We're sunsetting PodQuest on 2025-07-28. Thank you for your support!
Export Podcast Subscriptions
cover of episode What Trump Means for Tech: D.C. Takes on AI and Cybersecurity

What Trump Means for Tech: D.C. Takes on AI and Cybersecurity

2025/1/31
logo of podcast WSJ Tech News Briefing

WSJ Tech News Briefing

AI Deep Dive AI Chapters Transcript
People
B
Belle Lin
D
Dustin Volz
Topics
Belle Lin: 我关注到中国、伊朗等外国政府支持的黑客正在利用新的AI技术加强对美国和其他全球目标的网络攻击。 Dustin Volz: 我发现中国、伊朗等地的数十个黑客组织正在利用诸如Google Gemini等生成式AI平台来加强其网络攻击,这些AI平台被用于诸如研究目标组织等日常任务。Google已经采取行动,暂停了与这些黑客相关的账户。 Belle Lin: 中国AI公司DeepSeek的出现及其与美国顶级AI模型竞争的能力,对国家安全构成重大影响。 Dustin Volz: DeepSeek的出现引发了美国官员对中国技术的担忧,包括可能收集用户输入信息的情报以及美国在AI竞赛中领先地位的缩小。DeepSeek可能被用于传播宣传或以有利于中国共产党的方式回应信息请求。 Belle Lin: 拜登政府的网络安全行政命令在两党间存在共识,但特朗普政府可能对其持负面态度。 Dustin Volz: 拜登政府采取了强制性网络安全措施,而特朗普政府可能更倾向于自愿合作模式。鉴于特朗普政府的对华强硬立场,以及中国构成的网络威胁,预计其将采取更强硬的网络安全措施。 Belle Lin: 特朗普政府将面临来自外国行为者(特别是中国)的重大网络威胁,例如“盐台风”电信攻击。 Dustin Volz: 特朗普政府可能会采取更积极的网络攻击策略,包括对恐怖组织和国家采取行动,以及加强对中国的间谍活动。特朗普政府对联邦员工的重大调整,以及对网络安全审查委员会工作的终止,可能对美国国家网络安全产生重大影响。 Belle Lin: 特朗普政府对联邦员工的调整,可能导致人才流失,并对美国国家网络安全产生负面影响。

Deep Dive

Shownotes Transcript

Translations:
中文

ADP knows any big thing, any small thing, any trendy thing. Even a trendy thing that everyone knows isn't a great idea, but management just wants us to give it a try for a bit can change the world of work. From HR to payroll, ADP designs forward-thinking solutions to take on the next anything.

Welcome to Tech News Briefing. It's Friday, January 31st. I'm Belle Lin for The Wall Street Journal. All this week, we are exploring what President Trump's second term could mean for the tech industry over the next four years and beyond. Cybersecurity threats are ever increasing for businesses, consumers, and the government.

Just this week, The Wall Street Journal reported that hackers linked to China, Iran and other foreign governments are using new artificial intelligence tech to bolster their cyber attacks against the U.S. and other global targets.

We'll speak with our reporter Dustin Volz about how government hackers are using AI chatbots and the implications of a new AI model from the Chinese firm DeepSeek. Then we'll discuss how the new Trump administration looks at cybersecurity and why we're likely to see a more aggressive response to cyber attacks.

So, Dustin, what exactly are these AI-enabled hackers doing? And how do we know they're doing it? Well, they're likely using all sorts of generative AI platforms. But in this case, the research is from Google's Gemini chatbot. That's the research that we had an exclusive look at. And what it shows is that dozens of different hacking groups in China, Iran, and elsewhere were turning to Gemini to try to bolster their cyber attacks.

And what has Google said about this so far? Google issued this research in a bid for transparency, basically to say, look, we know that bad actors are using our chatbot and seeking to weaponize generative AI for their malicious gain. Here's sort of a rundown of what we're seeing. And in doing so, they also said they took actions against accounts that they

identified as linked to these bad actors and suspended them. In addition to that, it just highlights that generative AI, like for a lot of ordinary people, can be enormously useful for sort of on-the-margin productivity hacks. You can use it to help write emails and craft cover letters. Similarly, these hackers are sort of using it for almost rudimentary or mundane tasks like researching organizations that they want to target with phishing attacks, for example. And what we're seeing so far is

This is a preview of what's to come. And at least for right now, it doesn't seem to be some sort of doomsday scenario where

These hackers are creating first of their kind, never before seen attacks that are destroying the Internet. Right. And we've also this week seen the emergence of the Chinese AI company DeepSeek, which says that it rivals top tier AI models from the U.S. for just a fraction of the cost. What are some of the national security implications of a model like the one from DeepSeek?

Well, there's a lot of national security implications, according to U.S. officials, about any Chinese technology, and DeepSeek is sort of just the latest to animate some concerns. For starters, we've seen agencies already instruct their employees to not use DeepSeek because you

You've got to think about the level of intelligence that you could glean from just being able to see what people are writing into these systems. In addition to that, the concerns about DeepSeek are that this is revealing or reflecting that the U.S. is not nearly as far ahead on

the AI arms race as they hoped or wanted to believe that they were. Now, there's a lot of dispute about this because of uncertainty about exactly how DeepSeek was able to accomplish what it did and whether or not it really is as cheap as its boosters are saying it is. But this is really just the latest...

flashpoint in U.S.-China relations over technology and the bout for technological supremacy between the two. Finally, another area of concern is that

Deep Seek, like TikTok, could be used to either promote propaganda or respond to questions for information and data in a way that is advantageous to the Chinese Communist Party. For example, a lot of people on social media this week were noting that Deep Seek, if you ask it about what happened in Tiananmen Square in 1989, it basically says that it's unable to process that question and cannot answer it.

That's a very different answer than the one you'll get from ChatGPT or Gemini or other chatbots that are built by U.S. companies. Coming up, how will the Trump administration handle some of the biggest cyber threats facing the nation? That's after the break. ADP imagines a world of work where smart machines become too smart. Copier, I need 15 copies of this. Printing. By the way, irregardless, not a word, Janet. Yeah, I know.

Page six should be regardless of or irrespective of. Just print them, please. If it were a word, Janet, it would mean without irregard, which is... Copier! Switch to silent mode. Let's put a pin in it. Anything can change the world of work. From HR to payroll, ADP helps businesses take on the next anything.

So let's take a step back here. Former President Biden issued an 11th hour cyber executive order right before he left office. Do we have a sense for how the Trump administration feels about this executive order and what was in it? So senior Biden administration officials really tried on their way out the door to stress that cybersecurity has been a largely bipartisan issue for a long time and that

There's nothing super controversial in the executive order that they issued, but it is a lengthy one with sort of a grab bag of different issues that it addresses, including redefining who the government can sanction to include ransomware criminal groups, for example, and mandating that software suppliers to the federal government verify rights.

and sort of publicly audit the fact that their software is known to be secure, and a whole host of other things. There's also a number of things that the Biden administration did to create cybersecurity mandates on a variety of industries, including after the Colonial Pipeline hack of 2021, which led to the longest conduit of fuel on the East Coast was shut down.

Generally, we hadn't seen much of that prior to the last administration because for a long time, government basically pursued a view of cybersecurity that industry should be voluntary in its cooperation with security standards. But that's the best way to get businesses, big and small, to adopt best practices. But as bad things continue to happen every year with nation-state hacking and ransomware

and all sorts of other terrible things, the Biden administration started pursuing a mandated approach rather than a voluntary arrangement. And Republicans have generally been much more hostile to that type of framework. On the other hand,

A lot of the worst hacking that we're seeing is coming from China. And the Trump administration is setting itself up to be very, very hawkish on China. Some of the other officials that Trump has tapped for key positions, like the chairman of the Federal Communications Commission, has said that China is a really serious cybersecurity threat and we need to do everything we can to address it. Specifically, there's the Salt Typhoon telecom attack, which was hugely significant, which

It happened during the Biden administration, but now its after effects continue into the Trump administration. Are there other sort of categories of big threats, maybe from foreign actors, nation states, especially from China, that the Trump administration will have to deal with? The salt typhoon intrusions in the telecom networks is certainly top of mind for everybody in cybersecurity right now. It is an enormously significant threat.

that has serious counterintelligence implications and ensnared the phone calls of President Trump and Vice President Vance. Right before the Biden administration left office, they took some actions against China by sanctioning the Chinese technology firm, the contractor that they said was working for Chinese intelligence to carry out those intrusions.

The Trump administration officials, including National Security Advisor Mike Waltz, formerly a Florida congressman, have said that they want to be more aggressive in responding to these types of attacks, that they want to go on offense essentially in cyberspace. One thing that is always helpful in figuring out what an administration might do is what they've done in the past. And so we can look to the first Trump administration. And among the things that President Trump did during his first term was

basically unshackle U.S. Cyber Command, the military's cyber outfit for sort of offensive cyber strikes in theaters of war and elsewhere. He basically allowed for them to pursue cyber attacks against adversaries with fewer bureaucratic restraints and fewer interagency debate about those types of things. So we saw that in the first Trump administration, and that was actually kept in place largely by the Biden administration.

Now, the second term, we are likely to see further efforts to pursue that kind of response to various attacks. And so that could be disruptive operations against certainly terrorist groups potentially, but also nation states could be on the receiving end of that. And also stepped up espionage is something that CIA Director John Ratcliffe has talked a great deal about, is wanting to pursue more aggressive spycraft against China as well.

Okay, last question for you, Justin. You cover cybersecurity as well as Capitol Hill very closely. What are you most keeping your eye on now that we are several days into the new Trump administration, whether in the coming days ahead or maybe even further the weeks and the months ahead? Well, there's a significant shakeup right now in the federal workforce. On January 20th, the day Trump was inaugurated, the acting DHS secretary issued a memo to all advisory committees at DHS saying,

essentially disbanding them and terminating the work that they were doing. And that included the Cyber Safety Review Board, which was in the middle of a months-long investigation into China's salt typhoon hacks of U.S. telecoms. Again, this is a hack that ensnared Trump's own cell phone calls.

And now the work of that board has been terminated entirely. And this is just sort of to further the efforts by the Trump administration to reduce federal work, federal agency headcount, to upend a lot of federal protections, to install a lot of people who are seemingly loyal or seen as loyal to the Trump agenda in places.

not just senior roles, but in the rank and file of the federal government. One thing I'm going to be watching very closely, as others will be too, is sort of just how do these sort of drastic changes in the federal workforce happen?

potentially impact U.S. national cybersecurity? And are we going to see people leaving either voluntarily or by being pushed out? And is there going to be a brain drain? Are there going to be different people brought on board who are going to take those jobs and run with them? This is all sort of a huge question mark. And to some extent, you have this with every administration with any transition, but clearly you're seeing a great deal more of uncertainty around

and anxiety about what people are going to be doing and whether or not their jobs are even going to exist a day from now, a week from now, a month from now, let alone a year or two from now. That was our reporter, Dustin Boltz. And that's it for Tech News Briefing. Today's show was produced by Julie Chang. Logging off for the weekend, I'm your host, Belle Lynn.

Jessica Fenton and Michael LaValle wrote our theme music. Our supervising producer is Catherine Milsop. Our development producer is Aisha Al-Muslim. Scott Salloway and Chris Sinsley are the deputy editors. And Falana Patterson is the Wall Street Journal's head of news audio. We will sign back in this afternoon with TNB Tech Minute. Thanks for listening. ♪

ADP knows any big thing, any small thing, any trendy thing, even a trendy thing that everyone knows isn't a great idea, but management just wants us to give it a try for a bit can change the world of work. From HR to payroll, ADP designs forward-thinking solutions to take on the next anything.