Monday, October 19, 2026

War · Saturday, October 17

Pre-positioned access is the quiet version of a wartime blackout

U.S. agencies say Volt Typhoon has sat inside infrastructure networks so disruption is available later, not for today’s ransom note.

by: Andrew, Co-Founder at Blackout Briefing

The February 2024 joint advisory from CISA, the NSA, and the FBI assessed that China-linked actors were pre-positioning in U.S. critical-infrastructure networks — communications, energy, transportation, water — in a pattern the agencies said did not look like ordinary espionage.

The public name on that activity is Volt Typhoon. The pattern matters more than the label. Pre-positioning means the access is the present achievement and the disruption is being saved. That is a different shape from a ransom note that wants an answer this week. A quiet network is not, on the advisory's own terms, evidence that the issue is hypothetical.

The sectors named are ordinary civilian machinery: talking, power, movement, and water. Access sitting across them is not a story about one company's laptop. It is a description of an option to make several basic systems unreliable in the same crisis.

In a crisis, access can become outages without a missile. Operators lose their picture, or worse, keep a picture that is lying. That is why a War section cannot be only about explosions over substations.

A lost picture is an operator who knows the blindness and can slow down. A lying picture is an operator taking the next step on indications that are false. Both are effects a war can want. Physical damage to yards still matters. It is simply not the only path the advisory describes.

Households will not evict an intruder from a utility network. They can treat a sudden, poorly explained blackout in a period of international crisis as a time to use the paper plan: water, radio, and a meetup that does not depend on an app.

Communications are on the same list as energy. A reunion that lives in a group chat fails in the scenario the advisory is about, even when the first visible failure is the light. Paper does not have to log in. That is the household end of an otherwise remote story.

Sources

  1. PRC State-Sponsored Actors Compromise U.S. Critical Infrastructure (AA24-038A) — CISA, NSA, and FBI · the article this brief was written from
  2. Electromagnetic Pulse and Geomagnetic Disturbance — Cybersecurity and Infrastructure Security Agency

More in War

Recent news