Admiral Mike Rogers on the Age of AI-Powered Threats

Key Takeaways:

• The game has shifted from prevention to resilience. Rogers argues the probability of an adversary breaching your network is now high enough that leaders should assume it — and focus energy on limiting lateral movement, gaining internal situational awareness, and responding fast, rather than defending the perimeter alone. 
• The line between government and private sector is dissolving on the battlefield. From Starlink in Ukraine to frontier AI labs, technology in modern conflict is increasingly driven by companies, not governments — and governments are turning to the private sector to fill capability gaps. 
• China is the most complete cyber threat. It's the rare actor that combines all three factors that matter: a high tolerance for risk, top-tier capability, and — with 1.4 billion people — enormous capacity. Rogers cites the Volt Typhoon and Salt Typhoon campaigns targeting the U.S. power grid and telecom backbone. 
• Healthcare is the critical-infrastructure sector to worry about most. Finance is well-defended — wealthy, focused, well-resourced, with engaged leadership. Healthcare is the opposite: fragmented, thin-margined, massively connected at the device level, and holding huge concentrations of sensitive data. 
• AI collapses the time between finding a vulnerability and exploiting it. Discovering flaws isn't new — doing it at machine speed and scale, then tying it to agentic execution that adapts in real time as defenders respond, is. It's forcing a fundamental rethink of how we defend networks.

In this episode of Let's Talk Future, Oppenheimer's Bill Farmer, Head of Aerospace and Defense Technology Investment Banking, sits down with Admiral Mike Rogers — former Commander of U.S. Cyber Command and former Director of the National Security Agency — for a wide-ranging conversation drawn from his 37-year naval career at the center of America's cyber defense. Rogers opens with a candid assessment of the greatest risk facing the country: not any single adversary, but the nation's growing difficulty coming together to solve hard problems in a polarized moment. From there, he turns to the paradox at the heart of modern cybersecurity — that the connected, automated, data-driven economy we've built for speed, scale, and efficiency is inherently vulnerable by design. "If we were only looking at this world from a cybersecurity perspective," he notes, it's not the world we would have built. That reality, he argues, is why the entire discipline is shifting from guarding the walls of the castle to understanding what's happening inside them.

The discussion moves through the changing relationship between government and industry in conflict — with Starlink in Ukraine as a signature example — and into the sensitive question of whether the private sector should conduct offensive cyber operations, which Rogers frames through the historical lens of Revolutionary-era letters of marque, along with the very real liability questions boards now face. He assesses the most formidable state actors, walks through the uneven readiness of America's 16 critical infrastructure sectors, and explains why healthcare keeps him up at night while finance does not.

Finally, Rogers examines how artificial intelligence is reshaping the threat landscape — attackers using AI to scan a network, identify flaws, build an execution plan, and adapt in real time as defenders respond — and what it means that, for perhaps the first time, the technologists themselves are asking government to step in and help regulate. He closes on America's global position: still the clear driver in AI, no longer the leader in drones (a title he hands to Ukraine), and a reminder that the private sector remains the engine of both economic growth and national security.