AI is helping US spies catch stealthy Chinese hacking ops, NSA official says

U.S. intelligence officials, including the NSA Cybersecurity Directorate, say Chinese-linked threat actors are conducting sophisticated, persistent operations against U.S. critical infrastructure (power, ports, transportation), often avoiding traditional malware by leveraging living-off-the-land techniques, misconfigurations, and default credentials; AI/ML is being used defensively to detect anomalous legitimate-looking activity, and campaigns such as Volt Typhoon represent active pre-positioning with potential for societal disruption.