No room for complacency with data security in cyberattacks era

The Harbin Public Security Bureau in Northeast China's Heilongjiang province announced on Tuesday that three individuals — Katheryn A. Wilson, Robert J. Snelling, and Stephen W. Johnson, who are believed to be attached to the US National Security Agency — are wanted for their suspected role in launching cyberattacks against China during the Asian Winter Games in Harbin in February.

That the Chinese authorities could identify the suspects within two months speaks volumes about China's growing capability to defend itself in cyberspace.

The investigation attributed the cyberattacks to the NSA's Tailored Access Operations unit, a specialized division known for its sophisticated cyber espionage. To obscure their tracks, the attackers reportedly used proxy networks, purchasing IP addresses from multiple countries and leasing servers across Europe and Asia. The precision and scale of the operation left one in little doubt about the intent behind it.

Targeting the Asian Winter Games, a major international sporting event, demonstrates that Washington's cyber aggression shows no bounds. And it is not an isolated case. The US has long leveraged its technological dominance to conduct cyber operations against not only its perceived adversaries but even its allies.

The US enjoys significant advantages in cyber warfare. With 10 of the 13 Domain Name System or DNS servers based in its territory, US intelligence agencies benefit from structural advantages in global internet governance, although their actual surveillance capabilities rely more on direct partnerships with tech companies and physical network interception. The NSA, in collaboration with the Five Eyes alliance, maintains probably the most extensive surveillance network in history. Advanced malware, zero-day exploits, and deep integration with private tech companies further enhance its offensive capabilities. The US Cyber Command operates under a "defend forward" doctrine, which means defending with preemptive strikes.

For China, the lesson is clear: it is not enough to rely on passive defense. It has been forced to strengthen its cyber defenses. The only viable path is continuous advancement in cybersecurity, threat detection, and counterintelligence. But this is not just China's challenge. When strategic interests are at stake, even friendly nations can be on the receiving end of cyberattacks, a lesson the US' allies should make note of.

The Asian Winter Games incident is a reminder that in the digital age, no country can afford complacency. The US will continue to exploit its cyber dominance. The only question is — who will be next?

- Zhang Zhouxiang, China Daily