orionpolicy.org Escalating Cyber Espionage Threats from China and Russia
Article Content
- •Cyber espionage incidents have increased significantly, particularly from China and Russia.
- •In May 2025, the UK linked cyber breaches to Chinese state actors.
- •The US has indicted multiple Chinese nationals for cyber espionage activities.
Cyber espionage has surged, with China and Russia leading state-sponsored attacks on sensitive data. In May 2025, the UK National Cyber Security Center linked breaches of the Electoral Commission to China, while Russian hackers targeted Tajikistan's educational and government sectors. Chinese cyber operations have increased by 150%, accounting for 11% of global cyberattacks. A US Department of Justice indictment in March 2025 charged 12 Chinese nationals with email hacking and information theft. The US Cybersecurity and Infrastructure Security Agency (CISA) defines cyber espionage as unauthorized access to sensitive data for political or economic gain. This evolving threat landscape has prompted discussions on policy responses and the need for enhanced cybersecurity measures.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (99)
Following this threat?
Track Flax Typhoon, Mirai and Cybersecurity and Infrastructure Security Agency in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include… 
Chinese Cyber Actors Exploit Vulnerabilities via Integrity Technology Group Chinese government-linked cyber threat actors, associated with Integrity Technology Group, are using a combination of automated tools and hands-on techniques to exploit vulnerabilities and steal sensitive data from organizations globally. They target critical infrastructure sectors, including government, healthcare…