June 17, 2020
by Joseph Fitsanakis
Complacency and substandard security by the United States Central Intelligence Agency were behind the Vault 7 leak of 2017, which ranks as the greatest data loss in the agency’s history, according to an internal report. The Vault 7 data loss was particularly shocking, given that the CIA should have taken precautions following numerous leaks of classified government information in years prior to 2017, according to the report.
The Vault 7 data leak occurred in the first half of 2017, when the anti-secrecy website WikiLeaks began publishing a series of technical documents belonging to the CIA. Once all documents had been uploaded to the WikiLeaks website, they amounted to 34 terabytes of information, which is equivalent to 2.2 billion pages of text. The information contained in the Vault 7 leak is believed to constitute the biggest leak of classified data in the history of the CIA.
The Vault 7 documents reveal the capabilities and operational details of some of the CIA’s cyber espionage arsenal. They detail nearly 100 different software tools that the agency developed and used between 2013 and 2016, in order to compromise targeted computers, computer servers, smartphones, cars, televisions, internet browsers, operating systems, etc. In 2017 the US government accused Joshua Adam Schulte, a former CIA software engineer, of giving the Vault 7 data to WikiLeaks. Schulte’s trial by jury was inconclusive, and a re-trial is believed to be in the works.
Now an internal report into the Vault 7 disclosure has been made public. The report was compiled by the CIA WikiLeaks Task Force, which the agency set up with the two-fold mission of assessing the damage from the leak and recommending security procedures designed to prevent similar leaks from occurring in the future. A heavily redacted copy of the report has been made available [.pdf] by Senator Ron Wyden (D-OR) who is a member of the US Senate Select Committee on Intelligence. An analysis of the report was published on Tuesday by The Washington Post.
The report recognizes that insider threats —a data leak perpetrated on purpose by a conscious and determined employee, or a group of employees— are especially difficult to stop. It adds, however, that the Vault 7 leak was made easier by “a culture of shadow IT” in which the CIA’s various units developed distinct IT security practices and their own widely different systems of safeguarding data. Many cyber units prioritized creative, out-of-the-box thinking, in order to develop cutting-edge cyber-tools. But they spent hardly any time thinking of ways to safeguard the secrecy of their projects, and failed to develop even basic counterintelligence standards —for instance keeping a log of which of their members had access to specific parts of the data— according to the report.
Such standards should have been prioritized, the report adds, given the numerous high-profile leaks that rocked the Intelligence Community in the years prior to the Vault 7 disclosure. It mentions the examples of Edward Snowden, a former contractor for the National Security Agency, who defected to Russia, as well as Chelsea Manning, an intelligence analyst for the US Army, who gave government secrets to WikiLeaks. Manning spent time in prison before being pardoned by President Barack Obama. Snowden remains in hiding in Russia.
The CIA has not commented on the release of the internal Vault 7 report. An agency spokesman, Timothy Barrett, told The New York Times that the CIA was committed to incorporating “best-in-class technologies to keep ahead of and defend against ever-evolving threats”. In a letter accompanying the release of the report, Senator Wyden warned that “the lax cybersecurity practices documented in the CIA’s WikiLeaks task force report do not appear limited to just one part of the intelligence community”.
► Author: Joseph Fitsanakis | Date: 17 June 2020 | Permalink
Senior US Republicans split on whether CIA director Gina Haspel should be fired
November 12, 2020 by Joseph Fitsanakis 1 Comment
SENIOR FIGURES IN THE United States Republican Party appear to be split on whether President Donald Trump should fire Gina Haspel, the first female director of the Central Intelligence Agency, who has been serving in that capacity since 2018. According to The New York Times, Haspel is on a list of senior intelligence and national security officials that the embattled American president plans to fire in the coming days. He already fired key defense officials this week, including the Secretary of Defense Mark Esper, as well as the Pentagon’s head of policy and director of intelligence.
Trump administration insiders, who want to see Haspel gone, are aware that Trump will not be president for much longer, and are thus pushing for her immediate termination, said The Times. They blame Haspel for not stopping the CIA whistleblower who filed a complaint about the president’s July 2019 telephone call with his Ukrainian counterpart, Volodymyr Zelensky. The complaint led to Trump’s impeachment in the House of Representatives. Haspel had no role in that incident, but senior Trump loyalists believe she could have stopped the complaint before it reached the office of the US Intelligence Community’s Inspector General.
Haspel is also accused by Trump loyalists of not following the directives of the Office of the Director of National Intelligence, under John Ratcliffe, a Trump appointee who serves as the most senior intelligence officer in the US government. The CIA and the ODNI have not seen eye-to-eye since the latter’s founding in 2005. Additionally, unlike Haspel, who rose through the ranks of the Intelligence Community, Ratcliffe had no intelligence experience before this year, when he was appointed by Trump to lead the ODNI. It is believed that his status as an outsider has made it difficult for him to exercise leadership in the close-knit Intelligence Community.
But other senior Republicans have rallied around Haspel. They are said to include the powerful Senator Mitch McConnell, who on Tuesday met with Haspel in his office on Capitol Hill. The closed-door meeting between McConnell and Haspel alarmed the Trump inner circle, with Donald Trump, Jr., calling the CIA director a “trained liar” and accusing those Republicans who support her of undermining his father. The CIA declined to comment on the story.
► Author: Joseph Fitsanakis | Date: 13 October 2020 | Permalink
Filed under Expert news and commentary on intelligence, espionage, spies and spying Tagged with CIA, Donald Trump, Gina Haspel, News, United States