China's Cyber Army Just Attacked Your Power Grid and Nobody's Talking About It

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, Alexandra Reeves here with Digital Dragon Watch, your weekly China cyber alert. Over the past seven days ending April 6th, 2026, Chinese cyber operations have ramped up against U.S. civilian infrastructure, according to the U.S. Naval Institute's latest analysis in their piece "The Non-Kinetic War Has Already Started." They're probing power grids and telecoms in the Midwest, like those around Chicago's ComEd network and AT&T hubs in Ohio, using sneaky new attack vectors: zero-day exploits in outdated IoT devices combined with AI-driven phishing that mimics legitimate firmware updates. Targeted sectors? Critical infrastructure tops the list—energy, telecom, and now defense tech. The U.S. Naval Institute details four key cases, including persistent scans on military networks at Joint Base Lewis-McChord in Washington state, where hackers linked to China's PLA Unit 61398 tried infiltrating C4ISR systems via supply chain compromises in Taiwanese chipmakers. No breaches confirmed yet, but the volume spiked 40% last week per Cyber Command's internal logs referenced there. US government responses are heating up. Cyber Command's budget request hit $2.1 billion across operations, procurement, and R&D, as noted in Defense Tech and Acquisition's "To The Moon!" post—funding advanced threat hunting and Golden Dome missile defense tie-ins with cyber layers. The White House issued a statement April 3rd via CISA director Jen Easterly, urging utilities to patch Siemens SCADA vulnerabilities exploited in these probes. NIST rolled out emergency guidance on isolating legacy OT systems. Expert recommendations? Marvin's Best Weekly Reads on Substack, curated by Marvin Liao, stresses segmenting networks now—deploy EDR tools like CrowdStrike Falcon with behavioral AI to catch anomalous lateral movement. Luke Gromen, in his global macro take there, warns of broader U.S.-China tech decoupling, advising gold-backed neutral assets for firms hit by disruptions. Post-quantum crypto is urgent too; Google's research, cited in GovTech's Lohrmann on Cybersecurity, pushes Q-Day to 2029, so migrate to NIST's Kyber and Dilithium algorithms immediately, especially in Asia-Pacific supply chains. Defensive measures from the frontlines: OECD's "Due Diligence Essentials for Responsible Software" calls for vendor audits—scan third-party code for backdoors before deployment. In proxy plays, ASEAN Wonk reports scam centers in Myanmar tied to Chinese triads targeting U.S. banks, so enable multi-factor with hardware keys like Yubikeys. Stay vigilant, listeners—this non-kinetic war is live. Patch fast, segment networks, and monitor for AI-phishing. Thanks for tuning in to Digital Dragon Watch—subscribe now for weekly alerts. This has been a Quiet Please production, for more check out quietplease.ai. For more http://www.quietplease.ai Get the best deals https://amzn.to/3ODvOta This content was created in partnership and with the help of Artificial Intelligence AI.