Cyber Typhoons Unleashed! China Admits Hacks, U.S. Stunned

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Let’s dive right in—today is April 12, 2025, and the past week in China's cyber landscape has been an adrenaline ride. I’m Ting, your savvy, slightly caffeinated guide on this digital odyssey. Spoiler alert: it’s been all about typhoons—Salt Typhoon, Volt Typhoon, and a storm of U.S.-China cyber chess matches. First up, the U.S. House of Representatives reintroduced its shiny new “Strengthening Cyber Resilience Against State-Sponsored Threats Act.” This isn’t just another beltway buzzword fest—it’s aimed squarely at confronting China’s state-sponsored hackers like Volt Typhoon, a group neck-deep in breaching U.S. critical infrastructure. According to lawmakers like Rep. Mark Green, these attackers are more than code jockeys; they’re espionage pros embedding themselves into systems that power our daily lives. The bill calls for a task force led by CISA and the FBI to tackle such threats head-on. They’re essentially saying, “We see you, Beijing, and we’re upgrading the firewall” [1]. Now let’s talk Salt Typhoon, another China-backed cyber group that made headlines this week. This crew has been exploiting vulnerabilities in Cisco devices—a problem first flagged in 2023 but still haunting tech teams. They've hit U.S. universities and telecom providers, allegedly to pilfer telecom and engineering research. The most alarming part? Many organizations, bogged down by complicated patching processes, haven’t secured themselves yet. Experts like Jon Condra from Recorded Future are urging everyone to patch these vulnerabilities ASAP because Salt Typhoon isn’t just knocking—they’ve already found a comfy seat in some networks [4]. Meanwhile, the geopolitical climate heated up with whispers that Beijing confirmed its role in cyberattacks targeting U.S. infrastructure during a private meeting. Yep, you heard that right. China reportedly admitted to infiltrating systems tied to energy grids, water facilities, and ports, allegedly as a veiled warning regarding Taiwan. This revelation left U.S. officials stunned and reinforced suspicions about Beijing’s “prepositioning” strategy—laying the groundwork for potential sabotage if tensions boil over [9]. On the defensive side, CISA has been busy deploying its CyberSentry tools and urging public-private collaboration. The agency has been hustling to help victims of these breaches kick Chinese actors off their network. They’ve also been working with tech companies under the Joint Cyber Defense Collaborative to secure critical sectors like water, transportation, and energy [2]. Finally, experts like Annie Fixler have warned about the broader game. Beijing isn’t just playing defense—it’s leveraging its cyber capabilities as an extension of its strategic goals, from Taiwan to the ongoing U.S.-China trade war. With tariffs escalating, some predict Beijing could retaliate with destructive cyberattacks on U.S. infrastructure to cause societal panic and d This content was created in partnership and with the help of Artificial Intelligence AI.