Cache Me If You Can

In this episode of Cache Me If You Can, we explore how advances in artificial intelligence are reshaping the balance between cyber attackers and defenders. As increasingly capable AI models discover vulnerabilities, navigate complex systems, and accelerate sophisticated cyber operations, organizations face a critical question: can defenders harness these same capabilities quickly and safely enough to gain the advantage?

Our guest, Carol Kuntz, adjunct fellow with the CSIS Strategic Technologies Program and former senior Department of Defense official, joins us to discuss Making AI Work for Cyber Defenders: A Strategy for Strengthening U.S. Cybersecurity. Drawing on the report, Kuntz explains why powerful AI models alone are not enough—and why secure infrastructure, effective workflows, human oversight, and the ability to translate vulnerability discoveries into deployable fixes are essential to realizing AI’s defensive potential.

The conversation examines what AI-enabled cyber defense looks like in practice, from persistent monitoring and vulnerability discovery to patching and incident response. We discuss the challenges of getting defensive tools to small businesses, open-source maintainers, and critical infrastructure operators; emerging federal efforts to coordinate vulnerability remediation; and how policymakers and developers can govern increasingly powerful frontier AI capabilities without undermining legitimate cybersecurity research or slowing innovation.

On this special edition episode, Lauryn Williams joins Will Todman on the State of Play podcast for a crossover episode of Cache Me If You Can.

Cyberattacks targeting water and wastewater utilities have been reported in at least a dozen U.S. states since late July. While there has been no widespread contamination or immediate threat to public drinking water, the attacks appear serious and potentially coordinated.

Alongside Nikita Shah, Caitlin Welsh, and Will Todman, Lauryn discusses why U.S. critical infrastructure remains vulnerable, how the United States should respond, and whether there is enough evidence to attribute the attacks to Iran.

In this episode of Cache Me If You Can, we explore why advanced manufacturing has become a cornerstone of U.S. economic competitiveness and national security. As strategic competition with China intensifies and supply chain vulnerabilities become increasingly apparent, the United States faces difficult questions about what it will take to rebuild its industrial base for the twenty-first century.

Our guest, Liz Reynolds, Professor of the Practice at MIT and former Special Assistant to the President for Manufacturing and Economic Development at the National Economic Council, joins us to discuss Priority Technologies: Ensuring U.S. Security and Shared Prosperity, a new volume examining the technologies that will shape America's future. Drawing from her chapter on advanced manufacturing, Reynolds explains why innovation alone is not enough and why manufacturing capacity, skilled workers, resilient supply chains, and strong institutions all play essential roles in sustaining technological leadership.

The conversation examines whether industrial policy can simultaneously strengthen national security and create broadly shared economic opportunity in an era of increasing automation. We discuss the lessons of the CHIPS and Science Act, the evolving relationship between advanced manufacturing and semiconductors, and what success should look like as the United States seeks to rebuild strategically important industries.

In this episode of Cache Me if You Can, we explore one of the most consequential cyber alliances in the Indo-Pacific: cooperation between the United States and the Republic of Korea. As cyber threats grow more sophisticated, from state-sponsored operations and ransomware to cryptocurrency theft and attacks on critical infrastructure, both countries are grappling with how to strengthen resilience and move beyond coordination toward deeper operational collaboration.

Our guests, Dr. Jim Lewis of CSIS and researchers Sunha Bae and Joohui Park of South Korea's National Security Research Institute (NSR), draw on their expertise in cyber strategy, international law, and critical infrastructure security to examine the evolving threat landscape and the future of allied cyber cooperation. Together, they unpack how North Korea's cyber activities have evolved, the growing challenge of cryptocurrency-enabled illicit finance, and the role cyber operations play in Pyongyang's broader national strategy.

We discuss South Korea's emerging approach to active cyber defense, lessons from U.S. concepts such as defend forward and persistent engagement, and the legal and policy considerations that accompany more proactive cyber operations. The conversation also explores how the U.S.–ROK alliance can operationalize cyber cooperation, coordinate responses to shared threats, and work with regional partners to build a more resilient and secure digital environment across the Indo-Pacific.

In this special edition of Cache Me if You Can, we explore the evolving cyber threat landscape facing the United States and what it would actually look like to stand up a dedicated U.S. Cyber Force.

As cyberattacks on critical infrastructure become more frequent and sophisticated, questions around how the Pentagon organizes, trains, and equips cyber operators have become increasingly urgent. From state-backed operations like SolarWinds and Salt Typhoon to the rapid rise of AI-enabled cyber capabilities, the current force generation model is being tested by the demands of modern conflict in cyberspace.

Guests Dr. Erica Lonergan, Lieutenant General Ed Cardon (Ret.), and Joshua Stiefel join us to discuss why policymakers and military leaders are increasingly examining the possibility of an independent military service dedicated to the cyber domain. Drawing on the work of the CSIS Commission on U.S. Cyber Force Generation, the conversation examines both the strategic need for a Cyber Force and the practical realities of implementing one.

The episode explores what a Cyber Force could look like in practice, including its mission scope, personnel structure, institutional alignment within the Department of Defense, and relationship with existing organizations like U.S. Cyber Command. We also discuss how a dedicated cyber service could better recruit and retain top cyber talent while leveraging private-sector innovation and emerging technologies.

Finally, we examine what is at stake for the United States as cyber operations become increasingly central to military competition and national security in the digital battlefield.