Chinas Cyber Army is Already Inside US Power Grids and Generals Are Finally Spilling the Tea

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, Ting here with your Digital Dragon Watch: Weekly China Cyber Alert. Straight to the chaos—over the past seven days, China's cyber shadow loomed larger than a Beijing smog bank, with Volt Typhoon and kin pre-positioning malware in U.S. critical infrastructure like power grids and telecoms. Army Lt. Gen. Joshua M. Rudd, tapped for Cyber Command and NSA director, dropped bombshell testimony to the Senate Armed Services Committee, calling China the top cyber threat—sophisticated, state-backed ops burrowing into water systems, transit, and utilities for crisis disruption. He warned their tools could hold American cities hostage, echoing FBI Director Christopher Wray's earlier House testimony on Volt Typhoon's router hacks at electric utilities, swiping OT diagrams and GIS data. Targeted sectors? Critical infrastructure's the bullseye—energy, manufacturing, telecoms screaming loudest. Nexusconnect.io's OT trends report flags VOLTZITE, Volt Typhoon's crew, building relay networks, while GuidePoint Security's GRIT 2026 report tallies a 58% ransomware surge last year, manufacturing hit hardest at 14%. No fresh breaches popped this week, but Rep. Andy Ogles cited a joint DHS-NSA-FBI advisory confirming Chinese actors infiltrated U.S. networks for years, ready for destructive payloads. Washington's response? Gen. Rudd pushes faster neutralization of pre-positioned malware, layered deterrence—deny footholds, restore nets, and offensive cyber strikes if needed. House Homeland Security's hearing with CISA and TSA spotlighted PRC ops blending AI for faster attacks, per Chairman Garbarino. New vectors? AI-phishing scaling per Fortinet, deepfakes bypassing checks, plus supply chain hits—Claroty says 46% of orgs breached via third parties. China's clapping back: Xinhua reports Beijing's "highly concerned" over EU's cybersecurity package targeting Huawei and ZTE mobile nets, calling it protectionist de-risking. Meanwhile, Chinese firms got memos ditching U.S.-Israeli security software over data leak fears. Expert recs, listeners? SANS ICS Five Critical Controls: offline backups, MFA everywhere, deep packet inspection for industrial protocols, annual attack surface scans. CISA's Cybersecurity Performance Goals 2.0 mandates remote access hardening—patch those internet-exposed PLCs like Unitronics before BAUXITE wannabes pounce. Ditch default creds, segment OT from IT, and layer AI defenses. Gen. Rudd nails it: strong cyber means full-spectrum options, no more restraint inviting escalation. Stay vigilant, patch fast, and watch those vendors—China's playing 5D cyber chess while we're still learning the board. Thanks for tuning in, listeners—subscribe for more Dragon Watch drops! This has been a Quiet Please production, for more check out quietplease.ai. For more http://www.quietplease.ai Get the best deals https://amzn.to/3ODvOta This content was created in partnership and with the help of Artificial Intelligence AI.