Critical Infrastructure Security: Observations From the Front Lines

This commentary discusses increased activity by Volt Typhoon — a state-sponsored Chinese threat actor — which targets network infrastructure in critical US sectors (communications, energy, water, transportation) and uses living‑off‑the‑land techniques and long dwell times to position for future attacks; it emphasizes the high risk to critical infrastructure but focuses on defensive guidance such as frequent risk assessments, network segmentation, IDS deployment, and identity/privileged access controls.