US critical infrastructure sectors are on high alert for potential Iranian cyberattacks amid escalating tensions between Iran and Israel, with concerns that US military actions could prompt Iran to target US networks. While federal agencies like CISA have historically increased defenses during geopolitical crises, current federal support appears limited, prompting infrastructure operators and ISACs to independently bolster their cybersecurity measures. The situation remains dynamic, with ongoing monitoring and heightened vigilance across sectors.
A state-sponsored Chinese hacking group, dubbed "Volt Typhoon," has been spying on a wide range of US critical infrastructure organizations, including telecommunications and transportation hubs, as well as the US island territory of Guam, according to Western intelligence agencies and Microsoft. The espionage campaign is one of the largest known Chinese cyber-espionage campaigns against American critical infrastructure. The Chinese activity is unique and worrying because analysts don't yet have enough visibility on what this group might be capable of.
A state-sponsored Chinese hacking group has been spying on a wide range of U.S. critical infrastructure organizations, from telecommunications to transportation hubs, Western intelligence agencies and Microsoft said. The espionage has also targeted the U.S. island territory of Guam, home to strategically important American military bases, Microsoft said in a report. While China and the United States routinely spy on each other, analysts say this is one of the largest known Chinese cyber-espionage campaigns against American critical infrastructure.
