Skip to content

Security2 publishers2 min readPublished

CIA deputy director credits cyber operations for the picture that found Maduro

Michael Ellis told a Washington conference that cyber operations built the intelligence picture behind January's capture of Maduro, without describing the collection or how the agency confirmed the location before special forces launched.

The Watch · Security desk

Illustration accompanying CIA deputy director credits cyber operations for the picture that found Maduro

What happened

  • CIA Deputy Director Michael Ellis told the Billington Cybersecurity Conference on Tuesday that Operation Absolute Resolve was only made possible by a flawless intelligence picture built on cyber operations.
  • He said that picture let U.S. forces identify Nicolas Maduro's location and apprehend him within four minutes of landing on the ground.
  • Ellis gave no detail on methods, systems or sources, and did not say how the agency established the location or how it confirmed the information before the mission.
  • He said the cyber center's standalone mission center status smooths out reporting chains and lets the agency align resources behind the cyber mission.
  • Ellis said AI brings cyber operations speed and scale that would be unimaginable without the tools, and that he expects it to change every aspect of intelligence work.

Compiled by The WatchSomething wrong?How this is made

Why it matters

  • contradiction Trump and other accounts blamed the operation's power outages on a cyberattack, while experts told CyberScoop the physical attacks alone could explain them, leaving the one publicly visible cyber element of the operation unresolved.
  • constraint Without methods or a confirmation chain on the record, no one outside the agency can weigh whether cyber access located Maduro or only corroborated what human sources and imagery already had.
  • precedent A deputy director naming a normally closed cyber center as the enabler of a capture operation makes public credit-taking part of how intelligence reorganizations get defended.
  • exposure The attribution sits on the record while a narcoterrorism prosecution of Maduro and his wife runs and the defense argues immunity, moving the provenance of targeting intelligence closer to a courtroom.

A picture built on cyber operations can mean access to a phone the target carried, access to the networks of the people guarding him, or collection that did no more than corroborate a location human sources and imagery had already reported. Which of those happened stayed inside the building [3]. The four minutes Ellis cited covers only the ground assault; the collection process falls outside that window [2], and neither account gives the age of the location data at the moment the force launched [3].

The organizational chronology is checkable. The Record reports that Director John Ratcliffe promoted the longstanding Center for Cyber Intelligence to its own mission center late last year [8], and that U.S. forces took Maduro and his wife from a bunker in Caracas in January [5]. The reorganization came first, by a few months at most [13], which makes Absolute Resolve the retrospective case for a decision already taken. Ellis's argument is that cyber work belongs inside the structure used to plan collection and field missions instead of sitting beside it as a technical service [4].

The acquisition figures are the only numbers in the speech that can be checked against each other. Ellis said the CIA used to take an average of two to three years to bring new technology into use [10] and now works to a six-month target, with more than 400 purchases completed inside it [11]. That is a four- to sixfold compression of the cycle [12]. What was bought, neither report says [21]. The agency also created a Directorate of Mission Systems whose stated purpose is delivering technology to the workforce rapidly [20].

On AI, Ellis said tasks that once took hundreds of hours now take hours [17], that a human stays in the information loop, and that the agency is developing several approaches rather than locking itself to one model or vendor [18]. He said earlier this year that the CIA had produced a fully AI-generated intelligence report [19]. The Record calls Tuesday's remarks the most public acknowledgement so far of the role digital resources played in the operation, in a mission area the agency normally keeps closed [14].

What the record now holds is a deputy director's attribution of a targeting success to the mission center whose creation he is defending; the collection method remains known only to the agency itself.

What to watch

  • Whether any filing in the narcoterrorism case against Maduro and his wife forces the government to describe the provenance of the targeting intelligence.
  • Whether a U.S. official attributes the Venezuelan power outages to a specific cyber operation on the record, or the physical-attack explanation stands.
  • Whether the CIA says anything further about the six-month acquisition target beyond the 400-purchase count, including what those purchases were.
Loading claim ledger
Loading source directory links
Loading share composer
Loading topic controls
Loading related stories