Silk Typhoon Takedown: China Hacker Nabbed in Milan as Cyber Battles Rage

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Welcome back, listeners! Ting here—and if you think the summer’s hot, wait till you hear what’s been cooking in cyberspace. It’s Digital Dragon Watch, and these past seven days have delivered a fresh surge of China-related cyber drama. Let’s dive right into the weekend’s bombshell: Italian authorities dropped the digital hammer on Zewei Xu, a 33-year-old Chinese national linked to the notorious Silk Typhoon, also known as Hafnium. Xu was arrested in Milan, wanted by the FBI for spearheading espionage against Western networks. Allegedly, Xu and his crew infiltrated the University of Texas’ COVID-19 vaccine research and ran mass phishing ops snagging thousands of email accounts. The FBI’s most-wanted list just got a little lighter, and U.S. officials are beaming as this arrest ramps up the global crackdown on state-backed cyber actors. Xu faces decades in a U.S. prison if extradited—major win for cross-border cyber law enforcement. But it doesn’t stop with individuals. According to a new Cyberstreams report, China-linked cyberattacks on U.S. defense contractors surged by 1 percent so far this year, focusing on proprietary designs and supply chains. IBM’s threat force highlights persistent, targeted campaigns—reminding everyone that intellectual property is a battlefield commodity. Legal eagles weren’t spared either. Just this week, suspected Chinese hackers breached the email accounts of attorneys and advisers at a powerful Washington, DC law firm. No word yet on the clients or cases caught in the crosshairs, but the implications for privileged information—and national influence—are huge. On the hardware front, the U.S. is tightening the noose on Chinese tech, especially drones. In April, Washington barred Chinese drones and components from critical infrastructure projects and government contracts. Beijing responded tit-for-tat, pulling U.S. firms into its “unreliable entities” list and slapping new export controls on key drone tech. This geopolitical chess match has forced manufacturers like DJI, who once ruled the U.S. consumer drone market, out of public sector sales, while the Pentagon pushes homegrown alternatives through the Blue UAS program. All this has triggered big moves in the cyber defense world. Former CISA Director Chris Krebs, in a rousing speech, called for ramping up talent and defending U.S. cyber agencies against downsizing. Meanwhile, critical infrastructure is under siege globally—Chinese espionage reportedly targeted Latin America’s energy sector, echoing the call for urgent upgrades in industrial control system security. Experts have a clear playbook: adopt advanced endpoint detection, ensure routine vulnerability patching, and, if you’re running anything sensitive—think zero trust. CrowdStrike, Dragos, and Palo Alto Networks are spotlighted for their industrial and endpoint security solutions, and the government is urging deeper public-private partne This content was created in partnership and with the help of Artificial Intelligence AI.