Title: DEF CON 32 - DEF CON Unplugged: Cocktails & Cyber with Jeff & Jen - Jen Easterly, Jeff Moss

CISA Director Jen Easterly emphasizes that the agency's success depends on building trusted community partnerships and shifting the industry focus to "Secure by Design" to treat software vulnerabilities as product defects 3:01-3:43, 12:59-14:57.

Key Takeaways:
• Easterly argues that "people trust people, not institutions," necessitating CISA's engagement with hacker and research communities to build relationships and improve security collaboration 3:01-3:43.
• The industry must call issues "product defects" instead of "vulnerabilities," shifting accountability to technology vendors who must prioritize security over speed to market 12:59-14:57.
• A primary concern is the "Volt Typhoon" threat, where Chinese actors use "living off the land" techniques to compromise critical infrastructure 28:21-29:33.

The session concluded with discussion on cyber liability frameworks and CISA's commitment to leveraging AI for defense while mitigating risks 46:07-47:03.

Sources:

• 3:01 Easterly on community engagement and trust.
• 12:59 Discussion on Secure by Design and product defects.
• 28:21 Volt Typhoon threat to critical infrastructure.
• 46:07 Cyber liability and AI frameworks.