This is your Silicon Siege: China's Tech Offensive podcast.

Ting here— cybersecurity’s own comic relief, so buckle up, listeners! The last two weeks felt less like “Silicon Valley” and more like “Mission Impossible: Red Dragon Protocol.” Let’s start where it hurts: Chinese hackers, yes, them again, have snagged control of Microsoft servers at hundreds of US government agencies. If you thought your local DMV was bad at patching systems, just wait—these hacks reached heavyweights, like the US nuclear weapons agency and the Pentagon’s cloud services. This bombshell, revealed by Andrew Orlowski in The Telegraph, forced the Pentagon to alert all branches: “assume you’ve been breached.” I call that the new baseline for US cyber hygiene. No more “if”—it’s just “how bad.”

The attack signature? Not just one-off break-ins. Instead, it’s “everything, everywhere, all at once,” per Jen Easterly, ex-CISA chief. Ciaran Martin, former NCSC head, said China’s matured from commercial espionage to surgical, relentless cyber warfare, with latest campaigns like Salt Typhoon and Volt Typhoon skipping between government, military, and critical infrastructure—energy, telecom, water, transit, you name it.

Now, about that pesky SharePoint hack—Microsoft just outed three Chinese state-backed groups: Linen Typhoon, Violet Typhoon, and Storm-2603. They exploited unpatched SharePoint servers belonging to US institutions and enterprises. The Silicon report and Palo Alto Networks both warned that stolen cryptographic keys could let attackers impersonate users indefinitely, even after patching—so those servers might as well have a “Kick Me” sign taped on them.

Next, let’s get a little virtual—Fire Ant, as tracked by Sygnia, compromised VMware ESXi hypervisors with custom tools, slipping past endpoint detection. These guys not only tunneled through legitimate network paths but established persistent backdoors, using old Medusa rootkit variants. That’s stealth at James Bond levels, but with more Python scripts and fewer martinis. This campaign snuck into networks thought to be isolated and then, surprise!—attackers popped up inside, living off the land for months, harvesting credentials and moving laterally like dancers at a cyber ballet.

On the human front, a Chinese-American engineer, Chenguang Gong, just pleaded guilty in California for stealing over 3,600 chip design files. According to TRT Global, this is just the tip of the spear for a wider wave: deepfake-enabled social engineering attacks are exploding. ABC News notes that these ultra-realistic imposters don’t just trick grandma for her banking PIN—they’re targeting whole exec teams, stealing IP or manipulating supply chains by impersonating CEOs or engineering candidates.

Strategically, the White House just rolled out a big, beautiful “America’s AI Action Plan” to fight back. The plan tightens export controls on advanced chips and AI compute—yes, that means semiconductor tech too—to keep US-origin smarts out of Chin

This content was created in partnership and with the help of Artificial Intelligence AI.