This is your China Hack Report: Daily US Tech Defense podcast.

Hey listeners, Ting here with your daily US Tech Defense on China Hack Report. Buckle up, because while Iran's hacktivists are making headlines with that Stryker wipeout, China's shadow ops are the real sleeper threat hitting US interests hard in the last 24 hours. No new malware drops screaming "Made in Beijing" today, but let's dissect the stealthy hits.

First off, researchers from GovInfoSecurity just detailed a long-running China-linked espionage campaign that's been burrowing into Southeast Asian military networks—networks that feed directly into US defense intel sharing via allies like the Philippines and Vietnam. These ops, tied to PLA Unit 69010, have been exfiltrating comms data for months, potentially compromising US Pacific Command postures. Think ghost-in-the-machine: attackers used custom backdoors to pivot from telco providers in Thailand and Indonesia straight to mil-grade servers. Sectors? Pure defense tech—radar feeds, troop movements, even F-35 logistics echoes amid those SAMAA TV reports of 16 US stealth jets getting smoked in Iran ops. Coincidence? Nah, Beijing's watching our skies crack.

No fresh zero-days from China today, but CISA's KEV catalog update nods to ongoing SharePoint exploits—CVE-2026-20963—that mirror tactics from Chinese state actors like Salt Typhoon, who've hammered US telecoms before. Attacked sectors stay locked on defense and critical infra; pair that with the Pentagon's fresh warning on Anthropic AI models, where Justice Department filings flag how adversaries like China could subvert defense AI guardrails post-deployment. Imagine Claude variants turning rogue in DoD sims—game over for secure ops.

Official warnings? CISA's screaming for Microsoft Intune hardening after Stryker's mess—pro-Iran Handala hackers mass-deleted 10,000+ devices on March 11, disrupting med-tech supply chains. But for you techies, roll out multi-admin approval now: Entra ID Conditional Access, phishing-resistant MFA, and PIM deployment per CISA's alert. FBI's seizing Iran MOIS domains too, but China's playing 4D chess quieter—no ransomware flash like Interlock's Cisco CVE-2026-20131 zero-day.

Immediate defenses: Patch SharePoint yesterday, audit third-party vendors like those French health breaches exposed 15 million records, and segment KVM devices—cheap ones are North Korea's fave, but China's copied the playbook for remote BIOS access. Listeners, run Ubuntu 24.04 checks for CVE-2026-3888 root esc too; local foothold turns root in seconds.

China's not blasting headlines like Iran's F-35 claims from Bloomberg via SAMAA, but their persistent access to US-aligned defense nets is the slow bleed we can't ignore. Stay patched, segment ruthlessly, and eyes on Pacific allies.

Thanks for tuning in, listeners—subscribe for daily drops! This has been a Quiet Please production, for more check out quietplease.ai.

For more http://www.quietplease.ai

Get the best deals http

This content was created in partnership and with the help of Artificial Intelligence AI.