Agent.BTZ — how one USB stick rewrote modern cyber defence

Agent.BTZ was a USB-borne worm that infiltrated classified U.S. military networks (SIPRNet) via an infected thumb drive, triggering Operation Buckshot Yankee — a massive containment effort led by NSA and Fort Meade teams. The incident exposed the fragility of air-gapped systems and catalyzed the creation of U.S. Cyber Command, improved incident response playbooks, and stricter removable-media policies. It remains a landmark case illustrating that security is socio-technical: technology controls must be paired with human behavior policies and supply-chain awareness.