Nation-state cyber threats, ransomware exploitation, utilities, and supply-chain risk
Key Questions
What scale of US voter data has China collected?
PRC-linked entities collected 204 million US voter records over a decade through metadata forensics, supporting influence operations and person-matching efforts. President Trump referenced similar figures of 220 million records since 2020.
What nation-state threats involve AI?
AI agent hijacking, autonomous ransomware like JADEPUFFER, and AI-generated browser ransomware via tools such as DeepSeek have been reported. NSA has embedded with Anthropic for offensive operations.
Which countries are conducting supply chain and espionage campaigns?
Russia, China, North Korea, and Iran-linked groups have conducted supply chain attacks, zero-day exploits, and espionage including Chinese APT targeting Microsoft 365 and Iranian disruption of California water facilities.
Recent reporting links ransomware to rapid exploitation of NetScaler, FortiMail, SharePoint, Cisco Secure FMC, GitLab, and ScreenConnect, while RMM abuse enables stealthy persistence through legitimate tools. Water-sector weaknesses, Georgia Power’s customer-data exposure, and attacks on universities and municipalities reinforce the need for MFA, patching, segmentation, and offline backups; victim-scale and attribution claims remain partly unverified.