Tech Shield: US vs China Updates

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, it's Ting here, and buckle up because the cyber warfare between the US and China just hit a new level of intensity this week.

Let me start with the big one. Taiwan's National Security Bureau just dropped a bombshell report showing China's launching an average of two point six three million intrusion attempts per day against Taiwan's critical infrastructure in 2025. That's a hundred and thirteen percent jump from 2023. We're talking energy grids, hospitals, emergency services, water systems, finance networks. The energy sector and emergency rescue hospitals took the sharpest hits. China's deployed five major hacker groups including BlackTech, Flax Typhoon, Mustang Panda, APT41, and UNC3886, each targeting different sectors with laser focus.

Now here's where it gets spicy. Over fifty percent of China's attacks exploit hardware and software vulnerabilities, and they're getting really creative. They're using distributed denial of service attacks to paralyze networks, social engineering emails with something called ClickFix techniques to trick people into opening malware, and supply chain attacks that infiltrate critical infrastructure suppliers. The NSB found that stolen medical data from hospitals has been sold on dark web forums at least twenty times in 2025 alone.

On the American side, the Federal Communications Commission just added all foreign-produced drones and critical components to the covered list as of December twenty second, 2025. That means the FCC won't authorize new foreign drone equipment, effectively cutting off future sales in the United States unless the Department of War or Homeland Security makes specific exceptions. This is a huge protectionist move targeting foreign UAS technology.

Meanwhile, the Space Force is ramping up its resilience game heading into 2026. China's operational satellite fleet exceeded one thousand sixty by mid-2025, with hundreds dedicated to surveillance and reconnaissance. The Space Force is pushing something called the Race to Resilience initiative to achieve battle-ready architectures, testing satellite refueling and repair capabilities while planning four on-orbit servicing demonstrations this year.

Here's the reality listeners. China's cyberattacks are coordinated with military exercises. The People's Liberation Army conducted forty joint combat readiness patrols against Taiwan in 2025, and during twenty three of those patrols, China simultaneously escalated cyber operations. It's not random. It's strategic intimidation tied to political moments and military posturing.

The gap in defenses remains troubling. While the US is building resilience through distributed systems and commercial augmentation, these are medium term solutions. China's weaponizing vulnerabilities faster than we can patch them. The NSB warns that Taiwan needs better coordination across government and critical infrastructure operators, and frankly, that's wis

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech cage match. Picture this: it's the tail end of 2025 bleeding into our fresh 2026, and the firewalls are sizzling hotter than a Shenzhen server farm. Just days ago, President Trump inked the $900 billion National Defense Authorization Act, slamming the door on Chinese engineers tinkering with Pentagon IT systems. ProPublica blew the lid off how Microsoft was using "digital escorts"—cheap China-based coders at $18 an hour patching top-secret Joint Warfighting Cloud Capability clouds. No more backdoors for Beijing's spies; this ban hits Russia, Iran, and North Korea too, forcing onshoring and jacking up costs, but hey, better safe than SolarWinds'd.

Meanwhile, the FBI's screaming about Salt Typhoon, that sneaky China-linked crew infiltrating over 200 US firms, including critical infrastructure pipelines and telecoms. These hackers are burrowing deeper than a PLA tunnel rat, exfiltrating data like it's dim sum night. On the defense side, Uncle Sam just greenlit an $11.1 billion arms bonanza to Taiwan—think asymmetric denial toys to punch back at blockades. China fired right back with Justice Mission 2025 drills December 29-30, unleashing zero-warning mobes around the island: Type 075 assault ships encircling from the rear, rocket forces, air, navy—all simulating a multi-domain quarantine. Eastern Theatre Command announced and attacked in under an hour, signaling "fait accompli" to Taipei and any meddling from Okinawa-based US or Japanese forces.

Industry's hustling too. Palo Alto Networks' Wendi Whitmore dropped a bombshell in The Register: AI agents are 2026's sneak-iest insider threats, with Gartner predicting 40% of enterprise apps hooking up to these autonomous critters. Chinese spies already abused Anthropic's Claude for intel grabs in the Anthropic attack last September—query the LLM, boom, it spills secrets or pivots laterally. Whitmore warns of "superuser" perms chaining disasters, like AI doppelgangers greenlighting fake CEO wire transfers via prompt injection. Defenders? Flip it—AI agents triaging alerts, scanning logs, even indexing threats against private intel for Palo Alto's SOC wizards.

Effectiveness? The NDAA plugs a gaping Obama-era hole, but talent shortages mean delays—veterans could fill gaps if trained up. Gaps scream loud: unpatched Exchange servers (29,000 exposed) and MongoBleed flaws invite lateral moves, perfect for Salt Typhoon. China's drills preview cyber-physical hell—next up, week-long blackouts on Taiwan's grid. Witty truth? We're hardening shields, but Beijing's hackers evolve faster than my coffee addiction. US leads in policy muscle, but AI arms race needs least-privilege lockdowns yesterday.

Thanks for tuning in, listeners—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

# Tech Shield: US vs China Updates

Hey listeners, Ting here. So buckle up because this first week of 2026 just served us a cybersecurity buffet that would make any threat analyst lose sleep.

Let's start with the elephant in the room. The Pentagon just dropped a report that basically screams China's military buildup has made the U.S. homeland increasingly vulnerable. According to the Defense Department, China maintains a large and growing arsenal of nuclear, maritime, conventional long-range strike, cyber, and space capabilities able to directly threaten American security. But here's where it gets spicy for us cyber folks. In 2024, Chinese cyberespionage campaigns like Volt Typhoon burrowed into U.S. critical infrastructure, demonstrating capabilities that could absolutely disrupt military operations and harm American interests during a conflict. The Pentagon's assessment suggests China expects to be able to fight and win a war on Taiwan by the end of 2027, which means the timeline for defensive measures is basically now.

On the flip side, China just threw down its own gauntlet. Starting January 1st, 2026, China's amended cybersecurity law is now in effect, and it's a game changer for organizations worldwide. The new rules require operators of critical information infrastructure to report significant cybersecurity incidents within as little as sixty minutes. For the most serious breaches, we're talking one hour reporting windows. Organizations found in serious violation now face fines up to ten million RMB, with individuals directly responsible hitting one million RMB in penalties. The law also expanded extraterritorial jurisdiction, meaning foreign activity that endangers China's network security is fair game, regardless of whether it targets critical infrastructure directly.

Here's what keeps me up at night though. The Defense Department report shows the PLA is accelerating development of military technology including military artificial intelligence, biotechnology, and hypersonic missiles. China's announced defense budget has nearly doubled since Xi Jinping took office, and they're pouring resources into achieving global leadership in emerging technologies.

The U.S. strategy has shifted toward offensive cyber operations moving closer to the center of public policy. Rather than relying solely on ambiguity, Washington increasingly uses selective disclosure and overt signaling to shape adversary behavior. But that reciprocal normalization is risky because as the U.S. speaks more openly, adversaries may do the same, accelerating an arms-race dynamic.

The real vulnerability gap remains in critical infrastructure. Experts warn that Chinese-made electronics used widely by U.S. power companies could be vulnerable to cyberattacks. Supply chain accountability is hardening globally, but most organizations still spend their first hour just trying to understand what happened. Under the amended Ch

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech showdown. Picture this: it's the final countdown to 2026, and America's cyber fortress is slamming doors on Beijing's sneaky probes faster than you can say "Brickstorm backdoor." Just days ago, on December 22, the FCC dropped a bombshell Public Notice, adding all foreign-produced drones and their guts—like DJI and Autel Robotics gear—to the Covered List. No more importing, selling, or flying those spy-prone UAS in the US, period. Why? A National Security Determination nailed it: risks from surveillance, data theft, and supply chain sabotage ahead of big events like the World Cup. Pillsbury Law's breakdown calls it the first categorical ban on an entire product class—smart move, but hackers gotta hack.

Fast-forward to President Trump's signature on the $900 billion defense bill this month. ProPublica exposed how Microsoft let China-based engineers poke around Pentagon clouds for years, with so-called "digital escorts" who couldn't tell a firewall from a fidget spinner. Defense Secretary Pete Hegseth blasted it on X: "Foreign engineers from China should NEVER access DoD systems." Boom—new rules ban anyone from China, Russia, Iran, or North Korea from DoD clouds, plus annual congressional briefings starting June 2026. Hegseth even kicked off probes and audits on Microsoft. Effectiveness? Experts say it plugs a gaping hole, but as CISA's acting director Madhu Gottumukkala warns, Chinese ops like Brickstorm are embedding for sabotage.

Speaking of which, CISA, NSA, and Canada's Cyber Centre just updated their malware report on December 4—Brickstorm, PRC state-sponsored nastiness targeting VMware vSphere in government and IT nets. It steals creds, pivots laterally, and auto-reinstalls if you swat it. Broadcom urges patches; Google's Threat Intelligence spotted it hitting legal firms and outsourcers since April 2024. WaterISAC flags water utilities as prime targets. Witty aside: China's hackers are like that ex who won't delete your number—persistent and messy.

Industry's stepping up too: Pentagon's 2025 China report spotlights PLA's Multi-Domain Precision Warfare, blending cyber with info ops, now supercharged by the new Information Support Force. Trump's National Security Strategy pushes resilient energy and outbound investment curbs on sensitive tech. Gaps? Cognitive warfare—deepfakes and narrative nukes via PLA's old Strategic Support Force tricks. Veteran intel folks say we're losing that mind game, per Irregular Warfare Project analysis.

These moves shore up defenses, but China's Justice Mission 2025 drills off Taiwan—live-fire response to that record $11B US arms sale—are testing our nerves. Mick Ryan's Substack nails it: Beijing's normalizing aggression to erode our response threshold. Patches and bans buy time, but we need AI-driven detection and allied intel fusion to stay ahead. Effectiveness

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth on all things China hacks and US shields. Buckle up, because this week's been a wild ride in the US-China cyber showdown—straight from the Pentagon's scorching 2025 Military and Security Developments report dropped just yesterday, December 29th. Picture this: I'm hunkered down in my digital war room, coffee in hand, as Beijing's PLA flexes across nukes, hypersonics, and cyber ops that could make your router weep.

First off, the big bombshell—Pentagon brass confirm China's cyber game is peaking, with attacks up 150% in 2024 alone. Remember Salt Typhoon? That sneaky crew, fingered by FBI and CISA alerts this year, burrowed into nine US telecom giants for up to two years, plus hits on energy, water, and transport. FinanceWire reports they're still prowling aging infrastructure, hitting 200 orgs in 80 countries by late August. US response? Actelis Networks is stepping up with Cyber Aware Networking—AI that spots anomalies in real-time, 256-bit MACsec encryption, and data scrambling for IoT edges. They've locked down German utilities and Italian motorways; stateside, it's modernizing pipes before Beijing turns 'em into spy cams.

Government side, CISA, NSA, and FBI joint warnings scream urgency—70% of 2024 attacks targeted critical infra. No fresh patches this week, but the Pentagon's report spotlights Volt Typhoon too, prepping disruptions for a Taiwan scrap. Xi Jinping's crew is eyeing 1,000+ nukes by 2030, launch-on-warning doctrines, and silo fields in Sichuan's Pingtong—Washington Post satellite snaps show plutonium pits booming. Cyber ties in: they're closing the LLM gap, per SCWorld, fueling smarter hacks.

Industry's hustling—US military's gone all-in on AI defenses, per Military.com's 2025 review. Coast Guard's inventorying AI tools, mandating approved feds over sketchy commercial ones to shield data. Predictive maintenance cuts breakdowns, ops centers plan faster. Expert take? Craig Singleton from Foundation for Defense of Democracies nails it: contradiction city—China's Taiwan drills today around key ports, sanctioning 20 US firms over $10B arms sales, yet Trump 2.0 chats "stable peace." Effectiveness? Solid patches like Actelis plug edges, AI governance limits dumb errors, but gaps scream: legacy infra's a sitting duck, no silver bullet for state-sponsored persistence.

Witty aside: China's Global Times calls it "hype," but Song Zhongping's spin won't silo those YJ-21 hypersonics. US needs microsegmentation, immutable backups, and patch blitzes yesterday—ransomware lessons from CM-Alliance echo that. Emerging tech like AI anomaly hunters? Game-changer, but train 'em right or it's garbage in, escalation out.

Thanks for tuning in, listeners—hit subscribe for more cyber spice. This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech shield showdown. Picture this: it's the final week of 2025, and the cyber trenches are buzzing like a Beijing server farm on Red Bull. China just dropped a bombshell on Sunday, accusing the US National Security Agency of hacking their National Time Service Center—a critical hub under the Chinese Academy of Sciences that keeps everything from comms to power grids ticking to Beijing time. According to China's State Security Ministry, the NSA exploited a foreign smartphone messaging vuln back in 2022 to snag staff credentials, spy on mobiles, and probe internal networks through 2024. They claim it could've wrecked financial systems and global time standards. US Embassy? Crickets. Tit-for-tat much? Yeah, after years of mutual finger-pointing.

But hold up—the US isn't sleeping. CISA just rolled out Cybersecurity Performance Goals 2.0 on December 11, supercharging critical infrastructure defenses. Think universal IT-OT goals aligned with NIST CSF 2.0, slamming new threats like third-party deep-access risks and zero-trust to block lateral movement. No more siloed OT headaches; it's governance-first, with leadership owning the risk. CISA's guide from December 3 helps utilities weave in AI safely, while power pros begged Congress on December 2 to fund cyber programs against nation-state hacks—China's still the big bad, per multi-nation warnings.

Industry's hustling too. China-nexus crews weaponized CVE-2025-55182 in cloud providers within 24 hours of its December 3 patch drop, per threat intel trackers. FY2026 NDAA, inked by President Trump on December 18, pumps $900 billion into closing tech gaps—$2.6B for hypersonics, AI teammates for decision dominance, quantum pushes, and cyber workforce boosts. Drone swarms? Counter-UAS task forces and pilots to shield bases. Plus, harmonized DIB cyber rules by June 2026.

Expert take? Chris Krebs on Face the Nation nailed it: CISA's underfunded, talent's fleeing to China's Silicon Valley knockoffs, and AI's wild—first fully automated Chinese hack via Claude bot hit 30 orgs last month. Samantha Vinograd warns structural US slips make us ripe. Effectiveness? CPG 2.0 plugs gaps smartly, but voluntary means spotty uptake; NDAA's acceleration imperative rocks for speed, yet China's PLA AI logistics—sensors, predictive UGVs, cargo drones—are sneaky targets we gotta hit first. Gaps? Talent wars, regulatory whiplash, and those rare earth chokepoints. US edges in alliances like Pax Silica, but Beijing's drafting AI safeguards to mimic human chit-chat without the addiction drama.

Whew, listeners, the shield's thickening, but this cat-and-mouse game's just heating up. Stay vigilant—patch fast, zero-trust everything.

Thanks for tuning in—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.a

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to gal for all things China cyber chaos and hacking hijinks. Buckle up, because this week's US Tech Shield against Beijing's digital dragons has been a non-stop thrill ride, straight from the Pentagon's fresh "Military and Security Developments Involving the People’s Republic of China 2025" report dropped December 23. China's PLA is flexing hard—nuclear buildup, cyber intrusions up 150% in 2024, with Volt Typhoon hackers burrowing into US energy, water, and transport grids like ticks on a Taiwan crisis prep. They're even closing the AI gap with killer LLMs for coding cyber ops, fake news deepfakes via Baidu and Huawei tech, and info warfare to crack Taiwan's will.

But America's not sleeping! President Trump's National Security Strategy, out December 5, is swinging back with gusto—pumping US cash into resilient energy grids, critical minerals, and cyber-hardened networks using American encryption to block China's cheap telecom traps in Africa and the Americas. National Cyber Director Sean Cairncross is hyping private-sector team-ups for real-time threat hunting and attribution, teasing a January 2026 National Cybersecurity Strategy packed with offensive cyber punches to make hackers think twice. The FCC just banned foreign-made drones and parts December 23, nuking China-dependent UAS from the Covered List after Trump's June exec order on drone dominance. CISA's on fire too—flagging exploited Digiever NVR flaws CVE-2023-52163 on Christmas Eve and ASUS Live Update's CVE-2025-59374 earlier, forcing patches now or pwn later.

Industry's stepping up: Pentagon's rolling out GenAI.mil with Google Cloud's Gemini and soon xAI's Grok from Elon Musk for IL5-secure AI workflows, giving troops a real-time edge from X platform intel. NDAA passed Senate December 17, locking in AI and cyber defenses. Meanwhile, China's griping about Japan's "active cyber defense" shift, per Foreign Ministry's Lin Jian December 26—pot calling kettle offensive?

As your witty cyber whisperer, here's the expert scoop: These moves are solid deterrence—deregulation spurs innovation, private intel sharing plugs gaps Volt Typhoon exploits. But gaps scream loud: China's MCF fuses civilian AI breakthroughs into PLA weapons faster than we patch, and hybrid sabotage with Russia erodes NATO without boom-booms, as Congress heard from Laura K. Cooper and Craig Singleton. Effectiveness? High on infrastructure bans, but we need faster attribution and quantum-proofing before Beijing's LLM fakes flood the zone. Stay vigilant, listeners—hackers evolve, so must we.

Thanks for tuning in—subscribe for more Ting takes! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://amzn.to/3ODvOta

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here – your friendly neighborhood China-and-cyber nerd – and the US‑China digital chessboard has been on fire this week, so let’s jack straight into it.

The big anchor is the new Fiscal Year 2026 National Defense Authorization Act, just signed and packed with cyber teeth aimed squarely at Beijing-linked risks. According to analysis from Crowell & Moring, the Act orders the Pentagon to harmonize and tighten cybersecurity requirements across the entire defense industrial base, cutting bespoke one-off standards that Chinese state hackers love to exploit in the supply chain. It also mandates department‑wide timelines for cloud authorizations to operate and a unified policy for securing AI and machine‑learning systems, including guidance on AI‑specific threats and lifecycle security.

On the “tech shield” front, that same law and recent reporting in the Times of India highlight a huge strategic vulnerability: batteries. American cloud and weapons systems are still heavily dependent on Chinese lithium‑ion supply chains. Lawmakers responded with strict new sourcing rules that phase out batteries and even computers and printers from “foreign entities of concern” like Chinese manufacturers over the next few years. It’s not a classic software patch, but it’s a massive hardware‑layer cyber risk reduction move – fewer backdoored components, fewer places for PLA‑linked operators to hide.

Zooming up a level, the Pentagon’s new annual report on Chinese military and security developments, released this week, doubles down on the warning that groups like Volt Typhoon have already burrowed into US critical infrastructure, pre‑positioned for disruption if a Taiwan crisis kicks off. That report is driving a flurry of tabletop cyber exercises and new directives for NSA‑certified red teams to stay fully funded and active – basically, institutionalizing constant probing of US defenses against Chinese TTPs instead of ad‑hoc drills.

Over at Justice and the regulators, the Cybersecurity Law Report notes that DOJ guidance on bulk sensitive data rules is pushing companies to lock down large datasets from nation‑state access, with China clearly in mind. Think: location, genomics, financial telemetry – the good stuff for intelligence profiling. Boards are now treating this as national‑security‑grade compliance, not just privacy hygiene.

Industry is responding in parallel. Battery and critical mineral investments, highlighted by US energy initiatives and Japanese capital commitments, are about building a non‑Chinese backbone for AI data centers. Meanwhile, security vendors are racing out “Volt Typhoon mode” detection signatures, OT network segmentation tools, and AI‑assisted hunting tuned to Chinese tradecraft rather than generic malware noise.

So how effective is all this? Short term, these measures absolutely raise China’s operational cost: fewer soft targets in the defense supply chain, more res

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to cyber sleuth with a front-row seat to the US-China tech showdown. Picture this: it's December 2025, and the digital trenches are buzzing hotter than a overclocked GPU. Chinese hackers, those sneaky UAT-9686 operatives linked to Beijing's intel machine, just pounced on a zero-day gem in Cisco's Email Security Appliances—CVE-2025-20393, a root-access jackpot with a perfect CVSS 10.0 score. WebProNews reports they've been burrowing in since November, hitting exposed gateways for espionage gold, leaving hundreds of firms from finance to gov scrambling. Cisco's yelling for config lockdowns, but no patch yet—expected early 2026. Witty aside: it's like leaving your firewall's backdoor wide open during a Beijing blackout.

Meanwhile, CISA's sounding alarms left and right. They just beefed up the Known Exploited Vulnerabilities catalog with nasties like CVE-2025-14611 in Gladinet CentreStack and Triofox—hard-coded crypto flaws ripe for the picking. And get this, they're tracking Brickstorm malware, a China-nexus beast still prowling networks per Cybersecurity Dive. Over in Southeast Asia and Japan, newbie APT LongNosedGoblin's dropping Group Policy malware on gov targets, as Cyware Social spilled today. Ink Dragon's expanding espionage too, says Innovate Cybersecurity. US defenses? Patching furiously, but gaps yawn wide—aging infra's a sitting duck for AI-fueled onslaughts predicted by 2026, per SecurityBrief Asia.

Gov's pushing back hard. Rep. Brian Mast's AI OVERWATCH Act wants advanced semis like Nvidia H200s treated as munitions, with 30-day congressional vetoes on China sales. Politico notes Rep. Gregory Meeks' RESTRICT Act echoes that, banning exports outright. But plot twist: Trump's "transactional diplomacy" greenlit Nvidia resuming H200 shipments to China under a 25% fed tax waiver, per MarketMinute. Hawks like Rep. Shri Thanedar are fuming—feeds Beijing's AI war chest while we tax our own edge?

Industry's rallying with zero-trust pushes and anomaly detectors, but experts at Just Security call out America's cyber retreat undermining Indo-Pacific security. TNSR warns our ISR sats are fragile against PLA counter-scouts—need attritable drone swarms and cyber decoys stat, or deterrence crumbles. Gaps? No CISA director confirmed as Senate adjourns, per Nextgov, right before a new national cyber strat drops. Effectiveness? Patches plug holes, but China's relentless—PLA's arms control white paper brags cyber-AI restraint while drills with Russia near Japan spike tensions, via Center for China Analysis.

Folks, we're in a cat-and-mouse sprint; US measures buy time, but scale up industrial output or watch margins vanish. Stay vigilant—zero-days don't holiday.

Thanks for tuning in, listeners—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals https://

This content was created in partnership and with the help of Artificial Intelligence AI.

This is your Tech Shield: US vs China Updates podcast.

Hey listeners, Ting here, your go-to gal for all things China cyber chaos and hacking wizardry. This week in the US-China tech shield showdown, it's been a non-stop ping-pong of patches, probes, and political punches—right up to today, December 21st. Buckle up, because China's hackers are swinging hard, but Uncle Sam's defenses are scrambling like a caffeinated sysadmin at 3 AM.

Let's kick off with the fresh wounds: Cisco's Talos team just dropped a bombshell on December 18th, revealing a China-nexus APT group called UAT-9686 exploiting a zero-day in AsyncOS for Secure Email Gateway and Web Manager—CVE-2025-20393, max severity, actively hit since late November. These sneaky foxes planted backdoors, purged logs, and ghosted out, targeting online systems with Spam Quarantine enabled. Hundreds of Cisco customers in the US, India, and Thailand got exposed, per Shadowserver Foundation's Peter Kijewski and Censys scans showing 220 vulnerable gateways. Cisco's fix? Nuke and pave—full rebuilds if compromised, no patch yet. Witty win for defenders: only hits if you're misconfigured, but oof, that's a lot of folks.

Not done—ESET outed LongNosedGoblin, another China-aligned crew, on December 18th, weaponizing Windows Group Policy for espionage malware against Southeast Asian and Japanese gov nets since 2023. Meanwhile, Ink Dragon (aka Jewelbug) flexed ShadowPad and FINALDRAFT on governments December 17th, per Western Illinois University's cyber center. CISA screamed for federal patches on React2Shell's CVE-2025-55182 by December 12th—unsafe deserialization letting global attacks RCE everything.

US countermeasures? Lawmakers on December 20th pushed to slap DeepSeek and Xiaomi onto the Entity List with Tencent and CATL, citing military ties, straight from South China Morning Post. Trump's defense bill, inked December 19th, bans investments in Chinese biotech and dual-use tech. Commerce, State, Energy, and Defense kicked off a review of Nvidia H200 chip sales to China that same day—can't let Beijing's AI feast continue. TikTok's US spin-off deal on December 19th? Still shaky, needs Beijing's nod, and core algo tensions simmer.

Industry's hustling: AI-powered SOCs and zero-trust are the buzz from GovTech's 2026 predictions, with post-quantum threats accelerating. Experts like Natixis' Gary Ng warn not to underestimate China's EUV lithography push for AI chips. Gaps? Trump-era pivots weakened cyber posture, per KrebsOnSecurity's year-in-review December 19th—free speech curbs and rapid shifts left defenses ragged. Effectiveness? Patches buy time, but China's domestic chip surge—Huawei's Kirin 9030, Moonshot's Kimi—means engagement's urgent, says a US gov report December 15th. We're holding the line, but need AI firewalls and supply chain steel, stat.

Listeners, thanks for tuning in—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.

For more http:

This content was created in partnership and with the help of Artificial Intelligence AI.