Cyber Without Borders: Standing guard 210 kilometers from risk. [Special Edition]

Summary

Podcast Summary: T-Minus Space Daily – "Cyber Without Borders: Standing Guard 210 Kilometers from Risk" [Special Edition]

Date: March 2, 2026
Hosts: Maria Varmazes & Liz Stokes
Series: Part 3/3 – Reflections on NATO's 2025 Cyber Coalition Exercise

---

Episode Overview

This special edition concludes a three-part series in which hosts Maria Varmazes and Liz Stokes reflect on their attendance at NATO’s 2025 Cyber Coalition exercise in Estonia. The episode is both a recap and a deeper meditation on the significance of cyber defense, solidarity, and the very real implications of international cooperation—especially against the backdrop of geopolitical tensions and the proximity to the Russian border.

---

Key Topics & Discussion Points

1. Entering NATO’s Cyber Range—Secrecy, Messaging, and “The Three Cs”

[02:48 - 05:51]

• The Experience of Visiting the Cyber Range

  • Maria and Liz recall the high-security environment ("we walked into a skiff...Everything was boarded up. We could not see anything." – Liz Stokes, 03:09).
  • Guests were strictly escorted and shown only what NATO wanted to reveal.

• Recognizing Narrative Control

  • The exercise is understood as a communications event as much as a technical one.
    -"The narratives that you're shared, the things that you were told, this is what they want you to know. And there's a reason they're telling you this." (Maria, 03:45)
  • Guests reflect on their role as media: "In a way, we're a conduit for that. Whether or not people sign on to that is not our thing...this is the message that they wanted us to know that they wanted to convey. Yeah, take that for what you will." (Maria, 04:53)

• Theme: Projecting Coherence & Unity

  • Underneath overt messaging about collaboration is a deeper effort to show NATO as a "coherent alliance," especially relevant given shifting geopolitical realities.

---

2. The Real Stakes: From IT Headaches to Existential Threats

[05:51 - 10:45]

• Cyber Risks at the National Level

  • The hosts stress how cyber threats for NATO nations are a matter of life and death, not just technical inconvenience.
  • Reflection on Estonia’s 2007 cyberattacks—“Systemic, society-wide crises like what Estonia experienced...can happen to anyone, anywhere." (Maria, 05:51)
  • Importance of regular training: “They are still taking two weeks out of their day to day operations to train...How many private sector cybersecurity organizations can say the same?” (Maria, 06:45)

• Emotional and Geopolitical Weight

  • "The meta challenge...geopolitics seismically shifting underneath our feet as we came back from this trip." (Maria, 08:13)
  • Maria describes feelings of being "afraid, shocked, confused, angry," esp. as the US position in NATO grows uncertain and tensions with Russia loom.
  • Acknowledgement of the unheralded work of cyber defenders:
    "This is the stuff that keeps civilization going and yet nobody knows about it. These are like our unsung heroes." (Maria, 09:20)

---

3. Estonia on the Edge: Real-world Proximity to Risk

[10:45 - 17:29]

• On the Streets of Tallinn

  • Field report from in front of the Russian embassy, where protest posters and Ukrainian/Estonian flags underline the ever-present stakes for Eastern Europe.
    – "The fence right in front of the Russian Embassy is absolutely plastered with protest posters...And it's very significant to me also that every other visible flag...are very proud Estonian flags held open in defiance." (Field Reporter, 12:19)

  • The reality of life on NATO’s front line: “Here it's not. It's very real. But otherwise, life goes on.” (Maria, 13:32)

• Solidarity and History

  • Estonia and Ukraine's shared past and present struggle: "Estonia is fiercely determined to keep their independence and their solidarity with Ukraine...People in Estonia understand very well that whatever happens to their Ukrainian brethren could very well mean them next." (Maria, 15:12)
  • The omnipresence of Ukrainian flags, even down to city decorations and souvenirs.

• Physical and Symbolic Reminders

  • "The legacy of the Soviet years are fading in this uber modern tech forward nation. But the physical reminders...they are still there." (Maria, 16:02)
  • The border with Russia is only 210 km away—a fact that’s impossible to ignore in Estonia.

---

4. Lessons & Takeaways: Human Networks Over Technical Tools

[17:29 - 21:10]

• Learning from History

  • “You should learn about what happened (in Estonia, 2007) because...it can happen again. Probably will.” (Maria & Liz, 17:57-17:59)
  • The importance of public education about cyber risks and NATO’s ongoing role.

• Focus on Human Factors

  • "It was really remarkable to me that NATO was not focusing on [technology]. ...they were really all about humans talking to humans, humans understanding how to work with humans...the tools are really tertiary at best." (Maria, 19:05)
  • The greatest asset is effective alliance, not toolsets or technical edge.

---

5. The Future of NATO and Cybersecurity Amid Political Upheaval

[19:49 - 22:25]

• NATO's Shifting Landscape

  • Reflection on NATO’s 1949 founding and how cybersecurity was only formally added as a domain in 2017, space in 2019.
  • Post-2024 US politics and the election of President Trump raise existential questions for NATO ("...the idea of leaving an alliance like NATO from a cybersecurity perspective really gives me pause.").
  • Importance of the “Three Cs”—collaborative, cooperative, coordinated defense; unity is not only desirable but essential.

• What’s at Stake If Alliances Fray

  • “When an alliance frays, when promises aren’t kept, when trust is eroded...when defense is not cooperative, collaborative or coordinated anymore, it’s definitely not cohesive. And at a certain point it won’t be very effective either...it will become everyone’s problem.” (Maria, 22:05)

---

Notable Quotes

• On narrative control:
  “When you go to something like this...the narratives that you're shared, the things that you were told, this is what they want you to know. And there's a reason they're telling you this."
  – Maria Ramasas, 03:45

• On the stakes for cyber defenders:
  “These are people who are dealing with literal life or death stakes. I felt that when we spoke with them, and it just felt heavy to me.”
  – Maria Ramasas, 10:47

• On the reality of living next to a threat:
  “While we often say cybersecurity is a global, borderless business, that might be easy to say when your adversary is not literally right next door.”
  – Maria Ramasas, 16:45

• On learning from Estonia’s experience:
  "I mean, you guys don't have to do that. That's what we're here for. But I think you should learn about what happened because...it can happen again. Probably will."
  – Liz Stokes & Maria Ramasas, 17:47-17:59

• On what matters most in defense:
  “They were really all about humans talking to humans...the tools are really tertiary at best.”
  – Maria Ramasas, 19:05

• On the fragility of alliances:
  “When an alliance frays, when promises aren’t kept, when trust is eroded...when defense is not cooperative, collaborative or coordinated anymore, it’s definitely not cohesive.”
  – Maria Varmazes, 22:05

---

Memorable Moments & Timestamps

• Feeling the weight of the mission:
  Maria reflects on the emotional gravity of meeting the cyber defenders ([09:20-10:47]).
• Observing the Russian embassy protests:
  Powerful scene-setting in Tallinn’s Old Town, with protest posters and flag symbolism ([12:19-13:32]).
• Recognition of the NATO-Ukraine-Estonia bond:
  Noticing the deep display of solidarity everywhere in Estonia ([15:12-16:39]).
• Vivid description of the actual front lines of cyber and kinetic risk:
  "The stakes are a mere 210km away at the Russian border." ([16:45])

---

Conclusion

This final chapter in the T-Minus Space Daily NATO series offers a unique blend of frontline observation, historical context, and sobering reflection. The main lesson: while cyber defense may be borderless in theory, on-the-ground realities and political alliances make it a deeply human, highly consequential endeavor. The episode urges listeners not to underestimate the importance of solidarity, vigilance, and collaboration in the face of mounting uncertainty.

---

For further behind-the-scenes reflections, listen to the “Reporter’s Notebook” bonus episode.

Transcript

[Maria Ramasas]

You're listening to the Cyberwire Network, powered by N2K.

[Booz Allen Representative]

When cyber threats strike, minutes matter. Booz Allen brings the same battle tested expertise trusted to protect national security, to defend today's leading global organizations. They safeguard their data, strengthen enterprise resilience and mobilize in minutes across energy, healthcare, financial services and medicine manufacturing. Their teams don't just respond, they anticipate, outthink and stay ahead of evolving threats. This is powerful protection for commercial leaders only. From Booz Allen, see how your organization can prepare today@booz allen.com Commercial. Foreign.

[Liz Stokes]

Hello, and welcome to our final episode of our three part series on NATO's

2025 cyber coalition exercise.

I'm Liz Stokes. In this last chapter of our journey, Maria Ramasas and I step back not just to recap what we saw, but to reflect on what it all means. Throughout this episode, you'll hear our reflections woven between the moments, conversations and scenes brought home with us. The past, present and future blur a bit here, but that's because that's how this story unfolded for us. This is a story about vigilance, solidarity and what's at stake when cyber defense both secures and defies borders with very real consequences. And as we move through it, we'll be reflecting right alongside with you.

[Maria Ramasas]

Maria Razas. Here I am in Orlando, Florida with my colleague Liz Stokes.

[Liz Stokes]

Hello.

[Maria Ramasas]

And we are actually here for Commercial Space Week in Orlando, Florida. Nothing to do with NATO. Yeah, but you know, we're here on another assignment, so we figured we would, since we're here in person, get together and talk about our NATO experience. So it was two months ago now. Just about right. Yeah, yeah, it's about almost two months now. So we've had some time to digest it a little bit. So I'm curious if anything stood out to you on that specific day when we had the tour of the cyber range.

[Liz Stokes]

Yeah, I remember. Well, first of all, it was a great experience and I know that you and I are both very appreciative that we got to go and do that. Oh, yes, it was very apparent that it was. I don't want to. The word that's coming to mind is secretive. Of course it's secretive.

[Maria Ramasas]

It's NATO, it's military. Yeah, yeah.

[Liz Stokes]

But I mean, Maria, you and I walked in and we walked into a skiff. Yeah, yeah, yeah, yeah. Everything was boarded up. We could not see anything. Yeah, I mean, it was just, it was very interesting getting in there and kind of seeing nothing. Well, we went to see a lot and it was very Informative and we learned a lot. We also, it was very secretive like most, you know, military things are. And I mean, that's fine. We went to learn. We did, yeah. And we went to witness and we did. We witnessed. We witnessed exactly what they wanted us to witness.

[Maria Ramasas]

That's exactly it.

[Liz Stokes]

That.

[Maria Ramasas]

Because that, that was the conversation we had when we got back was when you go to something like this, because you are effectively, we were standard stuff, you're handled, you know, like we were escorted at all times. Of course, this is not shocking or anything like that. This is just standard procedure. The narratives that you're shared, the things that you were told, this is what they want you to know. And there's a reason they're telling you this. There's a reason they're communicating this all with this. So for us, it's like you can try to read between the lines, but it's also. Doesn't have to be that complicated. It's like they're specifically a story that they're communicating to the world. And to me, it was like a message of coherence. Like that's the other C. That wasn't maybe said, but it was like they're trying to convey a sense of, yes, we're doing these three Cs of what the collaborate, cooperate, coordinate. But it's also that they're a coherent alliance that is working together. And again, two months later, here we are going is it. But at that time, it certainly seemed that way, or at least that was what they were trying to project. And I would love for it to continue to be that way. We are continuing to work together. We are continuing to share information in ways that make sense for our respective nations. Not everything's going to be shared all the time. Time. But what can and should be will be shared with expediency. And we want you to know that. And we also want our adversaries to know that. And it's like that. I mean, we understand our job as being the media is like, that's the story that they want to tell. In a way, we're a conduit for that. Whether or not people sign on to that is not our thing. I mean, we. We have no way of saying, yes, they were successful in that or not, but this is, this is what we were able to see. This is what they shared with us. And this is the message that they wanted us to know that they wanted to convey. Yeah, take that for what you will.

[Liz Stokes]

Yeah, that's exactly what I was telling my family, exactly when I was coming back and they were asking me, what, what did you go over there for? I was like, yeah, well we went over there to interview NATO and have them tell us what they really wanted us to know. And that's exactly what we did.

[Maria Ramasas]

To a regular person who doesn't live and breathe cybersecurity, sometimes the stakes can seem a little bit abstract. Sure, when systems come to a crashing halt, that much is obvious and unavoidable. But a lot of the time it's an IT problem with IT solutions, so just let it handle it, right? But yeah, systemic society wide crises like what estonia experienced in 2007 can happen to anyone, anywhere. And certainly a lot of smart, hard working people are training to prevent that from happening. But that threat is the undercurrent of so much of what drives the work being done at the NATO cyber range. And it's funny that, what did you go to do and see over there? Question was one that Liz and I both got from a lot of people in our lives after we came back. And I think maybe it was disappointing to some folks that we didn't have flashy stories about some crazy cutting edge high tech to share, nothing bonkers to blow people's minds. Instead, what we saw was actually, dare I say it, kind of mundane. But it being mundane is to me what made it so important that a massive international organization like NATO has devoted a place and serious time, two weeks, remember, to getting people together to get better at something, to me is notable. Yes, military organizations train news at 11, but think about it, they are still taking two weeks out of their day to day operations to train. Despite the impact, they see the value in taking that time to refine their communication and coherence in the cyber realm. How many private sector cybersecurity organizations can say the same?

[Liz Stokes]

So, Maria, I know that you and I have been producing this together for the past, what, two months now. We've been scripting, writing everything, we've been trying to put into words exactly what happened while we were over there. How has it been going for you? What are your thoughts on things? Do you have anything that you'd like to share?

[Maria Ramasas]

Yeah, I mean, we've touched on sort of the meta challenge, for lack of better terminology, of geopolitics seismically shifting underneath our feet as we came back from this trip. It's now early January and now suddenly the United States position in NATO is extremely in question. And also the United States is threatening its own allies. Like how? I mean, just on a personal level, I'm just trying to make sense of this all. And I'm aghast, for lack of better term. I mean, scared as hell, shocked, confused, angry, Like I'm feeling all of these feelings and this is just me. My read of that situation while trying to think, okay, I'm trying to tell this story about these incredible people that we met from so many NATO allied nations, trying to be, you know, not too emotional about it. But I mean, I can't lie, it was a very affecting visit seeing all those people working on these incredibly difficult problems, working on cybersecurity defenses for a whole bunch of different countries, but also coordinating with their teams back home that we couldn't see, and knowing that these are the people who are either working on keeping their country secure or working with the people who would be doing that. Both of which is extraordinarily hard and in many cases both at the same time. Coming from the corporate cybersecurity world, I know even within a corporate situation, these are extraordinarily hard problems. But when you're talking about military and civil network defense, critical infrastructure defense, this is the stuff that nobody gives any credit to, nobody thinks about until it fails. And of course, it's always under resourced and it's so crucial for human life. So it's just like that whole duality of this is the stuff that keeps civilization going and yet nobody knows about it. These are like our unsung heroes. It's like meeting those unsung heroes, right? And of course, they're all very humble about it and they're all very modest. And I want to make sure that as I'm scripting their story, that I'm giving them the respect and gravitas, if that's the right word to use here, that they deserve. There were so many unsaid things. You could feel the weight of it. That's, I guess the thing I've been struggling with is you could feel the weight of how important their mission is. I could feel how serious it was for them. And I've met many defenders in my day in the cybersecurity realm, but this was a different echelon. Even though this was an exercise, I

can only begin to imagine what they're

dealing with in their day to day and the stakes for them. And then being in a country that is on the border with Russia, you know, a nation that is pretty adversarial right now, the stakes are really explicit and just like they're right there, the people, especially in Estonia, this is, this is very life or death for them. I mean, Think about how many times we saw the Ukrainian flag flying, right? It was everywhere. The Ukrainian flag colors were absolutely everywhere. I mean, this is life or death. It really, really literally is. And I guess for me, it's like, am I communicating the stakes well enough? Am I. Am I getting across that this is not just some, you know, if we get hacked, maybe some of our PII gets breached. Not great, but, you know, nobody's going to die. That's not the situation these folks are dealing with. These are people who are dealing with literal life or death stakes. I felt that when we spoke with them, and it just felt heavy to me. But, like, you know, somebody's got to deal with it, right? And I'm just. I'm wondering to myself, am I doing a good enough job in communicating that? I don't know.

[Field Reporter]

So I'm not sure if this is

[Maria Ramasas]

a good idea right at the moment. Maybe we should proceed somewhere else.

[Field Reporter]

Let's go down the street this way.

[Liz Stokes]

Should we go down this way, or

[Maria Ramasas]

do you want to go down that way?

[Field Reporter]

Are you still recording? Okay, so the situation is we are in the center of Tallinn Old Town, and we just turn down a side street very close to the Christmas market, and the Russian Embassy is right there. And the fence right in front of the Russian embassy is absolutely plastered with protest posters, handmade, all of them protesting the Ukraine war messages like, stop killing people, Putin has blood on his hands, things like that. And it's very significant to me also that every other visible flag immediately on the edges of the embassy are very proud Estonian flags held open in defiance. Again, it just drives home the stakes that we've been talking about the last few days. And for many people, these kinds of things are theoretical, but here it's not. It's very real. But otherwise, life goes on. And it's an otherwise ordinary street in the part of Old Town looks like all the rest of them, except when you turn that corner, that fence is.

[Maria Ramasas]

And that.

[Field Reporter]

The Russian flag, of course, right above it tells you exactly what's going on. Yeah, there was an armed guard that came outside as we were sort of standing in front of it, because, you know, we were standing there with our backpacks and a whole bunch of gear,

[Maria Ramasas]

and I'm sure we probably looked super suspicious.

So we were like, we're gonna get

[Field Reporter]

a move on now.

[Maria Ramasas]

When Liz and I Chit chatted with our hosts during our visit, whenever we mentioned that we really had been enjoying our time in the Old Town, inevitably people would drop their voice to a whisper and ask, did you happen to go past the Russian embassy. Did you see what was going on there?

[Liz Stokes]

Happening upon the Russian embassy in the middle of their Christmas market was probably one of the things that, like, threw me the most because I was not expecting to see, you know, 20 Ukraine flags on the surrounding embassies just in solidarity with what was going on.

[Maria Ramasas]

And it makes sense, given Estonia and Ukraine's history. Like they're, they're brothers.

[Liz Stokes]

You don't realize it until you witness it firsthand. Which is exactly what we did.

[Maria Ramasas]

Yep. I mean, it's like one of those things that I knew. I've known. But when you're actually on quite literally the front lines where, especially where the cybersecurity attack happened, the 2007 attacks. Right. Where they just, they know. Everyone just says 2007. Everybody knows what you're talking about. Right. Estonia knows. Estonia knows. Well, how much higher the stakes are.

[Liz Stokes]

I mean, only after us researching that heavily did I even fully GRASP what the 2007 cyberattacks did to Estonia. And I think, again, it's like one of those things where you have to kind of. You have to witness it firsthand.

[Maria Ramasas]

Estonia is fiercely determined to keep their independence and their solidarity with Ukraine. A fellow former Soviet republic is obvious from the moment you step off of the plane. The Ukrainian flag is absolutely everywhere in Estonia, as I mentioned a bit in previous episodes. And it often flies at the same level and equal honors as the Estonian flag. Skyscrapers were lit up yellow and blue. Even city tree Christmas lights were solely in yellow and blue Ukrainian flag colors. People in Estonia understand very well that whatever happens to their Ukrainian brethren could very well mean them next. Estonia is also very proud of being part of NATO. Aside from seeing NATO's flag flying proudly on flag poles and the like. Even when I was at Tallinn airport heading home, I saw a pin souvenir that featured the Estonian and NATO flags. Actually, I still have it here on my desk, still in its cellophane. I don't think I've ever seen the NATO flag with that level of prominence in a tourist tchotchke shop before, right next to the keychains and the fancy chocolates. And honestly, I'm trying to remember the last time I saw the NATO flag flying anywhere in the United States. While we often say cybersecurity is a global, borderless business, that might be easy to say when your adversary is not literally right next door when you are in Estonia, it's just about impossible to forget that the stakes are a mere 210km away at the Russian border. Estonia, as a former Soviet republic became independent with the fall of the USSR in 1991. The legacy of the Soviet years are fading in this uber modern tech forward nation. But the physical reminders, from the languages spoken to the Soviet era, buildings and yes, sometimes even the statues, those physical reminders, they are still there.

What would you like people to take away from it?

[Liz Stokes]

It's a great question. I mean, I definitely want people to learn the history again. I sat there for hours after we got back learning, ingesting.

[Maria Ramasas]

My whole flight over and back. I was reading so much. Yeah. Hours and hours.

[Liz Stokes]

And I don't, I mean, you guys don't have to do that. That's what we're here for. But I think you should learn about what happened because not that it's never going to happen again. It can happen again.

[Maria Ramasas]

Probably will. You're right.

[Liz Stokes]

Yeah, it probably will. And you know, it's like in ways

[Maria Ramasas]

that we can't imagine.

[Liz Stokes]

Yeah, it's the age old thing of oh, it's never going to happen to me. Well, you never know.

[Maria Ramasas]

Yeah.

[Liz Stokes]

Honestly, just learning about that history, kind of taking that into consideration and learning about what NATO now does to kind of help protect these allied countries is something that I want everybody to take

[Maria Ramasas]

away of to me in addition to what you said. Because you're right on, you are absolutely right on. The thing that I walked away with, and maybe this is also because this is what NATO wanted me to walk away with and I will totally fess up to that, was that when I think of cybersecurity in general, I'm not going to say, you know, the technical problems are fixed now. It's, that's like wildly not correct. But for years the emphasis has been on just, you need the shiny tool, you've got this problem, we've got a tool to fix it. And it was really remarkable to me that NATO was not focusing on that. Like there was a tool that they showed us about, it was VSIC V. CISC was the hardest acronym to say ever.

[Liz Stokes]

It is a very, it is just

[Maria Ramasas]

a beast of an acronym. But they were really all about humans talking to humans, humans understanding humans, humans understanding how to work with humans. It's like, okay, the tools are really tertiary at best. It was how do we communicate to each other? How do we understand what each other needs. That's interesting to me that we're, we're, we're going back to really the core human problem and solution of working together. And an alliance needs to be good at that. And I mean that's kind of the core of what it is, what it means to be in an alliance.

The North Atlantic Treaty, better known as NATO, and its official text was written on April 4, 1949. We have to think about how different the world was back then, well before the Internet was even a glimmer in DARPA's eye. Cybersecurity was added in as a domain of expertise to NATO in 2017, with space added in 2019, by the way. Certainly the nature of warfare has changed a lot, as have the broader geopolitical contexts, especially since Russia's invasion of Ukraine in 2022 and US President Trump's re election in 2024. Just a month after coming home from the NATO exercise, the future of the United States role in and with NATO seems profoundly uncertain. And putting all of my own personal and political viewpoints on that aside, the idea of leaving an alliance like NATO from a cybersecurity perspective really gives me pause. To say the least, effective defense and offense are always stronger as a collaborative, cooperative, coordinated exercise. Remember those three Cs that Commander Kaplan kept saying? How can you possibly maintain any kind of advantage over adversarial activity when no one's sharing information with you? Nobody's catching your blind spots, nobody's covering you, when you inevitably hit a language, cultural, mindset, process, technological, you name it. Barrier. If you consider the United States to be ahead of the game in the cyber realm, and sure, many of us do, genuinely, how long do we think a technological head start in cybersecurity possibly could last if we're basically going it alone? Two months after my trip to Estonia, all I can think about is the many wonderful people that I met in Tallinn and the many Ukrainian flags flying high and proud next to the Estonian flags and that NATO flag pin at the airport and everything that is at stake, explicitly and implicitly. When an alliance frays, when promises aren't kept, when trust is eroded slowly and then seemingly all at once, when defense is not cooperative, collaborative or coordinated anymore, it's definitely not cohesive. And at a certain point it won't be very effective either. With the stakes being as high as they are, this won't be just a problem for our most elite of cybersecurity defenders. It will become everyone's problem. Thank you for listening to this third episode of our three part series. We do have a little bonus that we'll be dropping in the podcast feed for you. That's my audio reporter's notebook with clips that I recorded while in Tallinn walking around or freshly out of the skiff or at 4 in the morning trying to get the coffee machine to work. If you are interested in the more unfiltered experience from this assignment, the Reporter's Notebook is for you. Think of it as a bonus.

Episode four, if you will.

This episode was produced by Liz Stokes. Mixing, editing and sound design by Trey Hester. Our executive producer is Jennifer Ibin with content strategy by Mayan Plout. Peter Kilpe is our publisher and I am your host, Maria Varmazes. Thank you so much for listening.