How Can Hackers Build Trust in Digital Systems?

TL;DR

Cybersecurity must protect the digital systems that support daily life, physical safety, manufacturing, transportation, and healthcare, not merely passwords and financial data. Building trust requires collaboration among friendly hackers, companies, lawyers, technologists, policymakers, and increasingly technology-aware regulators, especially as connected infrastructure remains exposed through outdated systems and information practices face greater scrutiny.

Transcript

Please welcome Amit Elazari Baran and Keren Elazari Hello. Hi, good afternoon, everyone. Hello, hello. Welcome to the year 2025, a vision of our digital future. In this future, the weather is a toasty 120 degrees Fahrenheit across all the mega cities of the Northern Hemisphere, and you're having just a regular day, although something happened. Your... Read More

Key Insights

• Cybersecurity is about protecting a digital way of life, not only passwords, credit card numbers, or social-media information. Connected technology now supports healthcare, transportation, manufacturing, utilities, personal devices, and other services whose failure can affect daily life and physical safety.
• Public trust is damaged when cyberattacks make essential technology appear unreliable. Hospital patients who cannot receive scheduled treatment and travelers who see infected information screens may become afraid to adopt paperless tickets, connected services, and other forms of digital innovation.
• WannaCry disrupted the United Kingdom's national healthcare services and left 30% of its clinics offline. The incident illustrates that cyberattack consequences should be evaluated through people's lost access to medical treatment, not merely downtime, financial damage, or ransom payments.
• VPNFilter is modular malware discovered on more than half a million routers around the world by the FBI and network-security companies. Its presence in the network infrastructure of a Ukrainian chlorine-treatment facility showed how malware can threaten physical systems rather than simply pursue information.
• Outdated operating systems create a broad attack surface because they remain active in hospitals, factories, train stations, and other environments. Although newer systems are available to some people, end-of-life environments continue supporting important services across many regions and cannot simply be ignored.
• Technology supply chains are vulnerable to disruptions in production infrastructure. A WannaCry variant stopped production at Taiwan Semiconductor Manufacturing Company, identified as the largest provider of system-on-a-chip components for new Apple iPhone devices, showing how legacy environments can hinder state-of-the-art products.
• Friendly hackers can serve as security partners by uncovering weaknesses and helping organizations improve defenses. Keren Elazari's work with government agencies, technology companies, universities, and BSidesTelAviv reflects the argument that hackers can influence the digital future for both good and bad.
• Privacy regulation is shifting attention from information confidentiality, integrity, and availability toward possible misuse and individual control. European rules beginning in May 2018 and California protections starting in January 2020 give users rights concerning collection, recipients, access, and deletion of their information.

Questions & Answers

Q: How has cybersecurity expanded beyond protecting passwords?

Cybersecurity now concerns the reliability of a connected way of life, not only the secrecy of passwords, credit card numbers, or social-media information. Hospitals, transportation networks, factories, utilities, cloud systems, vehicles, delivery drones, and personal devices can all depend on software. When those systems are compromised, the consequences may include unavailable treatment, interrupted production, unreliable transportation, or threats to physical safety.

Q: Why is public trust important to cybersecurity?

Public trust determines whether people are willing to adopt and rely on digital innovation. A patient denied scheduled treatment because hospital computers are unavailable may lose confidence in connected healthcare. Likewise, malware displayed at a train station can make travelers question paperless tickets and other digital services. Cybersecurity failures therefore create fear and mistrust beyond measurable downtime, financial damage, and ransom payments.

Q: What did WannaCry reveal about essential services?

WannaCry revealed that malware can interrupt services that directly affect people's lives. The attack disrupted the United Kingdom's national healthcare services and left 30% of its clinics offline. Patients arriving for scheduled MRI appointments or other life-saving and life-improving treatments could not necessarily receive them because the hospital computers could not be trusted, turning a technical incident into a human problem.

Q: Why are outdated operating systems a cybersecurity risk?

Outdated and end-of-life operating systems remain active in factory floors, hospitals, train stations, and other important environments around the world. These systems create a wide attack surface even when many consumers already use newer software. Their continued role is especially significant in Southeast Asia and Latin America, and organizations cannot simply switch off the digital technologies on which people and services depend.

Q: What does VPNFilter show about infrastructure attacks?

VPNFilter shows that malware targeting infrastructure may pursue consequences more serious than stealing credit card data or intellectual property. The malware appeared within the network infrastructure of a chlorine-treatment facility in Ukraine. The FBI and network-security companies discovered it on more than half a million routers worldwide, and analysts described its modular design and ability to infect other endpoint devices.

Q: How can cyberattacks disrupt technology supply chains?

A cyberattack can stop production at a company that supplies components for widely used consumer technology. Taiwan Semiconductor Manufacturing Company, described as the largest provider of system-on-a-chip components used in every new Apple iPhone device, was hit by a WannaCry variant. Production stopped for a period, demonstrating that advanced products can still depend on manufacturing environments affected by outdated operating systems.

Q: How can friendly hackers improve cybersecurity?

Friendly hackers can identify vulnerabilities, help organizations understand weaknesses, and shape technology toward safer outcomes. Keren Elazari argues that hackers have the power to influence the future for good or bad. Her work with government agencies, technology companies, universities, and the BSidesTelAviv security-research event supports a collaborative model in which helpful hackers contribute to stronger, more trustworthy systems.

Q: How are privacy laws changing information security?

Privacy laws are expanding the focus from whether information remains confidential, accurate, and available to whether organizations misuse it and whether individuals can control it. European protections beginning in May 2018 and California protections starting in January 2020 give users rights concerning collected information, its recipients, access to stored information, and requests for deletion. Regulators are also becoming more technologically knowledgeable.

Summary & Key Takeaways

• The digital future depends on connected systems that influence transportation, healthcare, manufacturing, utilities, and personal devices. Attacks against these systems can disrupt physical services and weaken public confidence. Cybersecurity therefore must protect the dependable digital way of life that people increasingly expect, rather than focusing exclusively on confidential information.

• WannaCry demonstrated how malware can disrupt essential organizations, including the United Kingdom's national healthcare services, where 30% of clinics went offline. Related incidents affected German train-station screens and Taiwan Semiconductor Manufacturing Company production, showing how vulnerable software can interrupt services, supply chains, and people's willingness to trust digital innovation.

• Friendly hackers can help organizations discover weaknesses, but laws and contracts may either support or stifle their research. Effective cybersecurity requires bridges among researchers, companies, technologists, lawyers, and policymakers. Privacy regulation adds another dimension by giving users greater knowledge and control over how organizations collect, share, access, use, and delete personal information.