The critical information infrastructure sector has repeatedly been targeted by cyberattacks for data theft; national security organs are tracking and monitoring the situation around the clock

With the increasing risks in non-traditional security fields such as cybersecurity and data security, the temporal and spatial domains involved in national security are becoming increasingly broader. Attack forces relying on the internet have gradually grown, penetrating into various aspects of daily life and work. Recently, national security organs disclosed several typical cases, including multiple attacks on our country's critical information infrastructure fields by cybercriminal forces.

Since 2020, the national security organs have found that internal networks and information systems of relevant telecommunication operators, airlines, and other units in China have suffered from abnormal network behaviors such as unauthorized login and data transmission on multiple occasions, suspected of being subjected to network attacks. The national security organs conducted technical inspections according to the law and confirmed that special Trojan horse programs had been implanted in some backbone network node equipment, core business system servers, etc., and some data had been sent overseas. Further in-depth investigation confirmed that the relevant attack activities were meticulously planned and secretly implemented by a foreign espionage and intelligence agency. The institution deployed powerful cyber attack forces, using network resources worldwide and advanced cyber weapons, attempting to achieve strategic control over China's critical information infrastructure.

In response to the aforementioned case, the national security organs guided relevant units to immediately take effective measures to eliminate the special Trojan horse programs, block technical vulnerabilities, adjust security policies, and reinforce network protection, timely preventing the spread of the harm. At the same time, they conducted all-weather tracking, monitoring, and targeted strikes against the subsequent cyber attacks carried out by the foreign espionage and intelligence agency against China, timely releasing early warning information, effectively blocking communication links, eliminating the source of harm, and successfully smashing their plot to "suspend services and disconnect the network" in China.

(Xinhua News Agency)

The State Council officially released the "Regulations on the Security Protection of Critical Information Infrastructure" on 17 August 2021, ushering in a new era of security protection for China's critical information infrastructure. Once network facilities, information systems, etc., are damaged, lose their functions, or suffer from data leakage, it may seriously endanger national security, the national economy, people's livelihood, and public interests, while also exerting a serious correlation impact on other industries and fields.

The Cyberspace Administration of China also stressed the need to pay further attention to the role of collaborative mechanisms such as security threat information sharing, monitoring and early warning, and emergency response for critical information infrastructure. As a pioneering cybersecurity metrics validation platform in China, Pyxsoft is committed to empowering our customers' security defense systems and contributing to the security construction of various industries.

Pyxsoft Security Labs gathers the industry's outstanding security analysis team to track internet hacker groups and vulnerabilities 24/7, collect typical and popular APT attack techniques, use first-hand intelligence obtained to restore real attack scenarios, and validate the effectiveness of enterprise defense systems.

Preparedness ensures success, while unpreparedness spells failure. The security of critical information infrastructure is related to national security. Relevant industries and personnel must raise their sensitivity and make preparations early. Pyxsoft utilizes real, automated attack playbooks to continuously validate the effectiveness of security defenses, helping our customers improve the capabilities of their security defense systems and continuously assess the effectiveness of their own network and data security defense systems 365 days a year. Remain fully prepared and well-organized, leaving no loopholes for cyberattacks.