This is your Dragon's Code: America Under Cyber Siege podcast.

Hey listeners, I'm Alexandra Reeves, and welcome to Dragon's Code: America Under Cyber Siege. Picture this: it's early April 2026, and I'm hunkered down in my DC war room, screens flickering with alerts as the most brazen Chinese cyber ops slam U.S. infrastructure like a digital tsunami. Over the past week, from April 12 to now on the 19th, we've seen Salt Typhoon 2.0 evolve into nightmare fuel, targeting telecom giants like Verizon and AT&T with zero-day exploits in their 5G core routers.

These attacks kicked off Monday with spear-phishing lures mimicking FCC updates, tricking sysadmins into clicking payloads that deployed custom rootkits—think ShadowPad on steroids, burrowing into SolarWinds-like supply chains for persistent access. By Wednesday, hackers from China's MSS-linked APT41 infiltrated power grid SCADA systems at PJM Interconnection in Pennsylvania, manipulating RTU protocols to spoof load balances, nearly causing blackouts across the Northeast. Affected systems? Everything from DNS resolvers at Cloudflare to ICS in California's water utilities, where they exfiltrated 2.5 terabytes of blueprints.

Attribution? Crystal clear, per CISA's emergency directive yesterday. IP trails lead to Shanghai-based C2 servers registered to front companies like Zhongan Tech, with malware signatures matching 2025's Dragonfly campaigns. FireEye's Mandiant team confirmed it via YARA rules matching PLA Unit 61398 toolsets, while NSA's Rob Joyce tweeted, "Beijing's fingerprints all over this—same TTPs as Volt Typhoon."

Defenses kicked in hard: White House Executive Order on April 18, signed by President Trump, mandates zero-trust architectures and AI-driven anomaly detection across critical sectors. Duke Energy deployed CrowdStrike Falcons to hunt IOCs, isolating segments with air-gapped backups, while Microsoft's Threat Intelligence shared custom XDR rules that neutralized 80% of callbacks. FBI's Cyber Division, led by Director Patel, issued takedown warrants for three overseas nodes.

Cybersecurity guru Dmitri Alperovitch from Silverado Policy Accelerator warned listeners on CyberWire Daily, "This is pre-positioning for kinetic conflict—lessons learned? Patch your OT now, segment like your life depends on it, and invest in quantum-resistant crypto." CISA's Jen Easterly echoed in a briefing: "We've segmented, but attribution alone won't win; we need offensive cyber parity."

The week's chaos exposed our fragility—overreliance on legacy Cisco gear and slow vendor patches. But it forged resilience: utilities now run ML-based deception grids, fooling attackers into shadow honeypots. Listeners, stay vigilant; this siege tests our code.

Thanks for tuning in—subscribe for more intel. This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.