Adrian Johnson
TLDR:
Key Points:
- The U.S. is actively working to dismantle Chinese state-backed cyberespionage operation Volt Typhoon.
- NSA Cybersecurity Director Rob Joyce mentioned ongoing efforts to uncover and dismantle Volt Typhoon.
Article Summary:
Outgoing National Security Agency Cybersecurity Director, Rob Joyce, has revealed that the U.S. is continuing its crackdown on Chinese state-backed cyberespionage operation, Volt Typhoon. Efforts are being made to identify organizations affected by Volt Typhoon, with some intrusions being discovered through artificial intelligence. The NSA has also utilized vulnerability scans to determine compromises. The extent of federal efforts into Volt Typhoon has not been fully disclosed.
This crackdown follows warnings from U.S. cybersecurity leaders, including Cybersecurity and Infrastructure Security Agency Director Jen Easterly, regarding the severity of Chinese cybersecurity threats to U.S. critical infrastructure. Easterly highlighted the inherent insecurity of critical infrastructure technology due to historical software development practices.
Organizations impacted by cybersecurity threats, such as the recently disclosed Fortra FileCatalyst RCE bug and ransomware attacks like the one against Change Healthcare, are facing increasing pressure to enhance their cybersecurity defenses. Higher cyber funding for sector risk management agencies has been supported by officials, with the Biden administration proposing additional funding in the fiscal year 2025 budget.
