Tech Shield: US vs China Updates

This is your Tech Shield: US vs China Updates podcast.

It’s Ting, cyber sleuth extraordinaire, coming at you hot with everything you need to know about the latest in the blistering US versus China tech clash. Buckle up, listeners, because “Tech Shield: US vs China Updates” has had the energy of a DEF CON afterparty all week!

Let’s hit the red-hot headline: The White House just dropped its biggest AI and cybersecurity playbook yet, titled “Winning the Race: America’s AI Action Plan.” No fluff—it calls for airtight *high-security data centers* for military brass, fully “secure-by-design” AI to fend off foreign hackers, and, for the first time, a serious push to work alongside the likes of the UN and G7. Why? The Trump Administration admits if Uncle Sam doesn’t show up to global AI policy tables, China just runs the place. That’s a strategic about-face: the US isn’t just defending, it’s playing cyber world chess right alongside Beijing.

Now, onto the code-sizzling action—a blistering new report from SentinelLabs and charges just laid out by the DOJ have pulled the mask off Silk Typhoon, aka Hafnium, China’s MSS-backed hacking behemoth. Xu Zewei and Zhang Yu, both linked through their companies in Shanghai, have been indicted for espionage, their firms holding patents straight from a hacker’s fever dream—think intrusive data exfiltration and remote cellphone forensics. Microsoft says these pros are still hitting state and federal agencies, particularly hammering Microsoft’s SharePoint and Exchange platforms. If you’re a sysadmin, you already know the patching treadmill is set to “insane.” On July 22nd, Microsoft dropped yet another emergency patch, tied directly to these China-based groups.

But here’s the twist that would make even Sun Tzu sweat: the US is facing its own defensive drama. CISA, America’s key cyber shield, is now scraping by after contract lapses slashed its Joint Cyber Defense Collaborative team—just as Chinese aggression is peaking. CISA is running on emergency funding, meaning fewer boots on the digital ground. Former US cyber czar Michael Daniel and Council on Foreign Relations’ Tarah Wheeler are sounding the alarm, warning we’re “measurably increasing our cyber risk.” Layoffs, fewer experts, and even bigger incentives for insider threats; it’s like running a firewall on Windows 98.

Meanwhile, private sector response is off the hook—new partnerships between Microsoft, ICF, and the health sector are firing up rapid advisories, and SharePoint vulnerabilities are now spreadsheet fodder in every boardroom. The American Hospital Association’s John Riggi is telling hospitals to lock it down, fast.

Let’s talk gaps: AI-driven defense tools and secure-by-design tech are brilliant in theory, but with CISA hemorrhaging staff, experts say the blueprint may outpace boots on the ground. And with state-backed hackers showing off custom hardware for HUMINT ops, analysts like Dakota Cary warn attribution to the MSS is only getting tougher.

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, delivering the latest on Tech Shield: US vs China Updates—and whew, the cyber front has been absolutely wild these past few days. Forget popcorn, you might need a firewall just to keep up.

First up, the Microsoft SharePoint incident. You know it’s bad when a single bug rocks the whole digital landscape, but this was extra spicy. After Vietnamese researcher Dinh Ho Anh Khoa showed off a zero-day at Pwn2Own Berlin, threat intel sleuths discovered over 400 organizations got hit—think the US National Nuclear Security Administration, folks. Microsoft’s Active Protections Program, MAPP, is under massive scrutiny because there are credible suspicions that exploit details leaked to Chinese actors before anyone could even say “critical patch.” Microsoft rushed their fixes in, but according to Forrester’s Jinan Budge, the breach timeline suggests these patches can’t keep pace with threat actors who are weaponizing vulnerability disclosures at speed.

Naturally, the Chinese Embassy in DC is on damage control: spokesman Guo Jiakun says China opposes all hacking—what else are they going to say? Meanwhile, Salt Typhoon and Volt Typhoon—those are Chinese APTs for the new listeners—are running “everything, everywhere, all at once” attacks. Former UK cybersecurity lead Ciaran Martin says China’s hacking game has evolved from smash-and-grab to long-term, covert infiltration. They’re hiding inside networks like digital ninjas, going undetected for months or years.

US cyber defense response? The Department of Defense had to be coaxed—thank you, Property of the People FOIA magicians—into confirming an “assume breach” alert. Now, every US military branch has to operate as if adversaries are already in their systems. Imagine resetting your home Wi-Fi every five minutes, but for nuclear secrets.

Industry isn’t taking this lying down. Following the chaos, CISA dropped 15 new advisories on industrial control systems in just seven days. Microsoft’s Patch Tuesday sent out updates for 137 vulnerabilities. Google flagged live zero-day exploitation of SonicWall, and WordPress urged admins to patch a critical plugin flaw. CISA and the FBI have warned about the Interlock ransomware gang, which has been slamming healthcare and virtualization platforms with drive-by downloads.

Now, let's talk industry adaptation. Microsoft’s move to restrict Chinese engineering access to DoD cloud projects is a big step, but experts like Rapid7’s Tod Beardsley point to “supply chain shadow IT” as a weak link—patching isn’t enough if insider risk isn’t locked down. And over on the infrastructure side, Chinese group Fire Ant has worked VMware and F5 vulnerabilities so thoroughly that even network segmentation—the old “moats and castles” approach—is getting bypassed. They’re running rootkits for persistence and deploying tunneling webshells to bridge supposedly isolated systems.

Emerging defense tech includes threa

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, and you’ve officially logged on for a cyber adventure hotter than a Shanghai server room in July! Let’s jump straight into this week’s top chapter in the never-ending US versus China cyber saga, where the battleground is shifting, the hacks are multi-layered, and even the tech is developing a personality of its own.

If you thought summer was supposed to be slow, try telling that to the folks at Microsoft. Since July kicked off, three state-affiliated Chinese hacking groups—Linen Typhoon, Violet Typhoon, and the mysteriously meteorological Storm-2603—have been exploiting fresh vulnerabilities in good ol’ Microsoft SharePoint. If you run SharePoint on-premises, you may already be sweating: the attacks sidestepped standard defenses and left more than 100 organizations globally exposed, including the US Department of Energy and, get this, the National Nuclear Security Administration. No nuclear secrets lost, but how’s that for a weekend scare?

Microsoft has pushed out rapid patches, but attackers keep juking defenses, sneaking back in by lifting authentication keys and impersonating users. Trend Micro even dropped a $100,000 prize on the Vietnamese cybersecurity researcher Dinh Ho Anh Khoa, who flagged the flaw at a hacker event, and Microsoft patched it by July 8. But within 48 hours, Chinese actors were back with workarounds. Microsoft just released a follow-up patch, so now we all wait and see: do defenses finally hold, or does the cat-and-mouse game continue?

Meanwhile, the Feds and tech giants are issuing advisories faster than you can say “zero day.” The FBI and CISA urge all agencies and businesses to not just patch up but migrate to cloud-based services and add robust, layered defenses. And if you’re still clinging to that on-prem SharePoint install, you are now officially in DEFCON Mode. Security teams are under pressure to monitor for credential theft and unusual logins; it’s not paranoia if they’re already inside.

Zooming out, the geopolitical shadowboxing is getting spicier. At the World Artificial Intelligence Conference in Shanghai, Premier Li Qiang called for a global AI “cooperation organization.” It’s positioned as a counterweight to the US, which just rolled out its own AI Action Plan and tightened the screws on chip exports. In short: the US says, “Let’s dominate with AI and keep our chips close,” while China replies, “How about a global party where everyone brings their own encryption?”

In space, China’s also been flexing. According to Asia Times, their new BGSe crystal for anti-satellite lasers could let them “dazzle” US space assets, as General Bradley Saltzman warned. The Pentagon is now racing to harden satellites, diversify ISR assets, and consider new non-kinetic countermeasures. Still, experts like Dennis Rice caution that the US’s focus on resilience over actual deterrence could leave gaps—America may be building better walls, but is it

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Listeners, Ting here with your Tech Shield: US vs China cyber update for the week ending July 25, 2025. Let’s plug into this circuit—no need for a long intro, because the past few days in cyberland have been an electrifying sprint.

The week kicked off with a Chinese hacking spree targeting on-premises Microsoft SharePoint servers across hundreds of US sites. Eye Security reported over 400 organizations compromised thanks to warlock ransomware unleashed by storm-2603, storming right through government and industry—from the National Nuclear Security Administration to the Rhode Island General Assembly. Microsoft confirmed in a packed blog post, and CBS News covered it, that not one but two Chinese state-backed groups—Linen Typhoon and Violet Typhoon—were having a wicked party on internet-facing SharePoint, dropping ransomware and scooping up whatever unpatched vulnerabilities they could find.

The Department of Homeland Security and the National Institutes of Health both felt the sting. The Defense Intelligence Agency even saw SharePoint access flatline for hours. Here comes the government response: the Cybersecurity and Infrastructure Security Agency (CISA) issued immediate advisories. Tricia McLaughlin at DHS said they’re “working around the clock” with Microsoft to slam every digital door after the intrusions. So far, CISA is reporting no evidence of data theft at DHS, but as every cyber pro knows—no evidence is not always the same as no breach.

Microsoft scrambled, issuing security patches and promising to cut further ties with its China-based support teams for its Government Community Cloud—after ProPublica’s eye-popping report revealed foreign tech workers with advanced access had been maintaining sensitive US DoD systems for years. This has Washington fuming, with Defense Secretary Pete Hegseth ordering a full review and warning that foreign engineers—China included—should never touch US defense systems.

But here’s what’s really charging the firewall: On July 23, the White House lit up its “Winning the Race: America’s AI Action Plan.” The playbook connects cyber defense straight to AI innovation: think an AI Information Sharing and Analysis Center within DHS, rapid updates to CISA protocols, and “secure-by-design” mandates for any new AI tech deployed on US soil. Robert Huber, Tenable’s CSO, wasn’t pulling any punches when he called unsecured AI a “liability”—which is why the plan mandates high-security data centers, tight semiconductor supply, and real teeth for AI export controls to keep advanced US tech from, let’s be honest, getting reverse-engineered in a Shanghai suburb.

Alongside these steps, President Trump’s Executive Order 14306 doubles down on secure software development and sharper sanctions against foreign cyber threat actors, with China right at the top of the US “do not trust” list, as outlined by PilieroMazza and the Morgan Lewis briefings. NIST has their hands full u

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your resident China-cyber-hacking whisperer. If you prefer drama-free newsletters, sorry; this past week in the US vs China cyber chess match has been anything but quiet—think DEFCON meets House of Cards, with a side of zero-day exploits.

Let’s plug right in with the SharePoint fiasco that’s been tripping alarms everywhere from the Pentagon to, get this, the agency that designs US nuclear weapons. Microsoft just confirmed that two Chinese state-backed groups, Linen Typhoon and Violet Typhoon, have been exploiting big flaws in SharePoint on-premise software since early July. Microsoft’s own advisories and CISA say these aren’t just your average bugs—one is a nasty spoofing vulnerability and the other lets attackers run code remotely, which is like handing Chinese teams the keys to your filing cabinet and then going on holiday.

CISA, never one to miss a deadline, told all federal agencies—plus anyone who handles critical infrastructure, from utilities to health care—to patch up by today, July 23rd, or risk a cyber facepalm. According to Chris Butera at CISA, they’re working in lockstep with Microsoft and federal partners because, as of now, nearly 400 agencies, companies, and organizations have been compromised to some degree. So, if your org still thinks patching is like flossing (only when the pain hits), time to rethink that philosophy.

On the advisory front, the US government is also waving red flags for businesses working overseas, especially in China. Per the latest State Department alerts, travel to China now comes with a bonus side of increased cyber scrutiny and risk. Imagine clearing customs and your phone gets more attention than your passport. Yep, it’s 2025.

Meanwhile, industry is feeling the heat. The Department of Defense is fast-tracking the so-called AI and Autonomous Systems Virtual Proving Ground to test just how hack-resilient our military tech can be. President Trump’s newest AI Action Plan puts massive weight on AI reliability and domestic procurement, making it clear—if you’re not building with accountability, you’re out. There’s even talk of clawbacks if federal R&D ends up helping Beijing instead of Baltimore.

Ransomware hasn’t taken a breather either. The Feds, including the FBI and HHS, just released a joint advisory on Interlock—a ransomware gang that’s been using sneaky “drive-by download” tactics and double extortion on hospitals and critical networks. Their advice? Step up DNS filtering, web firewalls, and multi-factor authentication, and stop clicking every link your aunt forwards you.

But let’s not wrap this up with a cyber bow. Experts, like Jim Hansen and Michael Kratsios, point out the big gaps—many federal contractors still lack basic password hygiene, multifactor authentication, and network monitoring. The open global market remains a double-edged sword: innovation thrives, but espionage is almost baked in. Until public and

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here—your favorite cyber sleuth, caffeine addict, and bulletproof-vest-wearing expert on all things hacking, China, and the great digital tug of war. Let’s not waste a byte, because this past week in cyber, the US versus China chessboard just got a thunderous shake.

Top headline: Defense Secretary Pete Hegseth has yanked the emergency brake on Pentagon cloud services after a revelation that Chinese labor was—brace yourself—helping patch some of the Department of Defense’s most sensitive systems. According to Pete Hegseth’s video blast, the Pentagon was tipped off to a vulnerability in a legacy cloud system, and a ProPublica exposé detailed how Microsoft used Chinese engineers supervised by “digital escorts”—that’s American intermediaries with security clearances but sometimes less technical know-how than your neighborhood PC repair shop. These escorts were essentially relaying fixes from China into DoD clouds, especially on systems handling Impact Level 4 and 5 info—one rung below “top secret.” Microsoft had to scramble, with chief comms officer Frank Shaw announcing a full stop on China-based support for military clouds, effective immediately. Turns out, this may be a wider problem, so Hegseth ordered a lightning-fast, no-stone-left-unturned review of all DoD tech contracts, especially for supply chain risks.

Meanwhile, the private sector is feeling the heat, too. The Multi-State Information Sharing and Analysis Center, or MS-ISAC, just warned over a thousand state and local government servers could be wide open due to an actively exploited Microsoft SharePoint vulnerability dubbed “ToolShell.” According to the Center for Internet Security and Google’s threat unit, threat actors—including, surprise, Chinese state and private groups—are installing webshells and exfiltrating encryption keys. This isn’t “apply the patch and nap”; Mandiant CTO Charles Carmakal urges organizations to assume compromise, investigate, and lock down, because bad actors may already be inside the gates.

Industry’s scrambling, some good, some gap-y. Microsoft’s speedy policy change is admirable, but worries remain about similar models elsewhere in defense contracting. Some U.S. digital escorts managing foreign code had neither the clearance nor the chops to fully assess what they were shipping into defense networks. That’s like handing ChatGPT the launch codes and hoping it reads the instructions correctly.

Zooming out, the strategic shift is real. Cybersecurity is now a boardroom obsession. The WisdomTree Cybersecurity Fund is off the charts, and AI-powered defensive tools are spreading faster than a self-replicating worm. Automation, intelligent intrusion detection, and adaptive incident response are now standard at power utilities, banks, and, hallelujah, government agencies, thanks to relentless Ransomware-as-a-Service campaigns driving urgency up and patience down.

But here’s the catch—the

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Listeners, Ting here—your cyber-whisperer with the latest on Tech Shield: US vs. China. Strap in; it’s been a week of whiplash updates in America’s digital dogfight with Beijing.

Let’s start with what’s got DC caffeinated: the Department of Justice kicked off full enforcement of its new Data Security Program on July 9, aiming to slam the vault shut on foreign adversaries—especially China—snooping on US government data and sensitive personal info. This regime? Ruthless. If your organization hands off, say, medical data or encrypted files to anyone linked to China, expect up to $368,000 in fines *per incident*, or double the transaction value, whichever is bigger. Willful violations? Those can now get you twenty years behind bars plus a million-dollar tab. According to DOJ, the urgency can’t be overstated—China’s hunger for American data is “increasingly urgent”—and this time, prompt compliance is non-negotiable.

Not to be outdone, the DOJ’s National Security Division’s new rule on data flows took effect after a grace period, targeting not just data brokers but any US business tangling with covered entities in China—even those just signing vendor contracts. Everyone’s scrambling to run audits, check employee rosters, and firewall data, as non-compliance is a one-way ticket to regulatory pain.

Now, the corporate battlefield. Microsoft shut the door on China-based engineers touching US Defense Department cloud projects after a bombshell ProPublica probe. Turns out, American “digital escorts” had been relaying code fixes from China-based staff—but these escorts often didn’t know what code they were typing in. Enter Defense Secretary Pete Hegseth, pulling the plug immediately and ordering a top-to-bottom review of Pentagon tech supply chains. Microsoft claims it’s done with Chinese support for DoD, but other Pentagon cloud contractors may soon face similar scrutiny. Cue anxiety in Redmond and Silicon Valley.

Meanwhile, CISA—the nation’s cyber sentinels—sounded the alarm about an active exploit in Microsoft SharePoint servers, dubbed “ToolShell.” Already, at least 50 breaches detected, two federal agencies compromised, and hundreds of state and local servers left in the cyber wind. Fixes are rolling out, but Google’s Mandiant unit warns this isn’t a patch-and-forget event: persistent, unauthenticated access means hackers can camp out long-term unless organizations thoroughly cleanse compromised systems. Pro tip from Mandiant’s Charles Carmakal: diligence beats patchwork.

Beneath the digital surface, literally, the Federal Communications Commission pre-announced a vote next month to ban Chinese involvement in America’s undersea cables. Chinese companies like SB Submarine Systems are trying to weave themselves into the global telecom fabric, but US officials see this as Beijing’s long game to surveil, degrade, or outright shut down Western communications in a crisis. Expect more Beltway brawls a

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Alright listeners, Ting here, dialing in with some cyber spice on this week’s teched-out battlefront: US vs. China, code-named Tech Shield. Buckle up, because if you blinked, you missed a hack or three.

Let’s hit the big one. Over the past few days, Chinese-linked hacking crews—think Volt Typhoon and Salt Typhoon—have not just ramped up, but turbocharged their infiltration game, burrowing deeper into US critical systems. The Department of Defense just uncovered Salt Typhoon’s trail in the National Guard Systems, which could potentially compromise state law enforcement networks and local government integration. This echoes last year’s telecom mega-hack, but now it’s gotten personal. According to the DOD and coverage from NBC, officials are laying blame squarely on Salt Typhoon, while China’s embassy tries its usual “prove it” routine.

Zooming out from hacks to holistics: Congress is cracking down on China-backed AI like DeepSeek, after scathing warnings from a NATO ally, the Czech Republic, whose security agency flagged DeepSeek as a Trojan horse for Beijing’s spies. The US Navy and NASA followed suit, purging DeepSeek from government devices. Congress is now fast-tracking the No Adversarial AI Act, aiming to ban adversary-linked models from government use, building what they’re calling a public “firewall.” Yet, policy whiplash struck: the Trump administration rolled back Nvidia chip export controls, possibly fueling China’s next-gen AI—hello, extra development horsepower for DeepSeek.

Now, for the new rules: The Justice Department’s Data Security Program kicked in this April, enforcing steep penalties—up to $1 million or 20 years in prison—for shady data deals involving “countries of concern” like China. This includes bulk personal, geolocation, and genomic data. The feds now require airtight contractual safeguards and cybersecurity standards, with audits rolling out in October. Companies are scrambling to audit, patch, and update compliance. A Compliance Guide was published, but the real test is how these protections stand up when the rubber meets the code.

Meanwhile, the sectoral frontlines are brutal: Advanced groups like RedMike (or Salt Typhoon, depending on who’s counting) have been exploiting unpatched Cisco vulnerabilities to compromise global telecoms, including US-linked networks. Strategic assets like the semiconductor sector and technology research centers have seen spear phishing and malware attacks involving custom tools—like the backdoor “Voldemort,” discovered by Proofpoint—making long-term implants the name of the game.

Industry, for what it’s worth, isn’t sitting around. Security teams are pushing for zero trust, segmenting networks, beefing up patch protocols, and taking CISA’s patch advisories more seriously than ever. But there’s friction: major staff cuts at CISA and the State Department’s cyber diplomacy bureau firings are putting a dent in US coordination. Expert

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, I’m Ting—your friendly, sarcastic cyber-whiz who can read Chinese press releases faster than you can say “zero-day.” The last few days in the US-China cyber showdown? Well, let’s just say, if you thought the drama was cooling off in July, buckle up.

The major bombshell dropped this week from a ProPublica investigation: The Pentagon has been letting Microsoft engineers based in China help maintain some of the Department of Defense’s most sensitive cloud systems. Not via a slick hack, but by official design. Yes, you heard that right—back-end support from mainland China, rubber-stamped by the DoD because, apparently, outsourcing is still king. The twist? These Chinese engineers send work requests, which are then executed by so-called “digital escorts”—US citizens with clearances, but often barely more tech-savvy than your cousin Larry resetting the Wi-Fi. Microsoft insiders warned this was a classic fox-guarding-the-henhouse scenario, but the company pushed forward regardless. Oh, and these systems aren’t just storing your typical personnel records—they cover real-deal military ops and, if compromised, could spell catastrophic consequences for national security. Former CIA exec Harry Coker claims hackers would salivate for this kind of access[ProPublica].

Meanwhile, on the actual threat front, the Chinese state-backed unit “Salt Typhoon”—think of them as the cyber ninjas of Beijing—managed a sustained breach of a US state’s Army National Guard network. Over months, they grabbed network configs, admin credentials, and, most worryingly, sensitive data from units in nearly every US state and territory. According to top cloud security CTOs, the incident’s scale is a huge wakeup call. Gary Barlet, who’s worn both Air National Guard and USPS CIO hats, says the DoD now has no choice but to “assume their networks are compromised and will be degraded.” The days of blissful faith in internal firewalls are over.

On the defensive side, the FCC’s new Council on National Security announced expanded measures targeting the telecom supply chain. They’re separating secure US network components from foreign ones, especially Chinese, by widening the “banned vendor” list and kicking questionable overseas testing labs out of the approval process. We’re talking stricter scrutiny on everything from hardware to firmware, hoping to patch up vulnerabilities before Beijing finds them.

Not to be outdone on the regulatory front, the Department of Justice’s National Security Division just rolled out tough new rules prohibiting the sale or licensing of US person data to China and other “countries of concern.” Now, vendor deals with Chinese-linked entities face much tighter controls, and compliance guides are flying off digital shelves.

For the geeks and crypto folks, MITRE’s AADAPT framework is fresh out of beta. It’s specifically crafted for plugging holes in blockchain-based payment networks—think smart

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here—your favorite cyber sleuth, caffeine enthusiast, and resident watcher of all things China and hacking. Grab your firewalls because the cyber front lines have been sizzling this week in the grand tech smackdown that is US vs China, and I’m diving straight in.

Let’s start with what’s making every CISO sweat: the Salt Typhoon and Volt Typhoon threat groups. Washington’s still reeling from their persistent incursions into critical infrastructure—think energy, water, and transportation. Katie Sutton, Trump’s pick for top cyber policy, just told lawmakers she’s focused on restoring real deterrence. In her words, the goal is making sure the U.S. “has the offensive and defensive capabilities and resources necessary to credibly deter adversaries.” The Senate is even weighing a defense provision to harden critical nodes against these Chinese state-backed hackers. If you thought cyber defense was just about patching servers—nope, geopolitics, tech, and deterrence are now inseparable.

Now, onto fresh protection measures. This week, the DOJ kicked its Data Security Program into full gear. The long grace period is over; as of July 8, companies and agencies face enforcement for data policies that stop adversaries like China from accessing sensitive US personal and government data. The new rules demand strict controls—think risk-based data procedures, tough vendor vetting, internal audits, and those glorious annual certifications. Miss the next compliance checkpoint on October 6 and you’ll be in DOJ crosshairs. This push is a direct response to China’s aggressive data grabs in biotech, academic research, and more. The FBI says over 2,000 PRC-related theft cases are ongoing. How’s that for motivation to update your password policy?

But wait—while the DOJ’s shoring up data, the Trump administration is playing two-faced with budgets. The Pentagon just got the green light to spend a cool billion on “offensive cyber operations” targeting Indo-Pacific bad actors (cough, China), but at the same time, defensive budgets and the CISA workforce got slashed. Senator Ron Wyden summed up the mood: boosting offense while gutting defense could mean private companies and small towns are left exposed when the retaliatory hacks come raining down. It’s like buying a fancy sword and selling your shield at a yard sale.

Industry’s not sitting idle, though. After a major breach at top DC law firm Wiley Rein—suspected Chinese hackers snuck in for intel on trade policy and Taiwan—the sector is tightening up with mandatory multi-factor authentication and AI-driven anomaly detection. Meanwhile, deepfakes and AI-enabled impersonations have lawmakers spooked, especially after scammers tried to impersonate Senator Rubio in diplomatic circles. New advisories urge strict channel verification and zero trust protocols for sensitive communications.

Now, for the tech toys: AI-driven network defense is having a mom

This content was created in partnership and with the help of Artificial Intelligence AI.