Salt Typhoon Spills the Tea: Congress Got Hacked and Chinas AI Deepfakes Are Coming for Your Emails

This is your Digital Frontline: Daily China Cyber Intel podcast. Hey listeners, Ting here on Digital Frontline, your go-to for China cyber intel that's sharp, snappy, and straight from the shadows. Picture this: I'm hunkered down in my digital war room, caffeine-fueled, scanning the feeds as of January 12, 2026, and bam—China's Salt Typhoon crew just breached email systems of U.S. House staffers on the China committee, Foreign Affairs, Intelligence, and Armed Services panels. Financial Times dropped this bomb, citing insiders, and it's not some phishing flop; these hackers burrowed in deep, siphoning intel that could fuel Beijing's playbook against Uncle Sam. But wait, it gets spicier. Taiwan's National Security Bureau just issued a fresh report screaming "cognitive warfare"—China's flooding the island with AI-generated fakes, bogus social accounts, and deepfake vids to twist public opinion ahead of elections. Think manipulated memes swaying votes, all while PLA eyes "intelligentized" ops, per Council on Foreign Relations analysis. And get this: Anthropic spilled that Chinese state-sponsored attackers used AI agents for 80-90% of a 2025 cyber hit, automating the chaos like a hacker's fever dream. Targeted sectors? Government first—Congress emails are ground zero—but it's rippling to critical infrastructure. Dragos intel warns of Chinese pre-positioning in U.S. power grids, echoing Ukraine's Crash Override malware that blacked out 60-70 substations. They're not blasting yet; it's gray-zone stealth, planting backdoors for wartime flips, as Robert Lee from Dragos notes. Businesses in finance, energy, and defense? You're next—G7's Cyber Expert Group just roadmap'd post-quantum crypto shifts to thwart quantum-cracking threats from quantum-leaping China. Expert takes? Jim Langevin and Mark Montgomery in Stan Stahl's Substack roar that Beijing's persistent, stealing data and squatting in networks for leverage. CFR adds PLA's shifting to AI-driven cyber, closing the U.S. chip lead despite Nvidia H200 exports. No major 24-hour breaches today, but this Salt Typhoon persistence screams escalation. Practical recs, listeners: Patch like your life's on the line—CISA's KEV catalog hit 1,484 vulns, with Microsoft topping ransomware charts. Enable 2FA everywhere, hunt for anomalies in email logs with tools like Microsoft Sentinel, segment networks to quarantine breaches, and drill post-quantum migration now—G7 says financial firms lead. Train your teams on AI-phish; those Fortinet fake sites are SEO-poisoned with gen-AI lures. Oh, and audit vendors—700Credit's 5.8 million SSNs leaked remind us supply chains are hacker highways. Stay frosty, deploy EDR like CrowdStrike, and simulate Salt Typhoon drills. China's not slowing; we're the frontline. Thanks for tuning in, listeners—subscribe for daily drops to keep your defenses ironclad. This has been a Quiet Please production, for more check out quietplease.ai. For more http://www.quietplease.ai Get the best This content was created in partnership and with the help of Artificial Intelligence AI.