This is your Dragon's Code: America Under Cyber Siege podcast.

Hey listeners, I'm Ting, your go-to gal for all things China cyber chaos and hacker hijinks. Picture this: it's been a wild week in the cyber trenches, with Dragon's Code unleashing America's under siege like never before. Straight up, the most sophisticated Chinese ops hit US telecoms hard, evolving from those Salt Typhoon breaches back in October 2024 into full-blown stealth invasions by March 2026.

Take Red Menshen, that sneaky Chinese APT crew—Cybersecurity Dive reports they've upgraded their BPFDoor backdoor, a kernel-level beast using Berkeley Packet Filter tech to sniff network traffic without a peep. It lurks dormant on Linux-based VPN appliances and firewalls in US telecom giants like AT&T and Verizon proxies, only waking on magic packets. Dark Reading calls it a super-advanced spy tool that laughs at traditional antivirus, burrowing into Middle East and Asian telcos too, but Uncle Sam's infrastructure is ground zero. Attack methodology? They rent VPS servers, blast Nmap scripts and libredtail-http bots for edge exploits, then pivot to zero-days on WebLogic servers—pure supply chain sorcery.

Attribution? The US Director of National Intelligence's 2026 Annual Threat Assessment, dropped by DNI Gabbard on March 26, pins China as the top cyber pest, alongside Russia, pre-positioning in critical infra for intel grabs and future disruptions. Cyware's daily brief on March 27 confirms Red Menshen's been at it since 2021, with forensic ties to Ministry of State Security contractors like Integrity Technology Group—EU just sanctioned them for EU hits, per Cyfirma's weekly report.

Affected systems? Telecom cores, but Volt Typhoon echoes linger in energy and water sectors, per old CISA advisories now flaring up. Defensive measures? Feds disrupted botnets last year, and now the new Bureau of Emerging Threats is tracking this live. Telcos are hunting BPFDoor manually—hunt or be hunted, folks. CISA added Aqua Security's Trivy vuln to exploited catalog after March 19 hackers poisoned it, leading to LiteLLM supply chain mess on March 24, per NSFOCUS alerts—TeamPCP stole 500,000 creds before PyPI yanked the malicious v1.82.8.

Lessons learned? Cybersecurity expert at The Hacker News nails it: we're at war, shifting to identity-edge defenses and OT monitoring. Government officials like Senator John Fetterman scream "China First" on AI data centers, warning moratoriums hand Xi the win. Xi's own Politburo pushed AI lifecycle risk management in the 15th Five-Year Plan, but they're weaponizing it—NPC delegate Zong Qiang from China Telecom admits AI deepfakes hit fraud rates near 100%. Pivot fast, listeners: patch perimeters, hunt backdoors, and AI-defend with AI.

Witty wrap: China's hackers aren't dragons; they're code ninjas turning our grids into their playground. Stay vigilant!

Thanks for tuning in, listeners—subscribe for more cyber spice! This has been a Quiet Please production, for more

This content was created in partnership and with the help of Artificial Intelligence AI.