Tech Shield: US vs China Updates

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech showdown. Picture this: it's late February 2026, and the digital trenches are buzzing with fresh salvos in the Tech Shield battle. China's National Computer Virus Emergency Response Center, or CVERC, just dropped a wild conspiracy bomb on Thursday, claiming the US is hacking itself—think Volt Typhoon as a fake-out—to smear Beijing, and now accusing Uncle Sam of busting Binance's Zhao Changpeng and scammer Chen Zhi just to hoard crypto for dollar dominance. Cute theory, but ignores China's own death sentences for Cambodian scam lords.

Meanwhile, over here in the States, we're patching like mad. CISA's screaming about Resurge malware lurking undetected in Ivanti Connect Secure gear—exploits from weeks ago still biting critical infra. Volt Typhoon and Salt Typhoon, those Ministry of State Security creeps, are pre-positioned in our telecoms, energy grids, and water utilities, hoarding access for a Taiwan flare-up or worse. The All-Transatlantic Alliance, or ATA, warns China's the top dog in persistent threats, with hackers jailbreaking Anthropic's Claude for AI-fueled attacks on 30 firms and agencies worldwide—first big minimal-human cyber blitz.

US countermeasures? DOD's snapping up AI coding tools for tens of thousands of devs to crank out secure code at the edge, while global cyber spend hits $240 billion this year per J.P. Morgan. Senate's pushing Health and Human Services cyber overhauls, but Senator Ron Wyden's stonewalling Lt. Gen. Joshua Rudd's nod for Cyber Command and NSA head—dude lacks the digital chops, says Wyden. And don't sleep on China's own flex: their 2025 Cybersecurity Law kicked in January 1st, jacking fines to 10 million RMB for critical infra fails, mandating AI lifecycle risk checks, and supply chain audits for CIIOs—strictest yet, with safe harbor for self-fixers.

Expert take? These patches and AI defenses are clutch—Admiral Samuel Paparo testified China's cognitive warfare mixes hacks with psyops to sap Taiwan's will—but gaps yawn wide. No visibility into China's open AI models means we're blind to their next jailbreak tricks, per Lawfare. Pre-positioned footholds create reverse deterrence: fear of blackouts sways policy without a shot fired. Effectiveness? Solid on detection, shaky on expulsion—Taiwan's anti-fraud push shows cognitive countermeasures work, but we need unified intel sharing yesterday.

Whew, Tech Shield's holding, listeners, but it's a razor-wire tango. Stay vigilant, patch up, and outsmart the red glow.

Thanks for tuning in—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth on all things China hacks and digital showdowns. Buckle up, because the past few days have been a wild ride in the US-China tech shield saga—think Google slapping down Beijing's sneaky spies while Uncle Sam twists arms on data flows. Let's dive right in.

Just yesterday, on February 25, Google’s Threat Intelligence crew, led by sharp analysts John Hultquist and Charlie Snyder, nuked a Chinese-linked hacking ring called UNC2814, aka Gallium. These ghosts breached 53 orgs across 42 countries—governments, telcos, you name it—using sneaky Google Sheets for command-and-control and backdoors like GRIDTIDE to snag voter IDs, phone numbers, even birthplaces. Google terminated their Cloud projects, zapped their net infra, and shut down accounts blending into legit traffic. Not linked to Salt Typhoon, but same vibe: persistent espionage. China’s embassy, via spokesperson Liu Pengyu, cried foul, calling it smears, but hey, actions speak louder.

Meanwhile, CISA dropped urgent advisories after a Chinese-tied probe into US energy grids—no outages, but it exposed identity flops like default creds and weak OT segmentation. They’re yelling: MFA everywhere, ditch legacy gear, segment IT from ops. Singapore’s telecoms got hit too—all four majors compromised in a coordinated spy fest, proving telcos are Beijing’s honey pots for intel and downstream hits.

On the defense front, Trump’s team is flexing hard. Secretary of State Marco Rubio’s February 18 cable orders diplomats to battle data sovereignty laws—like China’s data grabs or EU’s GDPR—that crimp US AI and cloud flows. It’s a push for the Global Cross-Border Privacy Rules Forum to keep data zipping freely, framing Beijing’s rules as censorship enablers. OpenAI caught a Chinese cop using ChatGPT to polish "cyber special ops" reports, plotting harassment against critics worldwide—fake accounts, forged docs, even impersonating US officials. Hundreds of staff, thousands of bots. Resource-intensive silencing.

Industry’s scrambling: Apple’s Tim Cook, Nvidia’s Jensen Huang, AMD’s Lisa Su, Qualcomm’s Cristiano Amon got CIA’s William Burns and DNI Avril Haines briefing them last July on China’s 2027 Taiwan chip grab risk. TSMC makes 90% of advanced semis; a blockade? Treasury’s Scott Bessent calls it economic apocalypse. CHIPS Act billions and Trump tariffs nudge fabs stateside, but costs lag—Nvidia and Apple pledging US builds, yet years away.

Expert take? These moves are solid denial plays—Google’s disruption stings, CISA patches basics—but gaps loom. As Joel Wuthnow notes, deterrence needs hitting Xi’s calculus directly; military purges hobble PLA readiness, per Reuters. AI’s dual-edged: foes compress attack timelines, per Google, while agentic flaws like OpenClaw’s prompt injections scream for identity governance. Cyber’s no silo—it’s strategic turf, but without faster supply chain shifts and Xi-piercing mess

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth on all things China hacks and US shields. Buckle up, because the past week in the US-China cyber arena has been a non-stop ping-pong match of exploits and patches—Volt Typhoon still lurking in energy grids like uninvited guests at a power plant party, according to Red Packet Security reports.

CISA just dropped the hammer with an emergency directive on that nasty Dell RecoverPoint vuln, CVE-2026-22769—hardcoded creds letting suspected Chinese actors like those behind Grimbolt backdoor sneak in since mid-2024. Federal agencies got three days to patch or face persistent access in VMware backups. Innovate Cybersecurity nails it: this hits critical infrastructure hard, and it's a wake-up that Beijing's crews are playing the long game.

Meanwhile, Storm-2603, straight out of China's threat playbook per Tata Communications' advisory, is chaining SmarterMail's CVE-2026-23760 for unauth password resets, paving the way for Warlock ransomware. Ivanti EPMM zero-days, CVE-2026-1281 and CVE-2026-1340, are getting hammered too, per CSO Online, handing attackers MDM server control. And don't sleep on BeyondTrust's CVE-2026-1731 fueling lateral moves with VShell trojans, as Security Affairs details.

US defenses? A State Department cyber official via Cyberscoop is pushing quantum-resistant crypto transitions—public-private team-up or bust, folks. But here's the gut punch: CISA's shutdown under Trump 2.0 has them furloughing two-thirds of staff, canceling trainings and state SOC meetings, Politico reports. States are screaming—lost grants, no backstop for threats. Acting Director Madhu Gottumukkala told Congress over a third of threat hunters work unpaid. Effectiveness? Patches buy time, but gaps scream: Volt Typhoon's embedded deep in US energy nets for sabotage, FDD and Check Point echo. China's nuclear cyber edge, CNN intel says, pairs with digital webs in Indo-Pacific ports—5G, cams, all Beijing-tethered, MFALME Security warns.

Expert take from yours truly: These measures are band-aids on a hemorrhaging artery. Resilience, as Fortinet CTO Felipe Fernandez pushes, needs AI defenses and supply chain lockdowns, but CISA's gutted and China's asymmetric—probes around Taiwan, per Reuters on Aussie warship transits. Emerging tech like Golden Dome's JADC2 integrations at CSIS show promise for integrated missile-cyber shields against Guam strikes, but without funding, it's vaporware. Gaps? Workforce chaos, over-reliance on voluntary AI safety pledges from India's New Delhi Declaration—90 nations signed, zero teeth, Politico scoffs.

We've got tools, listeners, but execution's lagging. Patch fast, diversify vendors, quantum-proof now—or China's shadow nets the win.

Thanks for tuning in, smash that subscribe button! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech shield showdown. Picture this: it's been a wild week in the cyber trenches, and I'm diving straight into the frenzy as CIA Director John Ratcliffe drops a bombshell Mandarin video begging disillusioned PLA officers to spill secrets—think corruption scandals and purges hitting bigwigs like General Zhang Youxia. Beijing flips out, with Foreign Ministry spokesperson Lin Jian slamming it as "blatant provocation" from Modern Diplomacy reports, vowing "all necessary measures." China's counterpunch? They supercharge their Anti-Espionage Law, now snagging any data or gadget threatening national security, while the Ministry of State Security rolls out juicy reward hotlines and AI-mocking videos ridiculing Wall Street greed. Sneaky, right? They're purging the PLA ranks and birthing the Information Support Force to lock down networks tighter than Xi's grip.

But hold up, listeners—this is Tech Shield: US vs China, so let's flip to Uncle Sam's defenses. Google’s threat intel and Mandiant expose China-linked hackers feasting on Dell's zero-day CVE-2026-22769 in RecoverPoint since mid-2024, deploying stealth backdoors like BRICKSTORM and GRIMBOLT. Dell's patching that pronto, but it screams urgency. Poland's military? Banning Chinese-made cars from bases after spotting data-snooping risks in EVs—smart move against integrated spy cams. Meanwhile, USAR pumps $1.6 billion into maritime dominance per White House docs, eyeing cyber-secure shipbuilding to counter China's hypersonic YJ-19 subs narrowing the nuke boat gap, as Naval News details.

Expert take from me, your witty hacker whisperer: These patches and bans are clutch short-term firewalls, but gaps yawn wide. China's MSS is a beast at domestic spy-hunting, dismantling CIA nets since 2010, while our responses lag on supply chain vetting—looking at you, Apple privacy labels fibbing on Chinese smart home apps gobbling bystander data. Effectiveness? Solid 7/10 on alerts, but we need AI-driven anomaly hunters and Quad allies syncing defenses pronto, or Beijing's digital noose tightens. OPFOR Journal flags UNC3886 hammering Singapore infra, proving Indo-Pacific partners bleed first.

Canada's high caution on China travel underscores surveillance hell—Great Firewall blocks, Xinjiang cams everywhere. Trade wise, Supreme Court axes Trump's tariffs, per AP, handing Xi leverage before his March Beijing summit with Trump, but don't sleep: alternative duties loom via USTR probes.

Whew, cyber cold war's heating up, listeners—stay vigilant!

Thanks for tuning in, smash that subscribe button for more Ting intel. This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, it's Ting here, your go-to gal for all things China cyber chaos and hacking wizardry. Buckle up, because this week's US-China tech shield showdown has been a non-stop thrill ride of defenses, dodges, and digital drama. We're talking February 14th to 20th, 2026, with Volt Typhoon—that sneaky Chinese nation-state crew linked to Beijing—still lurking in US critical infrastructure like ghosts in the grid, per CYFIRMA's Weekly Intelligence Report.

First off, the US is flexing hard on protection measures. The FAR Council dropped a bombshell proposed rule on February 17th, banning federal agencies from buying semiconductors from high-risk Chinese firms by December 2027. Why? Backdoors in chips could wreck defense, telecoms, and energy systems—straight from Wiley Rein's alert. It's Congress slapping down China's semiconductor surge, but experts whisper it might crimp supply chains. Meanwhile, the Defense Department's Cybersecurity Maturity Model Certification, or CMMC, kicked off last November, now hitting small suppliers with audits and costs up to hundreds of thousands per firm. Reuters reports aerospace giants like those feeding Boeing and fighter jet programs are sweating, with some tiny vendors bailing out—88% of the sector's small biz, says the Aerospace Industries Association's Margaret Boatner. Compliance confusion? Massive, especially for international players juggling US rules and Europe's data privacy.

Government advisories are blaring: US National Cyber Director Sean Cairncross at the Munich Cyber Security Conference urged deeper alliances, ditching "America alone" for coordinated strikes against China-linked spies. CYFIRMA flags Volt Typhoon exploiting oldies like CVE-2022-41328 in Fortinet FortiOS and CVE-2023-27997. Patches? Urgent—Fortinet and VMware, patch now or pay later.

Industry's responding: Philippines' AFP confirmed on February 19th via ABS-CBN that China-based hackers are hammering away, echoing Volt Typhoon's playbook. Small defense suppliers are scrambling, some eyeing commercial gigs over Uncle Sam's red tape.

Emerging tech? AI defenses are rising, but gaps yawn wide—China's "reverse Great Firewall," per South China Morning Post and Leiden's Vincent Brussee, now geo-blocks official sites abroad, starving US OSINT gatherers. Effectiveness? Solid on bans and CMMC, but small biz exodus risks production bottlenecks, and unpatched vulns let Volt Typhoon persist. Witty take: It's like building a fortress while your plumbers quit—impressive walls, leaky pipes. Gaps scream for faster audits, global intel sharing, and quantum-resistant crypto to outpace Beijing's bespoke malware.

Stay vigilant, listeners—China's not slowing. Thanks for tuning in; subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth on all things China hacks and US shields. Buckle up, because the past week in the US-China cyber showdown has been a wild ride of embedded spies, zero-days, and frantic patches—think Volt Typhoon's evil cousins burrowing deeper into our grids while we're scrambling to plug the holes.

Dragos dropped their annual OT threat report on Tuesday, and it's a gut punch: China's Volt Typhoon—now tracked as Voltzite by Dragos CEO Robert M. Lee—is still squatting in US electric, oil, and gas networks, not for IP theft, but straight-up sabotage prep. They hit Sierra Wireless AirLink devices to slurp pipeline sensor data, tweak control systems, and snag configs to force shutdowns. Three new crews joined the party in 2025: Sylvanite, Voltzite's access broker exploiting F5, Ivanti, and SAP vulns in under 48 hours; Azurite, overlapping Flax Typhoon, yoinking engineering workstation files from manufacturing and defense; and Pyroxene, IRGC-tied but China-adjacent, wiping data in Israel amid tensions. Lee's blunt: these Beijing-backed goons are in the control loops for disruption, not dollars.

Meanwhile, Google's Mandiant and Threat Intelligence crew blew the lid off UNC6201—Silk Typhoon cousins—exploiting a Dell RecoverPoint zero-day, CVE-2026-22769, since mid-2024. Hardcoded admin creds in VMware backups let 'em drop Brickstorm and upgrade to stealthier Grimbolt backdoors, plus "ghost NICs" for sneaky pivots. Dell patched Tuesday after limited exploits hit less than a dozen orgs, but CISA's Nick Andersen warns they're embedding for long-term sabotage. Texas AG Ken Paxton sued TP-Link routers over China supply-chain ties and firmware holes exposing millions—Governor Greg Abbott already banned 'em statewide.

US defenses? FCC urged telecoms to beef up ransomware shields after a 4x spike. Treasury rolled out AI cyber tools with industry for financial resilience, per Deputy Assistant Secretary Cory Wilson. OMB ditched CISA's software attestation form for risk-based vibes, and Cyber Command's eyeing Parsons for Joint Cyber Hunt Kits. AI race heats up too—Time mag notes China's closing gaps despite chip curbs, but US scaling laws might pull ahead.

Effectiveness? Patches like Dell's are clutch, but dwell times over 400 days scream gaps in EDR-poor edges. We're reactive; China's proactive with "Bounty-as-a-Service" per Google Threat Intelligence. Need AI-driven hunts and supply-chain lockdowns, stat—or Voltzite flips the switch.

Thanks for tuning in, listeners—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech shield showdown. Buckle up, because the past week in February 2026 has been a wild ride of bans loosening, zero-days exploding, and hackers sharpening their claws.

Picture this: I'm sipping virtual tea in my digital war room when bam—the US Federal Register drops a bombshell on Friday. They're hinting at reversing some China tech bans, yanking Alibaba, Baidu, and BYD off the Chinese Military Companies list while letting memory makers like ChangXin and Yangtze sell DRAM stateside. Reuters whispers it's a Trump-Xi summit play, maybe ditching Clean Network curbs on TP-Link routers and Chinese telcos. Witty move, DC—negotiate with the dragon or get burned? But hold up, Salt Typhoon's still lurking in US telecoms from years back, so this feels like handing keys to the fox guarding the henhouse.

Meanwhile, CISA's sounding alarms louder than a Beijing street vendor. They've slapped six Microsoft zero-days into the Known Exploited Vulnerabilities catalog, with federal agencies patching by March 3. Salt Typhoon—those Beijing-backed ghosts—is feasting on Outlook add-ins and edge devices for persistent access. Microsoft rushed out-of-band fixes for MiniDoor email exfil and PixyNetLoader persistence. Fortinet's EMS server? SQL injection nightmare, CVSS 9.8, letting randos run wild. Patch now, folks, or watch your network turn into a Chinese buffet.

Over in hacking Olympics, China's Tianfu Cup roared back under Ministry of Public Security oversight. Natto Thoughts reports it's stockpiling zero-days per their 2021 laws—perfect for espionage arsenals. Lotus Blossom APT, China-linked per Rapid7, is slinging Chrysalis backdoors at Asian and Latin American govs and infra. Palo Alto's Unit 42 spotted TGR-STA-1030 campaign hitting 70 orgs in 37 countries with Behinder and Godzilla tools—classic China nexus, but they won't name Beijing to dodge retaliation. Smart or spineless?

Defenses? Tata Communications warns of intensifying threats, urging layered intel. Resecurity's flexing AI-powered shields at AI Everything MEA in Egypt. Check Point's blocking Formbook malware steals. Emerging tech like sovereign AI from KPMG chats national security resilience.

Expert take: These patches and advisories are clutch short-term Band-Aids, but gaps yawn wide. Reversing bans without ironclad supply chain vetting? Recipe for backdoors. Tianfu Cup means China's zero-day hoard outpaces US disclosure. Effectiveness? Meh—state actors like Salt Typhoon preposition via edge vulns faster than we patch. We need AI-driven anomaly hunters and mandatory zero-trust, stat. US defenses are reactive; China's proactive predator.

Thanks for tuning in, listeners—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech shield showdown. Picture this: it's mid-February 2026, and Washington's buzzing like a server farm on overdrive. Just days ago, on February 13th, Google dropped a bombshell threat intel report linking China—alongside Iran, Russia, and North Korea—to coordinated cyber ops hammering defense sectors worldwide. These state-backed crews are probing critical infrastructure like it's Black Friday at a data center, and the US is firing back with shields up.

Let's zoom into the defenses. DHS bigwigs in D.C. huddled with tech execs this very day, February 15th, per Brussels Morning, sounding alarms on AI-fueled threats from the East. Chinese hackers, sanctioned earlier by Treasury for targeting our grids and pipes, are now supercharged with AI that crafts deepfakes slicker than a PLA stealth jet and automates intrusions faster than you can say "zero-day." A senior DHS official nailed it: "The scale and speed demand a new generation of defenses." Spot on—because those Beijing bots are personalizing phishing to mimic your boss's emails, making old-school filters look like floppy disks.

On the patch front, Schneier on Security flagged a nasty one in n8n on January 15th—CVE-2026-21858, full CVSS 10.0, ripe for takeovers on 100,000 servers. Upgrade to 1.121.0 or bust, folks. And get this: AI coding assistants from China are slurping up 1.5 million devs' code and shipping it home, as Schneier warned February 2nd. Pro tip? Ditch 'em before your proprietary algo ends up in a YJ-18C missile sim.

Industry's hustling too. Apple's iPhone Lockdown Mode straight-up blocked the FBI's forensics team from cracking Washington Post reporter Hannah Natanson's device during a classified leak probe on February 6th—FBI's CART unit couldn't touch it. Microsoft? They're handing BitLocker keys to the feds 20 times a year on court orders. Pentagon's flip-flopping, adding then yanking Chinese firms from military lists ahead of a Trump-Xi summit, per South China Morning Post on February 14th. Meanwhile, Xi's New Year nod revealed PLA Cyberspace Force bases in the South China Sea, flexing cyber reach beyond the mainland since February 12th.

Emerging tech? AI defenses are racing ahead, but experts like Bruce Schneier say gaps loom huge—prompt injections are endless, and detection lags generation. Lawmakers are pushing AI governance bills for transparency and risk checks, with public-private pacts fortifying energy grids against cascading fails. Effectiveness? Solid on patches and lockdowns, but AI's dual-use arms race with China leaves us playing whack-a-mole. Gaps in global coord and retrofitting legacy systems? Beijing's laughing—until we embed secure AI from the ground up.

Witty wrap: If cyber war's a chessboard, Uncle Sam's got new knights, but China's queen is AI-agile. Stay vigilant, patch fast, Lockdown on.

Thanks for tuning in

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech tussle. Picture this: it's February 13, 2026, and the cyber battlefield's buzzing like a Beijing street market on steroids. I'm diving into Tech Shield updates from the past week—US defenses scrambling against Chinese threats, but with some eyebrow-raising detours.

First off, the Trump admin just hit pause on key China tech curbs, according to Reuters sources. Bans on China Telecom's US ops, China Unicom and China Mobile's internet biz, TP-Link routers, and Chinese gear in US data centers? All mothballed ahead of Trump's April Beijing summit with Xi Jinping. Commerce Undersecretary Jeffrey Kessler reportedly dragged feet, shifting focus to Iran and Russia post-October trade truce. Critics like Matt Pottinger, ex-deputy NSA, are fuming: "We're handing Beijing leverage in telecoms, AI data centers, and EVs while rare-earth tensions simmer." David Feith warns of "Chinese digital sovereignty islands" in our AI backbone. Witty move, right? Trade peace over cyber armor—classic Washington tango.

Meanwhile, China's flexing with its amended Cybersecurity Law, effective January 1 per Greenberg Traurig analysis. Fines jacked up—no more warnings first; straight penalties from 10K to 2 million RMB for data leaks or critical infra hits. Now they can chase foreign orgs anywhere jeopardizing "cybersecurity," including data hoards outside China. AI gets a glow-up too: state backing for algorithms, data centers, ethics regs. Multinationals, polish those compliance boots—CAC's got teeth.

Threats? Google Threat Intelligence drops a bomb: China-nexus UNC3236 (Volt Typhoon) probing US defense logins with ARCMAZE stealth, UNC6508 hitting research labs via REDCap exploits for INFINITERED malware. Palo Alto's Unit 42 exposed "Shadow Campaigns" by TGR-STA-1030—Asia-based state-aligned spies breaching 37 countries' govs and infra. Draft linked 'em to Beijing, but execs softened it, fearing retaliation after China's ban on Palo Alto software, Reuters reveals. SentinelOne's Tom Hegel calls it classic Chinese global espionage.

US ripostes: CISA mandates federal patches for exploited SolarWinds, Microsoft, Apple bugs today, per The Record. They updated Brickstorm malware guidance—new .NET variant; block rogue DNS over HTTPS, least-privilege service accounts. EPA bolstering water system defenses. US-China Economic Security Review Commission hearing looms March 2 in DC.

Effectiveness? Patches and advisories are solid bandages, but pausing bans leaves gaping holes—data centers exploding 120% by 2030, per JLL. Gaps scream: no new vuln patches named beyond CISA's orders, industry's tiptoeing like Palo Alto. Emerging tech? AI defenses lag; China's CSL pushes theirs while we play nice. NATO's deputy sec-gen urges costing Russia-China hybrid hits, but US solo? We're reactive hackers in a proactive spy war.

Stay vigilant, listeners—c

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

# Tech Shield: US vs China Updates

Hey listeners, Ting here. So buckle up because this week has been absolutely wild on the cyber front, and frankly, the US just woke up to realize we've been playing checkers while China's been playing 4D chess.

Let me start with the big headline that dropped today. Lieutenant General Joshua Rudd, Trump's pick to lead the National Security Agency and US Cyber Command, just went on record warning Congress that China is aggressively hunting for advanced AI chips to weaponize. We're talking about accelerating development of AI-enhanced weapons systems. Rudd basically told Senator Elizabeth Warren that the Trump administration has been way too lenient on export controls, and honestly, he's got a point. According to Semafor's reporting, the administration was planning to let Nvidia's H200 chips flow to Beijing, which is kind of like handing someone the keys to your house while they're actively casing your neighborhood.

Now here's where it gets spicy. Google's Threat Intelligence Group just published analysis showing that China-nexus groups are absolutely crushing it on the espionage front. Over the past two years, they've been the most active state-sponsored threat to our defense industrial base by volume. UNC3886 and UNC5221 are getting clever too, pivoting to edge devices and appliances for initial access rather than going straight at the juicy targets. It's like they're picking the lock on the side door instead of kicking down the front. These campaigns reportedly support preparatory access and R&D theft missions, which means they're playing the long game.

The really concerning part? The Justice Department just rolled out what they're calling the Data Security Program in December 2024. It's the first time America's actually restricted commercial data flows to countries of concern, including China. The DSP prohibits transactions involving bulk sensitive personal data and government-related data with covered persons from countries like China, Russia, Iran, North Korea, Cuba, and Venezuela. That's massive. But here's the gap everyone's whispering about: companies are still figuring out what "access" actually means. Security researchers are basically asking if access controls are sufficient or if we need something stronger. Many organizations are just shutting down operations in China rather than navigating the compliance nightmare.

Meanwhile, Russia's flexing too, targeting Ukrainian defense contractors and Western aerospace firms linked to unmanned systems. North Korea's pivoting to employment-themed social engineering against defense sector personnel. Iran's abusing trusted third-party relationships to infiltrate aerospace companies.

The real takeaway? We've got new legal frameworks, better threat intelligence, and Rudd seems ready to tighten the screws. But there's still a massive gap between what we're defending and how fast they're attacking. The defen

This content was created in partnership and with the help of Artificial Intelligence AI.