Volt Typhoon in Your Water: China's Hackers Are Basically Squatting in US Infrastructure Waiting for Taiwan Drama

This is your Digital Frontline: Daily China Cyber Intel podcast. Hey listeners, Ting here on Digital Frontline, your daily dive into China's cyber chess moves against US turf. Picture this: I'm sipping my pu'er tea, scanning the wires, and boom—House Homeland Security hearing yesterday has everyone buzzing. Chinese hackers from the Volt Typhoon and Salt Typhoon crews are burrowed deep into US critical infrastructure like water plants in Hawaii, power grids in California, and ports from LA to New York. Rep. Andy Ogles nailed it: these aren't profit-driven script kiddies; they're Beijing's state-sponsored saboteurs pre-positioning for a Taiwan showdown, ready to flip switches if Uncle Sam mobilizes. Frank Cilluffo from Auburn's McCrary Institute dropped truth bombs, saying the US is hamstrung without embedding cyber ops into military doctrine—cyber's its own domain, transcending land, sea, air. Joe Lin, CEO of Twenty Technologies, called these hacks continuous automated ops, not one-offs, holding society hostage in peacetime and conflict. Emily Harding from CSIS warned we've lost the escalation ladder; our muted responses just embolden them. Even CrowdStrike's Drew Bagley agrees defenses are solid but cautions against reckless hack-backs that could spark geopolitical fireworks. New threats? No fresh breaches in the last 24 hours, but the hearing spotlights ongoing intrusions into telecoms—remember Salt Typhoon hitting lawful intercept systems for FBI warrants? Targeted sectors: critical infra everywhere, from energy to transport, prepping sabotage plays. Defensive advisories are screaming for offense. Witnesses push industrializing cyber tools—turn elite hacks into machine-speed software under human control. Trump's national cyber strategy, dropping soon, leans into private sector partnerships and offensive pillars, fresh off that Venezuela op where cyber shut down Caracas lights alongside drones. Expert analysis? Kyle Crichton from Georgetown's Center for Security and Emerging Technology flags AI risks in offense—too unpredictable for directing attacks. Meanwhile, Beijing's flipping the script: Reuters reports Chinese authorities just ordered firms to ditch US and Israeli cyber tools like VMware from Broadcom, Palo Alto Networks, Fortinet, and Check Point, citing spy fears. China's Cybersecurity Law amendments, live since January 1, jack fines to 10 million RMB and extend claws overseas for any threat to their nets. Practical recs for you businesses and orgs: Patch like your life's on the line—Volt Typhoon loves unpatched routers. Segment networks, hunt for anomalies in ICS like SCADA systems. Ditch dual-use gear if you're in China ops; swap to domestic like 360 Security. Partner up—public-private's the new black, per Lin. Enable multi-factor everywhere, train your peeps on phishing from PLA proxies, and monitor for beacons to CCP IPs. If you're in energy or ports, run CISA's hunt-and-eject plays now. Witty aside: China's banning Palo Alto This content was created in partnership and with the help of Artificial Intelligence AI.