Geopolitics · Sunday, October 18
Pre-positioned network access is a foreign policy, not a hacker story
Agencies described Volt Typhoon as preparation for a crisis, aimed at the systems a country needs on a bad day.
by: Andrew, Co-Founder at Blackout Briefing

The joint advisory from CISA, the NSA, and the FBI did not describe a gang chasing bitcoin. It described a state actor sitting inside communications, energy, transport, and water networks so disruption would be available later. That is diplomacy conducted in other people’s routers.
A hacker story, in the ordinary sense, is a break-in and a theft. The advisory described a seat kept for later. The disruption is not required on the day of the access. It is an option, saved for a crisis between governments. That calendar is why the subject is foreign policy, not a crime item that happens to mention wires.
The networks named are the ones a country uses on a bad day: to talk, to keep power, to move people and goods, and to deliver water. Being inside them is the point of the preparation. A story that stops at the intrusion and never reaches a utility, a carrier, or a water system has not arrived at the machines this paper exists to name.
It belongs next to the War desk because the intended hour is a crisis between governments. It belongs next to the Grid desk because the victim machines are ordinary. A geopolitical story that never names a transformer is not one we will run.
Ordinary is the word that matters. The victim machines are not a separate military internet. They are the systems customers already live on. A geopolitical piece that cannot name a transformer, a water plant, a communications network, or a transport system has not earned the space beside a grid brief. The advisory earned it by naming the sectors.
Households cannot evict that access. They can notice that a geopolitical crisis and a badly explained outage are now allowed to arrive together, and have water before the argument about why.
Getting that access out is an agency job. The joint advisory was the public part of saying the access was there. Readers are not being asked to search their own houses for devices. They are being told that a geopolitical crisis and a badly explained outage are now allowed to show up in the same week, and that water put aside beforehand does not depend on winning the argument about which one caused the other.
Sources
- PRC State-Sponsored Actors Compromise U.S. Critical Infrastructure (AA24-038A) — CISA, NSA, and FBI · the article this brief was written from
- Electromagnetic Pulse and Geomagnetic Disturbance — Cybersecurity and Infrastructure Security Agency
More in Geopolitics
- Allied power grids are now read as a target list
by: Andrew, Co-Founder at Blackout Briefing
- The spare transformer is a trade argument
by: Andrew, Co-Founder at Blackout Briefing
- Ukraine’s winter is an energy negotiation with the lights off
by: Andrew, Co-Founder at Blackout Briefing
Recent news
EMP
The civilian grid is still the soft target in a high-altitude pulseby: Andrew, Co-Founder at Blackout Briefing
CME
A Carrington-class storm is a when, not a science-fiction ifby: Andrew, Co-Founder at Blackout Briefing
Grid
Metcalf still explains the grid better than most white papersby: Andrew, Co-Founder at Blackout Briefing
