This is your Tech Shield: US vs China Updates podcast.

Hey there, I'm Ting, and I'm here to give you the lowdown on the latest US vs China cyber updates. It's been a wild few days, folks. As of today, January 2, 2025, tensions are running high.

Let's dive right in. The US Treasury Department just announced a major cybersecurity incident, attributing it to Chinese state-sponsored hackers. These attackers infiltrated the department's systems through a third-party vendor, BeyondTrust, compromising a key used to secure a cloud-based technical support service. This breach follows a string of recent attacks on US government agencies and telecommunications companies, which have been linked to Chinese government-backed hackers.

Anne Neuberger, the deputy national security adviser for cyber and emerging technologies, emphasized that many organizations are still failing to use basic cybersecurity practices, making them easy targets. The Biden administration has been working to counter these threats, including warning China Telecom's US subsidiary of potential national security risks and imposing sanctions on Chinese entities linked to previous hacking operations.

But here's the thing: China denies any involvement, calling the allegations "baseless" and lacking evidence. The Chinese embassy in Washington even accused the US of spreading disinformation about the so-called Chinese hacking threat.

Now, let's talk about the industry response. BeyondTrust has notified affected customers and is supporting the investigation. The company holds contracts with several federal agencies, including the Department of Defense and the Department of Justice.

In terms of new protection measures, the Cybersecurity and Infrastructure Security Agency (CISA) has been providing guidance on Chinese government and affiliated cyber threat actor tactics, techniques, and procedures (TTPs). They recommend organizations take specific actions to protect critical infrastructure, including patching vulnerabilities and implementing robust cybersecurity practices.

Jeff Le, VP of Global Government Affairs and Public Policy at SecurityScorecard, forecasts a challenging 2025, driven by escalating nation-state aggression and fragmented AI legislation. He warns that third-party breaches will reach critical mass, threatening entire supply chains.

So, what's the takeaway? The US is ramping up its cyber defenses, but there's still a long way to go. As Karoline Leavitt, Trump's transition spokeswoman, put it, "For too long our country has been on defense when it comes to cyberattacks." It's time to take a proactive approach and hold China accountable.

That's all for now, folks. Stay vigilant, and let's keep the conversation going.

For more http://www.quietplease.ai


Get the best deals https://amzn.to/3ODvOta