China and U.S. Infrastructure

The Cybersecurity and Infrastructure Security
Agency (CISA), National Security Agency (NSA),
and Federal Bureau of Investigation (FBI) assess
that People’s Republic of China (PRC) state-
sponsored cyber actors are seeking to pre-
position themselves on IT networks for disruptive
or destructive cyberattacks against U.S. critical
infrastructure in the event of a major crisis or
conflict with the United States.” (Full PDF below)

Needless to say this is part of my day job, and this is my opinion as an ICS cybersecurity expert. While I will say that there are most centrally threats to US industry, most come from incidental contact with IT based threats: not from nation states. What I mean by this, if you are a CISO, the risk of non targeted ransomware is a more real and quantifiable risk.

I do not mean to say that nation states are not a real threat. If a war (beyond that of a proxy fight) kicks off then there is no doubt that cyber attacks will be part of that.

China’s hackers are positioning on American infrastructure in preparation to wreak havoc and cause real-world harm to American citizens and communities, if or when China decides the time has come to strike.”

FBI Director Christopher Wray