This is your Tech Shield: US vs China Updates podcast.Hey listeners, Ting here, your go-to gal for all things China cyber chaos and hacking wizardry. This week in the US-China tech shield showdown, it's been a non-stop ping-pong of patches, probes, and political punches—right up to today, December 21st. Buckle up, because China's hackers are swinging hard, but Uncle Sam's defenses are scrambling like a caffeinated sysadmin at 3 AM.Let's kick off with the fresh wounds: Cisco's Talos team just dropped a bombshell on December 18th, revealing a China-nexus APT group called UAT-9686 exploiting a zero-day in AsyncOS for Secure Email Gateway and Web Manager—CVE-2025-20393, max severity, actively hit since late November. These sneaky foxes planted backdoors, purged logs, and ghosted out, targeting online systems with Spam Quarantine enabled. Hundreds of Cisco customers in the US, India, and Thailand got exposed, per Shadowserver Foundation's Peter Kijewski and Censys scans showing 220 vulnerable gateways. Cisco's fix? Nuke and pave—full rebuilds if compromised, no patch yet. Witty win for defenders: only hits if you're misconfigured, but oof, that's a lot of folks.Not done—ESET outed LongNosedGoblin, another China-aligned crew, on December 18th, weaponizing Windows Group Policy for espionage malware against Southeast Asian and Japanese gov nets since 2023. Meanwhile, Ink Dragon (aka Jewelbug) flexed ShadowPad and FINALDRAFT on governments December 17th, per Western Illinois University's cyber center. CISA screamed for federal patches on React2Shell's CVE-2025-55182 by December 12th—unsafe deserialization letting global attacks RCE everything.US countermeasures? Lawmakers on December 20th pushed to slap DeepSeek and Xiaomi onto the Entity List with Tencent and CATL, citing military ties, straight from South China Morning Post. Trump's defense bill, inked December 19th, bans investments in Chinese biotech and dual-use tech. Commerce, State, Energy, and Defense kicked off a review of Nvidia H200 chip sales to China that same day—can't let Beijing's AI feast continue. TikTok's US spin-off deal on December 19th? Still shaky, needs Beijing's nod, and core algo tensions simmer.Industry's hustling: AI-powered SOCs and zero-trust are the buzz from GovTech's 2026 predictions, with post-quantum threats accelerating. Experts like Natixis' Gary Ng warn not to underestimate China's EUV lithography push for AI chips. Gaps? Trump-era pivots weakened cyber posture, per KrebsOnSecurity's year-in-review December 19th—free speech curbs and rapid shifts left defenses ragged. Effectiveness? Patches buy time, but China's domestic chip surge—Huawei's Kirin 9030, Moonshot's Kimi—means engagement's urgent, says a US gov report December 15th. We're holding the line, but need AI firewalls and supply chain steel, stat.Listeners, thanks for tuning in—subscribe for more cyber spice! This has been a Quiet Please production, for more check out quietplease.ai.For more http://www.quietplease.aiGet the best deals https://amzn.to/3ODvOtaThis content was created in partnership and with the help of Artificial Intelligence AI

Ver todos los episodios