Transcripts For BBCNEWS Newsnight 20170512

Suggested that there might be take recordings of conversations. James comey had been leading an inquiry into possible collusion between trump Election Officials and russia. He was fired on tuesday. Now the president has tweeted that is a summary of the news. Newsday is coming up later, actually, it isnt, we say that, it is just actually, it isnt, we say that, it isjust a bbc actually, it isnt, we say that, it is just a bbc world. Now it is time for newsnight. A global cyber attack has disrupted nhs hospitals and gp surgeries in england and scotland resulting in cancelled operations and it shutdown. It replicates itself on one computer to the next and theres really no stopping it. It spreads itself like a plague. So who and what is behind the attack and can they be stopped . Tonight a former hacker, a former gchq boss, and the chair of the gps council are here. Whats it like for one of the rising young stars of the labour party, whos not a corbyn fan, selling the manifesto on the doorstep . I think it does make it easier when you have some clear lines in the sand between you and the other side. So, yeah, i think it will make it easier, actually, having the manifesto. Missing in General Election action. We go in search of one of the most senior figures in theresa mays cabinet, to try to find out if shes been sidelined. Where is Andrea Leadsom . Andrea Andrea Leadsom Andrea Leadsom, secretary of state for what used to be called ag and fish. Andrea leadsom, are you here . And caitlyn jenner, who before she transitioned from bruce, was feted as one of the most famous athletes in the world, talks about her long and difficultjourney to womanhood. It takes a while, time, not two years in, to kind of leave bruce behind, because he is still in there. Good evening as we go on air the extent of the International Ransomware cyber hack on 70 countries, which has struck nhs hospitals and gp surgeries in england and scotland is becoming clear. 25 nhs trusts in england and nine commissioning groups, and five nhs trusts in scotland have been affected. Several hospitals have announced that only patients requiring Emergency Treatment should attend a es and some surgery has been cancelled. Many heathcare trusts have switched off their it systems which control everything from x ray imaging systems, to pathology test results, phone and bleep systems, and patients administrative information. Tonight the Prime Minister said the government was not aware of any evidence that patient data had been compromised. Well were aware that a number of nhs organisations have reported that theyve suffered from a ransomware attack. This was not targeted at the nhs. Its an International Attack and a number of countries and organisations have been affected. The National Cyber Security Centre is working closely with nhs digital to ensure that they support the organisations concerned and that they protect patient safety. Our Technology Editor David Grossman is with me now and has been following this story this evening. Just how deep are the tentacles of this ra nsomwa re . We know that it affects Windows Operating Systems by microsoft. Over the easter weekend, somebody dumped on the internet on an obscure Website Tools to exploit former abilities. On an obscure Website Tools to exploit vulnerabilities. Who did it, we do not know. But rumours are swirling on the internet that the tools were developed by the American National security agency. We know from wikileaks they have those kinds of capabilities but we cannot verify where the tools came from or who use them. We know that somebody exploited the vulnerabilities that those tools exploited to attack a lot of organisations. They spread the malware around the internet using ransomware. Microsoft say that all that was necessary for anyone to protect themselves was to use free antivirus software, and make sure Operating Systems were regularly updated. Microsoft issued the patches. The question is, why didnt the nhs do that, why were they vulnerable . Today we found out it seems the nhs is especially vulnerable because theyve not been able to afford to update all of their systems. Some are so elderly they cannot be patched. Just as hospitals have had to urgently update their response to the threat of superbugs, so they are now having to consider their digital hygiene, how to stop machines getting infected and then, spreading a virus to others in the network. It kind of replicates itself from one computer to the next and theres really no stopping it, it spreads itself like the plague. The nhs, it seems, was not specifically targeted but it has been particularly vulnerable. In terms of the nhs, there have been individual Malware Attacks on individual trusts over the last 18 months but this is the first time weve had 21 trusts who have been affected so its affecting multiple trusts at the same time and thats the difference. This is the screen that appeared in hospitals and gp surgeries demanding a 300 ransom to unlock files and systems. It meant cancelled operations and treatments. I had a cannula, i darent show you. They had shaved, they were going to open me up. My arms have been shaved. I was all ready to go. Nil by mouth. At half past one the surgeon turned up and said unfortunately weve been hacked and theres nothing we can do, we cant operate on you today. What will be particularly alarming to ministers and officials at the Department Of Health is how apparently simple this attack is. It doesnt seem to be the work of hacking geniuses, its more the cyber equivalent of a Street Robbery and yet its managed to paralyse a good chunk of the Nations Health care system. Someone, somewhere in the nhs system, it seems, opened an E Mail Attachment or clicked on a link which let the malware in. This threat, though, has been known about for at least six weeks and Security Patches to protect against it have been issued. But it seems many nhs machines had not been updated and were vulnerable. Krishna guntupalli is an nhs doctor who has studied hospital it systems. He wrote an Article Warning about the possibility of a major shutdown just two days ago although he says he wasnt talking about the hospital where he works, which is unaffected by the problems. These Operating Systems tends to be quite old. So a study injanuary suggested that 90 of nhs trusts use windows xp Operating Systems, which was released 15, 16 years ago by microsoft and isnt being patched orfixed by microsoft, and theyve advised people to upgrade. The problem is, its not the same as a home user. In a health care organisation, you have proprietary Software Running on top of those. That means unfortunately Health Care Organisations may be some of the last to upgrade from old Operating Systems or programmes. That increases their vulnerabilities. That is what the hackers are exploiting. The solution is simple but for cash strapped nhs trusts, very expensive. Not using out of date software, not using systems that are just too old to handle constant updates. They have to be remedied. Theres got to be something thats done. If you constantly use Old Technology thats been hacked easily, or can easily be compromised, you can expect that to happen over and overagain. This attack doesnt seem to have resulted in any data loss, but the kind of personal information that hospitals hold is really valuable to criminals. You can, after all, change your Credit Card Number or your bank details quite easily but you cant change your date of birth or blood type. First and foremost, we hold patient data. And this data is sensitive, including clinical information, date of birth, addresses. All of this can be sold by hackers and we dont know exactly, but maybe about ten times as much as credit card information. In a statement, the nhs in england said that patients should continue using gp and Hospital Services while they need them but ask them to use them wisely while what they call this Major Incident is continuing. Jake davis is a reformed hacker, who found global infamy in 2011 as topiary the face of the notorious lulz sec hacking group. He was convicted of hacking in 2013 and now works as a security consultant. Professor Helen Stokes Lampa Rd is chair of the Royal College of gps council and joining us from bristol is brian lord, former gchq Deputy Director for intelligence and cyber operations. Good evening. First of all, professor stokes, what is the impact on services and what will it be over the next few days . So far we know quite a lot of gp services and Hospital Services have been shutdown in terms of it systems but for those patients who need urgent care, doctors and patients were trained to look after patients before we had computers. We can still talk to them and examine them and make decisions on the basis of what we see and feel, not what the computers tell us. When you listen to David Grossman and the doctor there saying the scope of the hack, you have Sensitive Information on computers and a lot of these nhs computers are out of time . Yes, but they have been a good seven so far. The systems are backed up. The data is safe, it is there. But we have an absence of data in the short term to help us deal with patients, putting them through the systems. It is going to be a bit disrupted. David grossman there said that some of the nhs equipment is so elderly it cannot be patched so you will need new systems . Indeed, and ourselves and other colleges have called for serious Infrastructure Investment for a long time. Its overdue. Gchqs position, everyone is calling for all sorts of ways to fix this tonight, who is at work here . Firstly, there will be two types of response. Gchq and the National Crime agency are looking at the crime itself, then you have Cyber Security centres working with nhs digital to work out how they can resolve the issue. This is the next step up for International Organised crime. International organised crime began with low level theft and low level use of ransomwa re. By and large they have contracted it out and are now moving to larger scale, far more sustained and coordinated efforts, whether it is getting inside the infrastructure of banks or, as we can see here, a well timed and well co ordinated delivery of a simple tool, but delivered at mass scale into vulnerable areas. The vulnerable area is the nhs. As far as we know its not in areas, like banks or Operating Systems for the energy industry, it is only the nhs . The nhs is especially vulnerable due to the old nature of its it systems, and also because it is very complex with interconnectivity between surgeries, trusts, boards, and so on. Consequently, there is an awful lot of openings for delivery of this kind of basic malware. Jake davis, you have been a hacker in the past, what do you think is going on . I think what is terrifying is how simple it is. The kind of attack and ransomware that was deployed, it may have been a sophisticated Criminal Organisation orjust some kid that hit a go button and a worm has spread. Theyve woken up and gone, i have 50,000 computers. It wasnt only the nhs, they were hit completely by accident, telefonica as well. Yes, in 70 different countries. They are putting at this ransomware, paid 300. Do people pay up . In this ransomware there is a bitcoin address to pay the ransom. Weve seen a few been paid through it. Yes, it encrypts the files