica of parts of the Iranian nuclear site right here
• 7:11
  Speaker 2: in Tennessee. They got their hands on the same types
• 7:14
  Speaker 2: of centrifuges wow, and meticulously studied them, figured out their vulnerabilities,
• 7:18
  Speaker 2: tested different sabotage methods to see what would work best
• 7:21
  Speaker 2: and crucially, what would be hardest to detect. The level
• 7:24
  Speaker 2: of planning and resources involved was unprecedented for cyber warfare at.
• 7:28
  Speaker 1: The time, unbelievable. So how do they actually get this
• 7:31
  Speaker 1: incredibly complex weapon inside the air gapped facility? You said
• 7:35
  Speaker 1: it needed physical.
• 7:35
  Speaker 2: Access, right, and the methods really show this blend of
• 7:39
  Speaker 2: almost old school tactics mixed with very advanced digital stealth.
• 7:44
  Speaker 2: It wasn't a remote hack from afar. It relied on
• 7:47
  Speaker 2: breaching the physical isolation first. So how well, One surprisingly
• 7:51
  Speaker 2: effective method was the humble USB thumb drive, just like
• 7:55
  Speaker 2: floppy disks back in the day, malware was secretly loaded
• 7:59
  Speaker 2: on to USB.
• 8:00
  Speaker 1: Drive and someone carry them in.
• 8:02
  Speaker 2: That's how stucksnet reportedly got its initial foothold. Someone knowingly
• 8:07
  Speaker 2: or unknowingly plugged an infected USB drive into a computer
• 8:11
  Speaker 2: inside the secure NATANZ network. And this technique using USB's
• 8:15
  Speaker 2: seems to be a recurring theme with sophisticated state actors.
• 8:18
  Speaker 2: We saw it with other malware like projects are on too.
• 8:21
  Speaker 1: So the simple things still work.
• 8:23
  Speaker 2: Sometimes the simplest vectors are the hardest to defend against consistently.
• 8:26
  Speaker 2: Then there's a much more insidious method, supply chain sabotage.
• 8:30
  Speaker 1: What does that involve?
• 8:31
  Speaker 2: This is where attackers compromise systems before they even arrive
• 8:34
  Speaker 2: at the secure facility. They study the target's infrastructure, what
• 8:37
  Speaker 2: hardware they use, what software, who their suppliers are. Then
• 8:40
  Speaker 2: they go after those suppliers, who are often easier targets,
• 8:43
  Speaker 2: less protected. They hide malware or back doors deep inside
• 8:47
  Speaker 2: the hardware components or software libraries at the source, so.
• 8:50
  Speaker 1: The equipment arrives already compromised.
• 8:52
  Speaker 2: Exactly it could be malware hidden in a software update,
• 8:55
  Speaker 2: a secret backdoor coded into as chip. Even anti virus
• 8:59
  Speaker 2: vendors themselves have apparently been compromised and used as vectors
• 9:02
  Speaker 2: to attack their own customers. Sasty and planting malware directly
• 9:06
  Speaker 2: into a computer's firmware. That's incredibly hard to detect. It
• 9:10
  Speaker 2: lies dormant beneath the operating system, waiting for the right moment.
• 9:14
  Speaker 2: Then the third way, the human element always a factor,
• 9:18
  Speaker 2: insider threats. If you can't trick someone into plugging in
• 9:21
  Speaker 2: a USB, maybe you can bribe them, coerce them, or
• 9:24
  Speaker 2: use social engineering to get them to do it willingly.
• 9:27
  Speaker 1: Someone on the inside.
• 9:28
  Speaker 2: It bypasses almost all the technological defenses. So the big
• 9:31
  Speaker 2: takeaway here is that even with air gaps, the human
• 9:34
  Speaker 2: factor and the supply chain are absolutely critical weak points.
• 9:38
  Speaker 2: It's not just about digital defenses, it's about physical security, personnel, vetting,
• 9:43
  Speaker 2: and trusting your suppliers.
• 9:44
  Speaker 1: That really underscores the complexity. Okay, so stuxnet is inside.
• 9:47
  Speaker 1: It used one of these methods, maybe a combination. What
• 9:50
  Speaker 1: did it actually do once it was running on those
• 9:52
  Speaker 1: Iranian systems? How did it cause destruction? Right?
• 9:56
  Speaker 2: Snucksnet was technically speaking a masterpiece of delicious code. It
• 10:01
  Speaker 2: exploited not one, but four zero day flaws in Windows.
• 10:05
  Speaker 2: These were previously unknown vulnerabilities, meaning there were no patches,
• 10:09
  Speaker 2: no defenses against them initially poor zero days. That's huge,
• 10:13
  Speaker 2: unprecedented at the time, and it was specifically designed to
• 10:16
  Speaker 2: target those PLCs, the programmable logic controllers, the industrial computers
• 10:21
  Speaker 2: running the machinery.
• 10:22
  Speaker 1: The brains of the centrifuges.
• 10:24
  Speaker 2: Exactly, once Stuckstack got onto a PLC controlling centrifuges, it
• 10:28
  Speaker 2: would first lie low, gather data about the system's normal operations.
• 10:32
  Speaker 2: Then came the truly devious part. It would subtly start
• 10:35
  Speaker 2: reprogramming the centrifuges to destroy themselves.
• 10:38
  Speaker 1: Wow.
• 10:38
  Speaker 2: It manipulated their spin speeds. First, it would increase the
• 10:41
  Speaker 2: speed way beyond the safe operating limit up to one
• 10:44
  Speaker 2: four hundred and ten herts when normal was about one thousand,
• 10:47
  Speaker 2: sixty four hertz for about fifteen minutes. This put immense
• 10:50
  Speaker 2: stress on the machines, but invisibly yes, because at the
• 10:53
  Speaker 2: same time it was feeding false data back to the
• 10:55
  Speaker 2: control room operators, making it look like everything was running normally.
• 11:00
  Speaker 2: Then maybe twenty seven days later, it would strike again,
• 11:03
  Speaker 2: this time slowing the centrifuges way down to just a
• 11:06
  Speaker 2: few hundred hertz for almost an hour.
• 11:09
  Speaker 1: So speeding up then slowing down.
• 11:11
  Speaker 2: This rapid speeding up and slowing down caused huge stresses.
• 11:15
  Speaker 2: The aluminum rotor tubes inside the centrifuges would expand and contract.
• 11:20
  Speaker 2: Eventually parts would make contact. The machines would vibrate violently
• 11:23
  Speaker 2: and basically tear themselves apart from the inside, often catastrophically.
• 11:27
  Speaker 1: And the operators wouldn't know why.
• 11:29
  Speaker 2: They'd just see machines failing at an unusual rate, assume
• 11:32
  Speaker 2: it was bad parts or manufacturing defects. The sabotage was hidden,
• 11:36
  Speaker 2: and it worked. Stucksnet is credited with causing roughly a
• 11:39
  Speaker 2: thousand of Iran's five thousand or so centrifuges that attends to.
• 11:43
  Speaker 1: Fail a thousand machines destroyed.
• 11:45
  Speaker 2: It significantly halted their uranium enrichment activities, setting back the
• 11:49
  Speaker 2: nuclear program by months, perhaps even years, according to estimates.
• 11:53
  Speaker 1: Astonishing a digital weapon causing precise physical damage while staying hidden.
• 11:58
  Speaker 1: But you mentioned it spread, didn't you beyond just a chance?
• 12:01
  Speaker 2: Yes, that was the unintended consequence, despite being highly targeted.
• 12:05
  Speaker 2: A programming error or perhaps just an unforeseen circumstance caused
• 12:09
  Speaker 2: it to replicate beyond the netense facility.
• 12:12
  Speaker 1: How's that aptter?
• 12:13
  Speaker 2: Apparently an engineer connected an infected laptop which had been
• 12:17
  Speaker 2: inside the air gapped network to an Internet connected machine outside.
• 12:21
  Speaker 2: Once it hit the Internet, Stuxnet started spreading like a
• 12:24
  Speaker 2: typical worm.
• 12:25
  Speaker 1: Oh wow.
• 12:26
  Speaker 2: It ended up infecting industrial systems all over the world.
• 12:29
  Speaker 2: Reports suggested maybe eighty thousand computers in places like India, Indonesia,
• 12:34
  Speaker 2: Pakistan were hit.
• 12:35
  Speaker 1: So this targeted weapon became a global.
• 12:37
  Speaker 2: Incident exactly, and that really raised the alarm globally about cybersecurity.
• 12:42
  Speaker 2: It showed that even these incredibly sophisticated state sponsored cyber
• 12:46
  Speaker 2: weapons could have unpredictable collateral damage. It forced everyone, government's
• 12:51
  Speaker 2: companies to seriously invest more in cyber defenses and rethink
• 12:54
  Speaker 2: the potential consequences of digital warfare.
• 12:56
  Speaker 1: It feels like STUCKSNT really crossed a threshold.
• 12:59
  Speaker 2: It Apps solutely did. It's widely seen as the first
• 13:02
  Speaker 2: clear offensive act of pure cyber sabotage by one nation
• 13:06
  Speaker 2: against another. It fundamentally changed how we think about cyber conflict.
• 13:11
  Speaker 2: It proved digital weapons could cause real world physical damage.
• 13:15
  Speaker 2: And later analysis revealed it wasn't just a standalone thing.
• 13:18
  Speaker 2: Researchers found links suggesting stucksnet was part of a bigger picture,
• 13:21
  Speaker 2: a family of malware platforms, possibly developed under a common umbrella,
• 13:25
  Speaker 2: sometimes referred to as gossip Girl.
• 13:27
  Speaker 1: What other malware was involved, Well.
• 13:29
  Speaker 2: There was dou Cup, which seemed designed mainly for reconnaissance
• 13:32
  Speaker 2: stealing information to enable future attacks like Stuxnet. And then Flame,
• 13:36
  Speaker 2: which was this massive, incredibly complex espionage platform just hoovering
• 13:42
  Speaker 2: up data.
• 13:43
  Speaker 1: So different tools for different stages of an operation.
• 13:45
  Speaker 2: Possibly or maybe different teams collaborating, sharing code and infrastructure.
• 13:50
  Speaker 2: It pointed to a level of coordination resources and long
• 13:54
  Speaker 2: term strategic planning and cyber operations that was frankly startling
• 13:57
  Speaker 2: at the time. It showed nations states iber capabilities. We're
• 14:00
  Speaker 2: advancing incredibly fast.
• 14:02
  Speaker 1: This is truly fascinating stuff. If you're finding this deep
• 14:05
  Speaker 1: dive into the hidden corners of cyber warfare eye opening,
• 14:09
  Speaker 1: maybe take a second to give us a five star
• 14:11
  Speaker 1: rating on whatever platform you're using. It genuinely helps us
• 14:14
  Speaker 1: keep bringing these explorations to you. Okay, so we've talked
• 14:18
  Speaker 1: a lot about stucks net getting in and causing destruction.
• 14:21
  Speaker 1: But what if the goal isn't destruction. What if it's
• 14:24
  Speaker 1: about stealing data? How do you get potentially huge amounts
• 14:28
  Speaker 1: of information gigabytes maybe terabytes out of an air gapped system.
• 14:33
  Speaker 2: That's the other side of the coin. Isn't it getting
• 14:35
  Speaker 2: data out covertly?
• 14:37
  Speaker 1: The simplest way seems obvious. I guess just reverse the process,
• 14:40
  Speaker 1: use a USB stick or a CD to carry the
• 14:42
  Speaker 1: data out physically.
• 14:43
  Speaker 2: Right, that's the low tech, high risk approach. We saw
• 14:46
  Speaker 2: that with Chelsea Manning right physically removing classified data on
• 14:50
  Speaker 2: discs from a secure facility at a scif. It works,
• 14:54
  Speaker 2: but it relies heavily on having that insider access and opportunity.
• 14:57
  Speaker 1: But attackers can't always count on having an insider willing
• 15:00
  Speaker 1: to walk out with a drive.
• 15:01
  Speaker 2: Full of secrets exactly. And that's where things get really ingenious.
• 15:05
  Speaker 2: Borrowing from information theory, the basic idea in information theory
• 15:10
  Speaker 2: is that anything that can be varied, anything whose state
• 15:13
  Speaker 2: can be changed and detected, can be used to transmit
• 15:16
  Speaker 2: information anything. It's about creating the difference that makes a difference.
• 15:21
  Speaker 2: As Gregory Bateson put it, as long as the sender
• 15:24
  Speaker 2: the malware on the air gapped machine, and the receiver,
• 15:28
  Speaker 2: say a nearby smartphone, understand the code. The medium can
• 15:31
  Speaker 2: be almost anything that crosses the air gap, so.
• 15:34
  Speaker 1: You're not limited to network cables or Wi.
• 15:36
  Speaker 2: Fi, not at all. And this is revolutionary because malware
• 15:40
  Speaker 2: controlling that isolated computer can encode signals in all sorts
• 15:43
  Speaker 2: of subtle ways, and the receiver often just an ordinary smartphone,
• 15:47
  Speaker 2: maybe running some custom decoding software planted by the attacker.
• 15:51
  Speaker 1: So my phone could be spying on a nearby offline
• 15:53
  Speaker 1: computer potentially.
• 15:54
  Speaker 2: Yes, it totally changes how we need to think about
• 15:56
  Speaker 2: secure zones, common office equipment, even the computer's own hearts
• 16:00
  Speaker 2: can become covert communication channels. Let me give you some examples,
• 16:04
  Speaker 2: things proven in labs by researchers like Mordechai Guri.
• 16:07
  Speaker 1: Okay, I'm intrigued.
• 16:09
  Speaker 2: Sound is a big one. Computer speakers, even tiny built
• 16:12
  Speaker 2: in ones, can easily emit sounds at frequencies humans can't hear,
• 16:15
  Speaker 2: like eighteen to twenty four kilohertz ultrasonic range inaudible, right,
• 16:20
  Speaker 2: But a standard smartphone microphone can pick those sounds up
• 16:23
  Speaker 2: perfectly fine, maybe from twenty twenty five feet away. The
• 16:26
  Speaker 2: malware encodes data into those ultrasonic pulses. What if the
• 16:30
  Speaker 2: computer has no speakers, Believe it or not, you can
• 16:33
  Speaker 2: sometimes make internal microphones fibrate to act as makeshift speakers.
• 16:37
  Speaker 2: And if there are no speakers or mics, you can
• 16:39
  Speaker 2: still use sound. On older hard drives with moving parts,
• 16:43
  Speaker 2: malware can precisely control the read.
• 16:45
  Speaker 1: Right arm the clicking sounds.
• 16:47
  Speaker 2: Exactly, clack it back and forth in a specific pattern
• 16:49
  Speaker 2: to transmit DATO like acoustic Morse code. For modern solid
• 16:53
  Speaker 2: state drives SSDs, which have no moving parts, you can
• 16:56
  Speaker 2: modulate the speed of the.
• 16:57
  Speaker 1: Cooling fans, varying the fan.
• 17:00
  Speaker 2: Subtly changing the fan noise to encode ones and zeros.
• 17:03
  Speaker 2: It sounds like science fiction, but it works.
• 17:05
  Speaker 1: That is absolutely wild, turning fan noise into a data stream.
• 17:09
  Speaker 2: Yes, radio signals. Old computers used to leak radio waves
• 17:13
  Speaker 2: like crazy because they weren't well shielded. Attackers can deliberately
• 17:17
  Speaker 2: turn components into transmitters by manipulating the processor's activity in
• 17:22
  Speaker 2: a certain way, or even using a long USB cable
• 17:25
  Speaker 2: plugged in as a makeshift antenna. You can make the
• 17:28
  Speaker 2: computer emit faint signals on FM radio frequencies, or even
• 17:32
  Speaker 2: cellular frequencies, and.
• 17:34
  Speaker 1: Those signals can get out even through shielding.
• 17:37
  Speaker 2: Some frequencies can penetrate standard Faraday shielding, which is often
• 17:40
  Speaker 2: used to block electromagnetic signals in secure rooms. The very
• 17:44
  Speaker 2: act of processing data can be turned into a broadcast.
• 17:47
  Speaker 1: Okay, that's another level. What about power lines?
• 17:50
  Speaker 2: Yep, electrical sockets. The power lines running through the walls
• 17:53
  Speaker 2: of a building can be used as a data channel.
• 17:56
  Speaker 2: This isn't even that new. Technology for sending signals over
• 17:59
  Speaker 2: power lines has been used in home automation for decades, like.
• 18:02
  Speaker 1: Those adapters that extend your Internet over your home wiring.
• 18:05
  Speaker 2: Exactly like that Ethernet over power line. Malware can modulate
• 18:09
  Speaker 2: the computer's power consumption or inject signals onto the power line,
• 18:13
  Speaker 2: and a receiver plugged in elsewhere in the building can
• 18:16
  Speaker 2: pick it up.
• 18:16
  Speaker 1: So sound, radio waves, power lines. It seems like almost
• 18:22
  Speaker 1: anything could be a potential leak.
• 18:23
  Speaker 2: That's the takeaway. If a physical property can be varied
• 18:26
  Speaker 2: by malware, sound, light, like blinking keyboard, LEDs, heat, vibration,
• 18:31
  Speaker 2: electrical current, it can potentially be used to transmit data
• 18:34
  Speaker 2: across an air gap. We have to stop thinking of
• 18:36
  Speaker 2: security as just preventing network connections. The physical environment itself
• 18:40
  Speaker 2: can become the.
• 18:41
  Speaker 1: Network that forces a complete rethink of physical security near
• 18:44
  Speaker 1: these systems. Now, let's shift gears and consider how these
• 18:48
  Speaker 1: kinds of vulnerabilities might play out in a real world
• 18:50
  Speaker 1: high stake scenario. We're going to explore a hypothetical but
• 18:54
  Speaker 1: plausible situation set in the near future. Let's say June
• 18:57
  Speaker 1: twenty twenty five. Imagine the en going tensions between Iran
• 19:01
  Speaker 1: and Israel have escalated dramatically, pulling the United States directly
• 19:04
  Speaker 1: into the conflict. In this scenario, President Donald Trump announces
• 19:08
  Speaker 1: that the US has conducted major air strikes against three
• 19:11
  Speaker 1: key Iranian nuclear facilities four doh NATANZ, and ISFAN. This
• 19:15
  Speaker 1: falls the start of the war on June thirteenth, twenty
• 19:17
  Speaker 1: twenty five. President Trump, in this hypothetical calls the strikes
• 19:21
  Speaker 1: a spectacular military success and issues stark warnings of far
• 19:25
  Speaker 1: greater attacks if Iran doesn't seek peace.
• 19:27
  Speaker 2: Very tense situation extremely and.
• 19:29
  Speaker 1: The global reaction, as you'd expect in this scenario, is
• 19:32
  Speaker 1: immediate and divided. We see widespread condemnation from the UN,
• 19:35
  Speaker 1: from groups like Hamas and Hezbola, From the Huthis, but
• 19:38
  Speaker 1: also from major regional players like Saudi Arabia, Guitar, Oman, Iraq,
• 19:41
  Speaker 1: and furtherfield, Russia, China, Cuba, Venezuela, Chile all denounced the strikes.
• 19:46
  Speaker 2: Lots of calls, describing it as a dangerous escalation, violation
• 19:50
  Speaker 2: of sovereignty, threat to peace exactly.
• 19:52
  Speaker 1: On the other side, you have countries like the UK,
• 19:55
  Speaker 1: the EU, France, Germany, Italy, Switzerland, Japan, Australia, and U
• 20:00
  Speaker 1: New Zealand New Mexico. They express grave concern but focus
• 20:03
  Speaker 1: more on urging de escalation, restraint from all sides, and
• 20:07
  Speaker 1: a return to diplomacy.
• 20:08
  Speaker 2: It's a world on edge, and right in the middle
• 20:11
  Speaker 2: of that tension. What becomes crucial, especially in those first
• 20:14
  Speaker 2: hours and days, is figuring out what actually happened at
• 20:17
  Speaker 2: those nuclear sites, what was the real damage.
• 20:19
  Speaker 1: Because the initial reports are often contradictory.
• 20:22
  Speaker 2: Right, wildly contradictory. In this hypothetical, it perfectly illustrates the
• 20:26
  Speaker 2: fog of war and the huge potential for deliberate misinformation
• 20:30
  Speaker 2: or you know, just genuine confusion. On one side, you
• 20:33
  Speaker 2: have US and Israeli officials, President Trump, Israel's Atomic Energy
• 20:37
  Speaker 2: Commission chief, the IDF Chief of staff, US defense and
• 20:40
  Speaker 2: intelligence leaders all claiming overwhelming success.
• 20:43
  Speaker 1: Using terms like obliteration.
• 20:44
  Speaker 2: Exactly, monumental damage, obliteration, significantly damaged, set back by years,
• 20:51
  Speaker 2: effectively destroyed, massive damage. They mentioned specific details like twelve
• 20:57
  Speaker 2: bunker buster bombs hitting fodo over a hundred twenty five
• 21:00
  Speaker 2: US aircraft involved. Trump even hypothetically claims Israeli agents visited
• 21:06
  Speaker 2: Fodah afterwards and confirmed total obliteration.
• 21:09
  Speaker 1: That sounds definitive no, But then in.
• 21:12
  Speaker 2: This scenario, a leaked US intelligence assessment, albeit marked as
• 21:16
  Speaker 2: low confidence, paints a very different picture. It suggests only
• 21:19
  Speaker 2: moderate to severe damage. Crucially, it says the facilities did
• 21:23
  Speaker 2: not collapse.
• 21:24
  Speaker 1: Which seems to contradict a pliteration.
• 21:26
  Speaker 2: It does, although the assessment notes you don't necessarily need
• 21:29
  Speaker 2: the whole mountain facility at Fouridah to collapse to destroy
• 21:32
  Speaker 2: the centrifuges inside. Some anonymous officials also stated that the
• 21:35
  Speaker 2: bunkerbusters might have sealed the entrances to two sites but
• 21:38
  Speaker 2: failed to actually collapse the underground structures themselves.
• 21:41
  Speaker 1: So why the huge difference? What's going on there?
• 21:43
  Speaker 2: That's the million dollar question? Is one side strategically downplaying
• 21:47
  Speaker 2: the damage to avoid further escalation perhaps, or is the
• 21:51
  Speaker 2: other side exaggerating its success to project strength and deter
• 21:54
  Speaker 2: ieron or maybe it's a.
• 21:56
  Speaker 1: Bit of both, plus the difficulty of actually knowing right Yeah,
• 22:00
  Speaker 1: these sites are buried deep underground.
• 22:02
  Speaker 2: Exactly, assessing battle damage accurately inside deeply buried, heavily defended
• 22:08
  Speaker 2: facilities without on the ground access is incredibly difficult. And
• 22:12
  Speaker 2: add to that another layer. Reports in the scenarios suggest
• 22:15
  Speaker 2: intercepted communications indicate some Iranian military officials might have been
• 22:19
  Speaker 2: delivering false reports internally downplaying the damage to their own
• 22:23
  Speaker 2: leaders to save face, perhaps possibly or to maintain morale.
• 22:27
  Speaker 2: Whatever the reason, it just highlights how information itself becomes
• 22:30
  Speaker 2: a weapon a key part of the battlefield in modern conflicts.
• 22:33
  Speaker 2: Getting accurate ground truth as a massive challenge.
• 22:36
  Speaker 1: Absolutely fascinating the information warfare aspects. So in this hypothetical future,
• 22:40
  Speaker 1: facing these strikes and all this uncertainty, what are Iran's
• 22:44
  Speaker 1: likely strategic moves? What options do they have?
• 22:46
  Speaker 2: Well, they'd be considering a range of responses for sure.
• 22:49
  Speaker 2: One of the most significant and potentially destabilizing moves mentioned
• 22:54
  Speaker 2: in this scenario is Iran threatening to withdraw from the
• 22:57
  Speaker 2: Nuclear Non Proliferation Treaty the NP two.
• 23:00
  Speaker 1: Pulling out of the main treaty designed to stop the
• 23:02
  Speaker 1: spread of nuclear weapons.
• 23:03
  Speaker 2: Precisely in this hypothetical Their parliament is drafting legislation to
• 23:07
  Speaker 2: do just that, and they're blaming the IAEA, the UN's
• 23:11
  Speaker 2: nuclear watchdog, accusing it of essentially facilitating the attack through
• 23:16
  Speaker 2: its recent critical reports and inspections.
• 23:18
  Speaker 1: Remind us what's the core idea of the MPT.
• 23:21
  Speaker 2: It came into force in nineteen seventy. Basically, the five
• 23:24
  Speaker 2: recognized nuclear powers at the time US, UK, France, China,
• 23:29
  Speaker 2: Russia agreed not to help other countries get nukes, and
• 23:31
  Speaker 2: the non nuclear states agreed not to pursue them. In return,
• 23:34
  Speaker 2: they get access to peaceful nuclear technology.
• 23:37
  Speaker 1: And can countries leave the NPT.
• 23:38
  Speaker 2: Yes. Article eleven allows withdrawal with three months notice if
• 23:42
  Speaker 2: a country decides extraordinary events have jeopardized its supreme interests.
• 23:46
  Speaker 2: Iran would likely argue these hypothetical air strikes constitute such
• 23:49
  Speaker 2: an event.
• 23:50
  Speaker 1: What would withdrawal actually mean?
• 23:52
  Speaker 2: It would be huge. Iran would no longer be legally
• 23:55
  Speaker 2: bound by the NPT's requirements, things like IAEA inspections providing
• 23:59
  Speaker 2: oversight transparency measures and the commitment not to build a bomb, so.
• 24:03
  Speaker 1: They could potentially pursue nuclear weapons more easily and more secretly.
• 24:08
  Speaker 2: That would be the major international concern. Yes, without inspectors,
• 24:12
  Speaker 2: the world would have far less visibility into their program.
• 24:15
  Speaker 2: It's worth noting some key countries aren't NPT members anyway. India, Pakistan,
• 24:20
  Speaker 2: Israel never joined. North Korea withdrew back in two thousand.
• 24:24
  Speaker 1: And three, and some argue the treaty is unfair.
• 24:26
  Speaker 2: India, for instance, has called it discriminatory for creating nuclear
• 24:30
  Speaker 2: haves and have nots. So and a running withdrawal could
• 24:33
  Speaker 2: seriously damage the NPT's credibility as this critical bulwark against proliferation.
• 24:39
  Speaker 2: It might even encourage other states to consider developing their
• 24:41
  Speaker 2: own deterrence or at least use withdrawal threats as leverage.
• 24:44
  Speaker 2: It could set a very dangerous precedent.
• 24:46
  Speaker 1: A really serious potential geopolitical consequence stemming from these hypothetical attacks.
• 24:51
  Speaker 1: What else might Uran do well?
• 24:53
  Speaker 2: Internally? They'd almost certainly prioritize regime security and crack down
• 24:58
  Speaker 2: hard on dissent or suspected form influence. In this scenario,
• 25:02
  Speaker 2: we see security forces arresting hundreds maybe seven hundred Iranians
• 25:06
  Speaker 2: on political or security charges, including alleged massad.
• 25:10
  Speaker 1: Spies, reacting to perceived infiltration.
• 25:13
  Speaker 2: Exactly, there would be deep concern about internal unrest, maybe
• 25:17
  Speaker 2: particularly in regions like Kurdistan. The IRGC and Bossi militia
• 25:22
  Speaker 2: would be on high alert. It reflects a recognition, perhaps
• 25:25
  Speaker 2: born from experiences like Stucksnet, of just how vulnerable they
• 25:29
  Speaker 2: might be to internal espionage and infiltration.
• 25:32
  Speaker 1: And externally, would they seek help.
• 25:34
  Speaker 2: Definitely, they'd look to strengthen ties with allies and partners.
• 25:37
  Speaker 2: In this hypothetical Iran's defense minister visits China for a
• 25:40
  Speaker 2: Shanghai Cooperation Organization meeting. China is a crucial economic lifeline
• 25:45
  Speaker 2: for Iran, buying most of its oil and a source
• 25:47
  Speaker 2: of military tech. They'd also likely reach out to Russia.
• 25:50
  Speaker 2: Iran's foreign minister meets Putin, reportedly seeking more assistance, perhaps
• 25:54
  Speaker 2: feeling let down by Russias support level during the hypothetical war.
• 25:57
  Speaker 2: It shows them trying to shore up their strategic partnership.
• 26:00
  Speaker 1: And what about proxies like the Houthis.
• 26:03
  Speaker 2: They'd likely keep up the pressure. In the scenario, the
• 26:06
  Speaker 2: Houthies launch another drone at Israel, even after a supposed
• 26:09
  Speaker 2: ceasefire is announced between Ran and Israel, they state clearly
• 26:13
  Speaker 2: they aren't bound by that ceasefire and will continue attacks
• 26:16
  Speaker 2: until the situation in Gaza changes. It shows how these
• 26:19
  Speaker 2: conflicts easily spill over and involve nonstate actors, making de
• 26:23
  Speaker 2: escalation even harder.
• 26:25
  Speaker 1: This hypothetical really drives home how interconnected cyber attacks, conventional
• 26:29
  Speaker 1: military action, and global politics are. It's incredibly complex, and
• 26:34
  Speaker 1: if you're finding this detailed breakdown andsightful, please do consider
• 26:37
  Speaker 1: giving us that five star rating. It helps other listeners
• 26:40
  Speaker 1: find the show and supports us in creating more deep
• 26:42
  Speaker 1: dives like this one.
• 26:43
  Speaker 2: So, bringing it back to the core problem, if air
• 26:45
  Speaker 2: gaps aren't fool proof, if these sophisticated threats exist, how
• 26:50
  Speaker 2: do organizations or even nations defend themselves. What are the
• 26:53
  Speaker 2: practical steps?
• 26:54
  Speaker 1: Because it feels a bit hopeless if even physical isolation
• 26:57
  Speaker 1: can be beaten.
• 26:58
  Speaker 2: It's not hopeless, but it requires there's a different mindset.
• 27:01
  Speaker 2: Awareness is absolutely the first most critical step. Just understanding
• 27:06
  Speaker 2: that these threats are real, that they are possible. For instance,
• 27:09
  Speaker 2: realizing that ordinary smartphones ubiquitous devices we all carry can
• 27:14
  Speaker 2: potentially be turned into spy tools to exfiltrate data from
• 27:17
  Speaker 2: nearby isolated systems. So maybe a strict policy banning personal
• 27:22
  Speaker 2: mobile devices anywhere near truly sensitive air gapped machines is necessary.
• 27:27
  Speaker 2: Creating clear zones and thinking beyond phones absolutely, what about
• 27:31
  Speaker 2: smart watches, smart TVs in a conference room, even you know,
• 27:35
  Speaker 2: networked printers or smart light bulbs in the vicinity. Any
• 27:38
  Speaker 2: device with a processor in some way to communicate even subtly,
• 27:41
  Speaker 2: could potentially be compromised and used as a listening post
• 27:44
  Speaker 2: or a data mule. Thinking broadly about the Internet of
• 27:47
  Speaker 2: Things risk, so.
• 27:48
  Speaker 1: Vigilance about all connected devices nearby? What else?
• 27:52
  Speaker 2: Protecting against the known entry vectors we talked about. If
• 27:54
  Speaker 2: you must use USB sticks that need extreme scrutiny, rigorous spanning,
• 27:58
  Speaker 2: maybe physical checks for tamper aring, strict procedures for how
• 28:01
  Speaker 2: they're handled, who can use them, where they come from,
• 28:03
  Speaker 2: and the supply chain. That's huge, Really auditing your supply chain,
• 28:08
  Speaker 2: knowing your vendors, understanding where your hardware and software components
• 28:12
  Speaker 2: come from, demanding transparency, maybe doing independent testing. It's hard,
• 28:17
  Speaker 2: but crucial to prevent those pre penetrated systems from ever
• 28:21
  Speaker 2: entering your secure environment.
• 28:23
  Speaker 1: What about the insider threat, the human element.
• 28:26
  Speaker 2: That requires a combination of technical controls and good old
• 28:29
  Speaker 2: fashioned counterintelligence practices, logging user activity, monitoring for unusual behavior,
• 28:35
  Speaker 2: looking for anomalies that might indicate someone as compromised, careless,
• 28:39
  Speaker 2: or actively malicious. It's a delicate balance with privacy, of course,
• 28:43
  Speaker 2: but essential in high security contexts.
• 28:46
  Speaker 1: Sounds like layers of defense.
• 28:47
  Speaker 2: Are key, exactly, and perhaps the most important layer is
• 28:50
  Speaker 2: a philosophical one. Adopting the assume.
• 28:53
  Speaker 1: Breach principle, Assume you've already been hacked.
• 28:55
  Speaker 2: Or that you will be, especially if you're a high
• 28:57
  Speaker 2: value target facing sophisticated nation state adversaries. Assume that, despite
• 29:02
  Speaker 2: your best efforts, they might eventually get in.
• 29:05
  Speaker 1: How does that help?
• 29:06
  Speaker 2: It shifts your focus. You still try hard to prevent breaches, obviously,
• 29:10
  Speaker 2: but you also invest heavily in detecting breaches quickly when
• 29:13
  Speaker 2: they happen, containing the damage, and having robust plans to
• 29:16
  Speaker 2: respond and recover. If you assume breach, you design your
• 29:20
  Speaker 2: systems and processes for resilience, not just prevention. You expect
• 29:24
  Speaker 2: the worst, so you're better prepared when it happens.
• 29:26
  Speaker 1: That makes sense. Prepare for failure not just try to.
• 29:29
  Speaker 2: Avoid it, right. And what's interesting is that most of
• 29:31
  Speaker 2: these defensive strategies scrutinizing USB's vetting suppliers, monitoring insiders, assuming breach,
• 29:37
  Speaker 2: having incident response plans. They're not just for air gap systems.
• 29:41
  Speaker 1: They're good practice is for any organization trying to protect
• 29:44
  Speaker 1: itself online.
• 29:45
  Speaker 2: Absolutely, they're a fundamental cybersecurity hygiene. The lessons from Stucksnet,
• 29:50
  Speaker 2: from thinking about these advanced air gap attacks they apply broadly.
• 29:54
  Speaker 2: Good security posture requires vigilance on all fronts, technological and human.
• 29:59
  Speaker 1: Well, this deep dive to beyond infographics has certainly pulled
• 30:02
  Speaker 1: back the curtain. It's clear that in cybersecurity, especially for
• 30:07
  Speaker 1: critical systems, the old assumptions about perfect isolation being perfect security,
• 30:12
  Speaker 1: they just don't hold true anymore. That idea is, as
• 30:15
  Speaker 1: you said, maybe a relic.
• 30:16
  Speaker 2: It really is. And we've seen how incredible ingenuity, whether
• 30:19
  Speaker 2: it's used maliciously by attackers or defensively by researchers, can
• 30:23
  Speaker 2: find ways to use the most unexpected things ultrasonic noise,
• 30:27
  Speaker 2: subtle radio waves, even the building's power grid as channels
• 30:30
  Speaker 2: to cross those physical gaps and move information.
• 30:33
  Speaker 1: It's a constant technological arms race, isn't.
• 30:35
  Speaker 2: It definitely always pushing the boundary, is always forcing us
• 30:38
  Speaker 2: to rethink what's possible, both in attack and defense.
• 30:41
  Speaker 1: So, as we wrap up, what does this all mean
• 30:43
  Speaker 1: for you, our listener, Maybe it's a reminder that real
• 30:47
  Speaker 1: security isn't just about the height of your firewall or
• 30:50
  Speaker 1: the thickness of the vault door. It's also deeply about
• 30:53
  Speaker 1: the human element, about knowing who and what you trust
• 30:56
  Speaker 1: in your supply chain and maintaining this constant awareness that
• 31:00
  Speaker 1: vulnerabilities can pop up in the most surprising, unexpected places.
• 31:04
  Speaker 1: It really makes you wonder, doesn't it, what other seemingly
• 31:07
  Speaker 1: impossible channels, what other physical phenomena might be leveraged for
• 31:10
  Speaker 1: covert operations in ways we haven't even conceived of yet.
• 31:14
  Speaker 1: Thank you for joining us on this deep dive into
• 31:16
  Speaker 1: beyond infographics. If you found this exploration valuable, please do
• 31:20
  Speaker 1: share it with someone you think would appreciate it and
• 31:22
  Speaker 1: leaving us that five star rating really does help. We
• 31:25
  Speaker 1: appreciate you being part of our community here at the
• 31:27
  Speaker 1: Deep Dive. Until next time,