Loading story…
U.S. congressional testimony and a recent report from the U.S.-China Economic and Security Review Commission have highlighted growing concerns over China's development of advanced technologies and strategies to target undersea communications cables. These cables are critical infrastructure, carrying the vast majority of global internet traffic, and are increasingly seen as vulnerable to both physical and cyber threats. The testimony and report emphasize that new Chinese innovations, such as the AJX-002 undersea drone and deep-sea cable cutting devices, have made it technologically feasible for state actors to launch coordinated attacks on multiple cables, potentially disrupting communications for entire regions like Taiwan. The U.S. is currently ill-prepared to rapidly repair or replace damaged cables due to regulatory and logistical challenges, underscoring the urgent need for policy reform and enhanced protection measures.
The Commission's report details that Chinese military-affiliated research institutions have developed and patented devices capable of severing armored cables at depths exceeding 13,000 feet. Real-world incidents have already been observed, including Chinese vessels damaging cables near Taiwan and in the Baltic Sea, with one notable case involving a ship dragging its anchor and severing two major cables in November 2024. The report warns that in the event of a conflict, particularly over Taiwan, the Chinese military is expected to target undersea cables to isolate the island. These developments represent a significant escalation in the threat landscape for global communications infrastructure, prompting calls for immediate action to strengthen the resilience and security of undersea cable networks.
See the actors and campaigns active against you right now.
7 events from the most recent confirmed update back to the earliest known activity.
Taiwan's Dongyin Island lost its undersea cable connection to Beigan Island after bad weather caused a shipwreck on the seafloor to shift and cut the link. Authorities switched to a backup microwave communications system to maintain internet and mobile service for the island's roughly 1,500 residents, though service remained weather-dependent.
Chinese sources reportedly disclosed a successful trial of a deep-sea electro-hydrostatic actuator capable of cutting undersea cables at depths of about 3,500 meters, conducted from the research vessel Haiyang Dizhi 2. State messaging suggested the system had progressed beyond development toward operational application, heightening concerns about sabotage risks to submarine infrastructure.
Lawfare published an analysis arguing that the United States is unprepared to rapidly repair or replace damaged undersea cables because of outdated regulations, limited repair capacity, and supply chain constraints. It urged Congress and policymakers to adopt a national contingency plan, streamline permitting, and build a public-private consortium for cable protection and response.
A congressional report detailed China's new deep-sea cable-cutting capability and warned of growing Chinese capacity to threaten undersea communications infrastructure. The report highlighted the strategic risk posed by tools able to cut heavily protected submarine cables at great depth.
China developed advanced subsea systems, including the AJX-002 undersea drone and a deep-sea cable cutter reportedly capable of severing armored cables at depths of about 13,000 feet. These capabilities raised concern that coordinated attacks on critical submarine cable links could become technically feasible.
The FCC's Communications Security, Reliability, and Interoperability Council previously produced recommendations aimed at improving submarine cable security and resilience. According to the later analysis, many of these recommendations were not fully acted upon.
A Department of Homeland Security report previously warned that U.S. undersea cable infrastructure faced significant vulnerabilities and required stronger protection and response planning. The later Lawfare analysis cites these earlier warnings as part of a pattern of unaddressed risk.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
5 references tracked. Mallory keeps watching after this page renders.
tomshardware.com
Open sourcearstechnica.com
Open sourcetomshardware.com
Open sourcelawfaremedia.org
Open sourcetomshardware.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The United States Congress has introduced the Strategic Subsea Cables Act of 2025, a bipartisan bill aimed at strengthening the nation's ability to defend undersea fiber-optic cables from both cyber and physical threats, particularly those attributed to China and Russia. The proposed legislation would empower the Department of State to increase international cooperation on cable security and authorize the Department of Treasury to impose sanctions, including exclusion from the dollar-settling system, on individuals or entities found responsible for damaging these critical infrastructures. Lawmakers highlighted a rise in cable disruptions and sabotage attempts in regions such as the Baltic Sea and the Taiwan Strait, referencing recent incidents in Europe and the Indo-Pacific as evidence of the growing threat landscape. Undersea cables are responsible for carrying more than 95% of global digital communications, yet their security is currently managed through a patchwork of international agreements, private sector arrangements, and voluntary practices. The bill represents one of the most significant recent efforts by Congress to address vulnerabilities in this area, seeking to establish a more coordinated and robust defense posture against potential adversaries. The legislation underscores the urgency of preparing for malicious activities that could have cascading effects on global communications and national security.
Jun 29, 2026
Submarine cables form the backbone of global internet connectivity, carrying the vast majority of international data and financial transactions. Recent reports have highlighted growing concerns over the security and resilience of these undersea cable networks, particularly in the face of geopolitical tensions, supply chain vulnerabilities, and slow repair processes. The Center for Cybersecurity Policy and Law has emphasized the need for increased redundancy in cable routes to prevent single points of failure, but high costs and complex permitting processes often hinder the deployment of new cables. In some jurisdictions, it can take over three years to approve a new cable landing site, discouraging private investment and leading to clusters of cables in the same locations, which increases risk. The report recommends that governments streamline permitting and coordinate with neighboring countries to align regulatory requirements, as well as encourage early engagement between regulators and cable operators to avoid costly project delays. Even with redundancy, cable failures are inevitable, and the speed of repairs is critical to maintaining global connectivity. Repair operations are often delayed by cabotage rules, port entry requirements, and customs fees, which can add days or weeks to the process. Proposals such as creating 'free ports' for repair materials and simplifying regulatory hurdles could significantly reduce downtime and costs. In the UK, the Parliament's Joint Committee on National Security Strategy has criticized the government for being 'too timid' in its approach to protecting the nation's 64 undersea cables, which handle £220 billion in daily financial transactions. The committee's report warns of abundant security vulnerabilities, noting that even accidental anchor drags can cause major disruptions. While the UK has some redundancy in its cable infrastructure, with 75 percent of transatlantic traffic routed through two main cables, this concentration also represents a significant vulnerability. The report acknowledges that accidental damage from fishing and shipping is common, with around 200 cable faults occurring annually worldwide. Although cables are heavily shielded in shallow waters, they rely on ocean depth for protection further out, and the risk of deliberate sabotage is increasing amid rising geopolitical tensions. The importance of these cables to national economies and global communications cannot be overstated, yet their protection remains a complex challenge due to the international nature of the infrastructure and the need for cooperation between governments and private industry. Both reports stress the urgency of improving regulatory frameworks, investing in redundancy, and streamlining repair operations to ensure the continued resilience of the global submarine cable network. The growing awareness of these vulnerabilities has prompted calls for more decisive government action and greater collaboration across borders. As digital economies expand and reliance on undersea cables intensifies, the consequences of a major disruption could be severe, affecting everything from internet access to financial markets. The reports conclude that proactive measures are essential to safeguard this critical infrastructure against both accidental and intentional threats.
Jun 29, 2026
The Federal Communications Commission approved new cybersecurity rules for the **Emergency Alert System** and **Wireless Emergency Alerts**, adding baseline controls such as strong passwords, timely patching, and firewalls to reduce the risk of hijacking, duplicate, or unauthorized alerts. The agency also said it will introduce an authentication ID mechanism to verify alerts before submission, warning that compromise of emergency communications by foreign governments, cybercriminals, or other malicious actors could spread disinformation, cause public panic, and disrupt coordination during real crises. The FCC also adopted its first major overhaul of submarine cable security oversight in decades, expanding licensing requirements to cover **submarine line terminal equipment** (`SLTE`) operators and updating safeguards for equipment, third-party providers, and supply-chain risks. The framework tightens scrutiny of undersea cable infrastructure that carries most global internet traffic, including restrictions on equipment tied to China and other designated foreign adversaries, while allowing some low-risk, U.S.-headquartered providers to receive streamlined approval if they self-certify to high security standards and accept ongoing oversight.
Jun 29, 2026