China’s cyber foothold in US infrastructure exposes major vulnerability

NOVEMBER 11, 2026 10:20Updated: NOVEMBER 11, 2026 10:42The United States remains dangerously exposed to cyberattacks targeting its civilian infrastructure, with Chinese operations demonstrating how adversaries could establish a foothold inside critical networks long before a military confrontation begins, Rear Admiral (ret.) Mark Montgomery warned.Speaking to Defense & Tech by The Jerusalem Post on the sidelines of Cyberweek held at Tel Aviv University, Montgomery said that the threat extends far beyond military targets. Power plants, nuclear facilities, water systems, hospitals, educational institutions and transportation infrastructure are all at risk.While major banks have invested heavily in cybersecurity after decades of being targeted, many other sectors have not made comparable investments, leaving significant gaps in America’s defenses.The comments come on the heels of the controversy surrounding the scandal involving the CEO of Nvidia, Jensen Huang, after he had an affair with an alleged Chinese spy.Nvidia CEO Jensen Huang holds a switch for the Nvidia Vera Rubin NVL72 AI supercomputer during a Nvidia keynote address at CES 2026, an annual consumer electronics trade show, in Las Vegas, Nevada, US January 5, 2026. (credit: REUTERS/STEVE MARCUS)The vulnerability is particularly concerning because much of the infrastructure supporting the US economy and military is privately owned and operated. Companies responsible for maintaining essential systems may not fully understand the national security implications of the networks and assets under their control.Montgomery, who serves as senior director of the Foundation for the Defense of Democracies (FDD) Center on Cyber and Technology Innovation (CCTI) and as an FDD senior fellow, highlighted fiber-optic cables running beneath infrastructure as one example of a potential vulnerability, warning that owners may not appreciate the risks associated with the systems they operate.He pointed to China’s Volt Typhoon cyber group as a particularly concerning example, highlighting the potential for Beijing to compromise US infrastructure and maintain access that could be exploited during a future crisis or conflict.Volt Typhoon has been attributed to a covert access network that was first identified in 2023 and targeted hundreds of victims across telecommunications providers, government, defense contractors, satellite and mission-critical communication services, and more. It also targeted critical infrastructure including water, energy, transportation, maritime, rail, aviation, and emergency services.A coordinated attack against such targets and networks could have consequences far beyond the immediate disruption, potentially affecting transportation, communications, and the movement of military resources.The threat also illustrates how the boundaries between civilian and military infrastructure are becoming increasingly blurred. In a major conflict, attacks on power grids, hospitals, transportation networks and communications systems could be part of a broader campaign to undermine a country’s ability to function and sustain military operations.Growing strategic challengeThe US, Montgomery stressed, must treat cybersecurity as an integral part of national defense, rather than a problem confined to individual companies or government agencies.“China is more of a threat than Iran,” Montgomery said, pointing to its expanding capabilities and intelligence reach. “China already knows what is going on, everywhere.”The experience of recent conflicts has also demonstrated the importance of preparing for attacks across multiple domains simultaneously.According to Montgomery, who served for more than three decades in the US Navy and held senior leadership roles in Congress, the US “stopped the 40-day war with Iran because we couldn’t stop the drone attacks” that were targeting Gulf countries neighboring Iran. While the drones launched toward Jordan and Israel were largely intercepted, close to 5,000 one-way attack drones struck targets across the Gulf Cooperation Council (GCC) states. Many of them struck their targets.That introduction of such mass overwhelmed the defenses of the US and GCC, and the growing cost of defending against relatively inexpensive aerial threats.“America started the war with a flaw, and we knew it,” he said.Smoke rises in the Fujairah oil industry zone, caused by debris after interception of a drone by air defenses, according to the Fujairah media office, amid the US-Israel conflict with Iran, in Fujairah, United Arab Emirates, March 14, 2026. (credit: REUTERS/STAFF)He cited the Advanced Precision Kill Weapon System with a cost of approximately $27,000 per shot, as an example of the economic considerations facing militaries trying to counter low-cost drones.The challenge is to develop affordable capabilities that can be deployed at scale without sacrificing the high-end systems needed to confront sophisticated military adversaries. Despite the growing role of drones, conventional platforms such as ballistic missiles, aircraft, and tanks remain relevant.As Montgomery said, “high-end fighting will continue.”Follow us on Google