Google's AI Secrets Walk Out the Door While China Hacks Everything and TP-Link Gets the Boot

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. # Digital Dragon Watch: Weekly China Cyber Alert Hey listeners, Ting here with your weekly roundup of what China's been up to in cyberspace, and trust me, it's been quite the week. Let's kick off with the espionage side of things. A federal jury just convicted Linwei Ding, a former Google software engineer, for stealing AI supercomputer data and secretly sharing it with Chinese tech firms. This is significant because it shows the persistent threat of insider threats targeting our most advanced tech sectors. Google's crown jewels nearly walked out the door through one disgruntled employee. On the offensive hacking front, things got pretty spicy. The threat group Mustang Panda updated their CoolClient backdoor with fresh capabilities for stealing browser login credentials and monitoring clipboards. Meanwhile, another China-linked group tracked as UAT-8837 has been aggressively targeting critical infrastructure systems across North America, exploiting both known and zero-day vulnerabilities since at least last year. That's right, they've been operating in our backyard for months. Taiwan's National Security Bureau dropped a sobering report showing China-linked cyberattacks on their energy sector skyrocketed tenfold in 2025 compared to the previous year. We're talking coordinated campaigns hitting critical infrastructure across nine different sectors. That's not a coincidence, listeners. That's a playbook. The US government isn't sitting idle though. Cisco Talos is closely tracking UAT-8837's activities, and the Commerce Department continues tightening the screws on Chinese tech companies deemed national security threats. Plus, there's been serious movement on the TP-Link router ban. The Commerce Department has proposed blocking sales of TP-Link products citing national security risks from Chinese ties. Given their estimated fifty percent market share among home users and small businesses, this is about to be a massive disruption. On the defensive side, there's also been diplomatic movement. The TikTok situation got interesting when the United States and China signed off on a deal handing control of TikTok's US operations to investors backed by President Trump. The new entity, TikTok USDS Joint Venture LLC, will operate under safeguards including comprehensive data protections and algorithm security measures. The broader pattern here is unmistakable. China's expanding its offensive cyber capabilities while the US is implementing increasingly aggressive defensive measures. From rare earth element export controls that could paralyze defense contractors by January 2027, to tactical zero-day exploits hitting our infrastructure, Beijing is playing a sophisticated multi-layered game. My recommendation for listeners is straightforward: update everything, enable two-factor authentication, and assume advanced threat actors have already probed your network. The targeting has shifted u This content was created in partnership and with the help of Artificial Intelligence AI.