Cyber attack can be like the Hiroshima nuke: The man who got Shin Bet to be serious on cyber

Dr. Harel Menashri, a former Shin Bet officer and founder of the agency's cyber division, has warned that a well-placed cyber attack could have catastrophic consequences akin to the Hiroshima atomic bomb. Speaking with the Jerusalem Post's senior military analyst Yonah Jeremy Bob, Menashri recounted how he convinced the Shin Bet in the 1990s to treat cyber threats with the seriousness they deserved. At the time, the Shin Bet, traditionally focused on human intelligence and Arabic-language operations, regarded cyber issues as trivial. Menashri sought to change that perception through a dramatic demonstration. He presented a small piece of malware, a "tiny Trojan," which he claimed had the potential to trigger massive destruction in the Haifa Bay region. His argument was that such digital weapons, if deployed effectively, could lead to loss of life on a scale comparable to historical nuclear attacks. Now leading the cyber program at the Holon Institute of Technology, Menashri has continued to emphasize the growing threat posed by cyber warfare. He detailed how malicious code can manipulate SCADA systems, software and hardware used to monitor and control industrial processes, to create physical disasters. For instance, altering pressure levels in a gas pipeline could result in explosions, while hacking into railway signaling systems might cause trains carrying hazardous materials to derail. Menashri highlighted the increasing sophistication of cyber threats, particularly noting Iran's capabilities in exploiting known software vulnerabilities rapidly. He added that artificial intelligence has further accelerated these threats, enabling automated intrusions from start to finish. Despite the escalating risks, Menashri pointed out that there is currently no binding international law governing cyberspace. He stressed that the absence of ethical considerations in discussions surrounding cyber warfare is a critical concern. His strongest criticisms were reserved for China, whom he described as not being Israel's ally. He noted that Chinese companies are mandated by law to share data and source code with their government, raising concerns about the potential for espionage. Additionally, Menashri expressed worries over the use of Chinese-manufactured vehicles by Israeli defense officials, suggesting that these vehicles might inadvertently transmit sensitive information back to China. These concerns were echoed in the Haifa Port controversy, where U.S. authorities opposed the involvement of a Chinese firm in operating a new terminal due to its strategic location near key naval installations. According to Menashri, the issue gained traction after interventions by former U.S. national security advisor John Bolton and ex-Secretary of State Mike Pompeo, who brought it to the attention of Israeli Prime Minister Benjamin Netanyahu. Following this incident, an oversight committee was formed, but Menashri argued that it continues to suffer from significant weaknesses. Those who initially raised alarms about the security implications of the port deal were reportedly dismissed, with their concerns framed as purely economic rather than security-related. Menashri's insights underscore the complex interplay between technology, geopolitics, and national security. As cyber threats evolve, so too must the policies and alliances that govern them. His experiences and warnings serve as a reminder of the ever-present need for vigilance in the digital age.