EXPERT Q&A — There’s rising deal with the vulnerability of undersea cables — a crucial infrastructure which is essential to a lot of worldwide communications. They’ve been broken in varied hotspots all over the world, with some incidents pointing to nefarious actors. One other risk past bodily injury is the potential for intrusions and tapping, particularly relating to U.S.-linked cables and China. Central to this difficulty is the dominance of Chinese language firms in making, sustaining or repairing the cables linked to the U.S. In July, the chairs of three Home committees wrote to the CEOs of Google, Meta, Microsoft, and Amazon to report on how uncovered cables are to China on this method.
The Cipher Transient spoke with Beth Sanner, former Deputy Director of Nationwide Intelligence at ODNI, to evaluate the Chinese language risk to undersea cables and why it’s so difficult for the U.S. to mitigate the chance. Our dialog has been edited for size and readability.
The Cipher Transient: What’s the fear right here? What is the type of nightmare situation? Why is the Congress asking the tech firms to report again on this stuff?
Sanner: A lot of our communications flows by means of these cables, together with encrypted labeled info. There’s a whole lot of stuff that’s essential. Not all of it’s labeled, in fact — simply on a regular basis supplies from monetary transactions or folks’s connections to the web. So there are clearly a number of the explanation why we must always take into account undersea cables as a part of U.S. crucial infrastructure. However that crucial infrastructure, not like most of what we speak about, is not solely in the US. In actual fact, all of that is outdoors the US, and never even all of that connects on to the US. The vulnerability is so international as a result of we’re sending monetary transactions between the US and Singapore, for instance, and even for China.
The Cipher Transient: There is no scarcity of points the place the identical considerations apply by way of China having a hand in areas of our lives that contain knowledge seize and knowledge assortment. Right here, it’s totally arduous to see how A, one would know precisely the place that Chinese language hand is, and B, for instance considered one of these firms comes again and says, properly, we expect that possibly a Chinese language entity does some upkeep work. I think about it is fairly arduous to immediately shift gears for Meta or Google or the opposite firms to say, okay, we’ll simply immediately have one other upkeep firm that is not Chinese language.
Sanner: Proper, so let’s break that down a little bit bit. First, the best way that info flows over these traces, it’s totally arduous to limit the place issues go. The messaging site visitors tends to go on the traces which have the least quantity of resistance and essentially the most effectivity. So, your knowledge may be going virtually anyplace.
And we all know that the FCC goes to be assembly in August and contemplating, and I might wager that they’re going to, banning any Chinese language gear in cables that connect with the US. (Editor’s Observe: On August 7, 2025 the FCC banned using gear and companies from Chinese language firms on its “Coated Checklist” and different businesses’ lists of entities deemed nationwide safety threats on any future undersea cables connecting to the U.S.)
That means to me that there is perhaps an issue that we do not learn about. Is there using Chinese language parts even contained in the cables connecting to the US? I can let you know all cables connecting to U.S. navy installations all over the world, that I do know of, although there could possibly be exceptions, I believe are dealt with by the American firm known as Subcom, which is owned by Cerberus, which Steve Feinberg, the now Deputy Secretary of Protection, was the co-CEO of till very just lately.
However we simply heard that Microsoft, of their cloud computing, with the U.S. DOD is utilizing Chinese language engineers for a part of the upkeep of the cloud. And so it makes you marvel, I suppose it is potential that individuals are doing silly issues like utilizing items like switching gadgets. These switching gadgets direct the transmission of the sunshine, or they might shut it down. What if these parts, similar to parts that we just lately heard had been embedded in photo voltaic panels within the grid in Texas, are transmitting again or one way or the other managed by China? I do not know, that is past my engineering functionality, however I might say that we would have an issue there.
After which the third drawback I might say is that this concept of the repairs, as a result of most cables which are reduce are unintentionally reduce. But when we depend on China for repairs, then one thing may be inserted in that course of to faucet that individual cable. And that may go on then indefinitely.
The Cipher Transient: We had been simply speaking about a few of the reporting that a few of the large assume tanks have carried out, CSIS specifically, that implies that whereas Chinese language firms and entities aren’t the market leaders relating to the development of those cables which are reaching U.S. shores, they’ve a giant chunk of the market, two firms specifically, relating to restore work.
Again to the primary query, out of your intelligence group background, how worrisome is that?
Sanner: Properly, that’s the potential to insert a faucet mechanically. That is how it’s carried out. So, any time a Chinese language ship restore operation is going on by the corporate that is a subsidiary of Huawei or the opposite firm, all of those firms report again to Beijing and definitely may be not even compelled, simply instructed to do this mission. So I take into account that a fully excessive threat.
Now, my understanding is that Cerberus and Subcom are starting a fleet of restore ships. They’ve two ships on this fleet of cable restore ships, in line with one article that I learn in Reuters. That is all I do know is open supply, in fact. And so I believe the US understands this weak spot. However my understanding, too, is that these Chinese language ships have repaired 25% of the cables which were reduce. So once more, our info may be on traces which are outdoors of our ecosystem. And I’ll say that, by way of the overarching difficulty right here, this can be a non-public sector endeavor, proper? There are not any authorities owned cable traces. Probably not. This can be a non-public sector deal. And so that is the place public non-public partnership must work.
Join the Cyber Initiatives Group Sunday e-newsletter, delivering expert-level insights on the cyber and tech tales of the day – on to your inbox. Join the CIG e-newsletter at this time.
The Cipher Transient: Your level about American firms now getting concerned within the restore work, the Home committee that appears at China and nationwide safety points has been so aggressive in every part from TikTok to all these different issues. Undersea cables have been round for some time. You’d assume it will not have taken this lengthy to do what you simply mentioned, which is have American firms exit and do that in the event that they’re so anxious about it. Any ideas as to why?
Sanner: Any person’s received to pay for the contract to have it as a result of I believe we have simply counted on the non-public sector to do that.
The Cipher Transient: After which the opposite query, are we at a stage now with this type of factor that if the corporate has any ties to Beijing that one must be anxious about it?
Sanner: I do assume that it is true that something that is linked to China is dangerous. We all know that China’s inside our crucial infrastructure in the US, proper? And they’re there to pre-position themselves in case of warfare, or possibly at the same time as a preemptive factor to stop us from interfering in, for instance, a Taiwan invasion.
So I might assume that undersea cables are not any totally different relating to the US, however I believe we now have a broader difficulty of the potential of a concerted effort to chop cables all over the world as a result of there’s little or no we are able to do to stop that besides in very outlined geographic areas. So NATO final 12 months arrange a working group centered on undersea cables and the safety of them. They usually’re engaged on growing programs like AI programs and distant sensing with the intention to monitor what is going on on and in addition to make use of that sensing to trace the actual ships that they assume are problematic, both from the grey tankers or these cargo ships that they know are problematic. We would want to copy that within the Pacific. And who’s going to do this? We do not have a NATO within the Pacific.
And so I believe that that may be a actual problem for us down the road. We won’t simply consider this as a geographic drawback that begins and ends with what connects to the US. I preserve seeing this. It is like, properly, we do not care what occurs in Ukraine or we do not care what occurs, we’re right here in America. That simply doesn’t work anymore. Our geography is fantastic and it protects us from some issues, however relating to cyber and house and undersea cables, communications, that’s not sufficient. So we now have to assume globally.
Opinions expressed are these of the interviewee and don’t characterize the views or opinions of The Cipher Transient.
The Cipher Transient is dedicated to publishing a variety of views on nationwide safety points submitted by deeply skilled nationwide safety professionals.
Have a perspective to share primarily based in your expertise within the nationwide safety discipline? Ship it to Editor@thecipherbrief.com for publication consideration.
Learn extra expert-driven nationwide safety insights, perspective and evaluation in The Cipher Transient
