This is your Silicon Siege: China's Tech Offensive podcast.
Welcome back, listeners—Ting here, and let’s skip the firewall jokes because things are heating up for real on the Silicon Siege: China’s Tech Offensive. In just the past two weeks, Chinese state-sponsored cyber actors have thrown down a relentless gauntlet targeting US tech sectors, and if you thought your day was complicated, try patching zero-days with Salt Typhoon at your digital doorstep.
Let’s start with the industrial espionage bombshell: On October 15th, security giant F5 disclosed that their systems had been infiltrated by the China-based UNC5221 crew using the BRICKSTORM malware. These hackers camped out for over a year, quietly siphoning portions of the precious BIG-IP source code and leveraging stolen data on new vulnerabilities. According to Mandiant and CrowdStrike, while the hackers didn’t tamper with code repositories, the breach was so serious the US Cybersecurity and Infrastructure Security Agency fired off an emergency directive—federal agencies had to patch or disconnect devices by, well, today. That’s a whole lot of government and private systems scrambling to slam the digital drawbridges.
And that’s just one vanguard. Simultaneously, multiple Chinese APTs—Linen Typhoon, Violet Typhoon, Storm-2603, and the headline grabber Salt Typhoon—weaponized the SharePoint ToolShell zero-day (CVE-2025-53770), which Microsoft only patched in July. These groups didn’t just target US government agencies and universities—they went international, popping open telcos, finance firms in Europe, and government networks from Africa to South America. Broadcom’s Symantec Threat Hunter Team details how Salt Typhoon deployed backdoors like Zingdoor and synergized with other groups, using bugs not just in SharePoint but also in SQL Server and web servers running ColdFusion. Salt Typhoon even mimicked legitimate software—using “mantec.exe” to hide their tracks. The cyber-ensemble has basically staged a world tour and the encore is ongoing.
And now, the US telecom sector: former FBI Director Christopher Wray flatly calls Salt Typhoon “the most significant cyber espionage campaign in history.” These folks aren’t just after IP; they’re compromising telecom giants like Verizon, AT&T, and T-Mobile—collectively 397 million subscribers strong. US senators, top security officials, the full alphabet soup of agencies: everybody’s grilling over the prospect of election interference, law enforcement surveillance backdoors, and military networks being silently infiltrated. Salt Typhoon is harvesting cell site data, intercept backdoors, call logs, even tracking cybersecurity personnel—feeding a feedback loop for future attacks and, maybe, blackmail. Anne Neuberger, then deputy national security adviser, confirmed these attackers could “geolocate millions, record calls at will.” That’s not paranoia; it’s the FBI’s estimate.
Meanwhile, a splash of drama at the policy level: the FCC revoked accreditation f
This content was created in partnership and with the help of Artificial Intelligence AI.