China's Cyber Surge: From Pesky IP Theft to Holding US Hostage!

This is your Cyber Sentinel: Beijing Watch podcast. Hey listeners, Ting here—your no-nonsense source for all things China, hacks, and cyber-power plays. Let’s jump right into the week’s headline: Beijing’s cyber operators have kicked things up a notch, and the impact on US security is grabbing everyone’s attention from Congress to container ports. First up, Chinese-backed groups like Volt Typhoon are adopting so-called “living off the land” methodologies. That means instead of flashy malware, they’re blending in by exploiting everyday admin tools already present in systems. This week, Volt Typhoon and the lesser-known Salt Typhoon were specifically cited in Senate Armed Services Committee hearings. Their favorite targets? Utilities, defense contractors, and logistics hubs—think ports like Savannah and Houston, which have battled sophisticated AI-backed intrusions in just the past few days. CISA has ramped up seaport cyber drills as a direct response, urging more public-private cooperation since most port infrastructure is privately owned. Meanwhile, Chinese-linked attacks aren’t just about disruption anymore—they’re about control and strategic leverage. The 2025 threat trend is moving fast from simple IP theft to the risk of holding infrastructure hostage. Evidence piles up from ports to power grids, as AI-generated phishing and malware campaigns surge. After all, Check Point Research reported a whopping 70% year-on-year rise in US utility attacks. Siemens and Ponemon Institute highlight that over 75% of energy and manufacturing firms faced incidents last year, but half admit their defenses are lacking—yikes. On the regulatory front, FCC chair Jessica Rosenworcel is pushing reforms, and the Department of Justice just finalized rules that restrict how US entities can share sensitive data with China, Russia, and Iran. And yes, enforcement started July 8, so the clock is ticking for compliance. Over at the USDA, Secretary Tom Vilsack isn’t sleeping on the agri-sector either. The new National Farm Security Action Plan aims not just to block Chinese land deals near US bases but to harden the cyber backbone of America’s food supply. Why? Because so many farms now run on smart tech—GPS, IoT sensors, drone swarms—and one breach could cause nationwide shortages, as proven by the United Natural Foods hack last month. Internationally, there’s a rising chorus for deterrence. The Senate wants the Pentagon to roll out full-spectrum military options to stop Beijing from attacking US critical infrastructure in a crisis. Deterrence has been tricky—historically, adversaries just don’t fear US retaliation in cyberspace the way they do with conventional force. But now, with China testing boundaries by burrowing into places like Guam’s networks, policymakers are under pressure to get serious about response strategies. What can listeners do? For US critical industries: embrace robust segmentation, relentless red teaming, and supply chain vetting. Ports, utilitie This content was created in partnership and with the help of Artificial Intelligence AI.