[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAF842OGoPA70UzYaPkIQx-A0q-_5w0_PwTCbukOoWmc":3},{"article":4,"iocs":49,"watch_terms":50,"solutions":51,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"98fb24e9-15d7-4181-b6dc-80943cb9f5b1","What Happens if China Hacks the US Water Supply? I Went to a Secret War Game to Find Out","what-happens-if-china-hacks-the-us-water-supply-i-went-to-a-secret-war-game-to-f-4b8bc5","Burst water mains. Evacuated hospitals. In a closed-door simulation, insurers played out their response to a mass disruption by China’s Volt Typhoon hackers—and found a nightmare scenario.","A war game simulation involving insurance executives explored the catastrophic consequences of a cyberattack by China's Volt Typhoon on US water utilities. The simulation highlighted severe second-order effects, including hospital evacuations, food supply chain disruptions, and potential physical destruction, leading to difficult decisions for insurers regarding resource allocation and liability under 'act of war' clauses.","Insurers play out a simulated cyberattack on US water utilities by China's Volt Typhoon.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fwhat-happens-if-china-hacks-the-us-water-supply-war-game-volt-typhoon\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a4d67b2cd42662145e222f2\u002Fmaster\u002Fpass\u002FWARGAME-TopArt-v4.jpg","2026-07-08T10:00:00+00:00","2026-07-08T12:00:40.422392+00:00",8,[17,20,23],{"name":18,"type":19},"Volt Typhoon","threat_actor",{"name":21,"type":22},"Microsoft","vendor",{"name":24,"type":25},"critical infrastructure","technology","6cbdd207-aaa1-4176-9534-e156b125e917",{"id":26,"icon":28,"name":29,"slug":30},null,"Nation-state","nation-state",[32,34,39,44],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21],{"controls":52,"vendors":139},[53,81,110],{"slug":54,"name":55,"problem":56,"products":57},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[58,66,73],{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":67,"vendor_name":21,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"slug":82,"name":83,"problem":84,"products":85},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":111,"name":112,"problem":113,"products":114},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":154},"volt-typhoon-war-game-exposes-critical-infrastructure-cyber-catastrophe-risk","Volt Typhoon War Game Exposes Critical Infrastructure Cyber Catastrophe Risk","The war game simulation revealed that a sophisticated nation-state attack on US water utilities could trigger cascading second-order failures far beyond the initial target, including hospital evacuations and food supply chain collapse. Critical infrastructure systems like water utilities often operate with aging operational technology (OT) that lacks modern security controls, creating exploitable gaps for adversaries like Volt Typhoon. The 'act of war' ambiguity further complicates response and recovery, leaving insurers, governments, and operators without clear playbooks. This matters because unpreparedness at the planning and policy level translates directly into delayed, disorganized responses during real-world events, magnifying harm to civilians.",[145,146,147,148,149,150,151,152,153],"NIST SP 800-82 (Guide to ICS Security)","NIST CSF 2.0 - Respond (RS) and Recover (RC) Functions","CIS Control 12 - Network Infrastructure Management","CIS Control 17 - Incident Response Management","NERC CIP-005 (Electronic Security Perimeters)","CISA Cross-Sector Cybersecurity Performance Goals (CPGs)","Executive Order 14028 - Improving the Nation's Cybersecurity","NIST SP 800-34 - Contingency Planning Guide for Federal Information Systems","America's Water Infrastructure Act (AWIA) Section 2013 - Risk and Resilience Assessments",{}]