Library

CISA-NSA-FBI Advisory AA24-038A — Volt Typhoon

PRC state-sponsored actors pre-positioning in U.S. critical infrastructure for disruptive or destructive cyberattacks. The foundational advisory confirming the most significant infrastructure threat in U.S. history.

CISA-FBI-NSA Advisory AA23-335A — CyberAv3ngers

IRGC-affiliated actors exploiting PLCs in multiple sectors. Confirmed operational control of U.S. water treatment infrastructure using default passwords.

Dragos 2025 OT Cybersecurity Year in Review

Confirms Volt Typhoon (tracked as Voltzite) progressed from IT access to inside operational control loops at strategic American utilities. Assesses many water utilities will never reach the sophistication needed to detect these implants.

FBI Director Wray Congressional Testimony (January 2024)

Testified that Chinese hackers are “positioning on American infrastructure in preparation to wreak havoc” during a future conflict.

DOE OE-417 Incident Reports — Physical Attacks on Grid

919+ documented physical attacks on U.S. electric grid infrastructure since 2010. The raw data behind the physical vector threat assessment.

EMP Commission Reports (2004, 2008, 2017)

Congressional commission assessments of electromagnetic pulse vulnerability. Assessed a nationwide HEMP grid outage could require years for full recovery. The foundational documents for the EMP/GMD vector.

FERC Order 830 — GIC Monitoring

Minimum geomagnetically induced current monitoring requirements for the bulk power system. The regulatory baseline for GMD protection — and the gap between what is required and what is needed.

DOE Large Power Transformer Study (2012, updated 2014)

Manufacturing lead times, import dependency, lack of strategic reserve. The engineering basis for the 18–36 month replacement timeline that drives BSE duration estimates.

National Academy of Sciences — Severe Space Weather Events (2008)

Assessed a severe geomagnetic storm could leave 130 million Americans without power for months to years. The scientific basis for the GMD threat.

ODNI 2026 Annual Threat Assessment

The Intelligence Community’s annual assessment confirming selective cooperation among China, Russia, Iran, and North Korea. Confirms Volt Typhoon as conflict preparation. Confirms North Korean revenue at highest levels since before sanctions.

NCTC Director Kent Testimony (December 2025)

Testified that approximately 18,000 known or suspected terrorists with jihadist ties entered the country during the prior administration.

Heritage Foundation — Defending Taiwan: Interceptor Stockpile Analysis (January 2026)

Established that U.S. high-end interceptor inventories were critically deficient before the Iran war began. The munitions depletion data that drives the China strategic architect thesis.

Idaho National Laboratory — Aurora Vulnerability (2007)

Demonstrated that a cyberattack can physically destroy generators by manipulating circuit breakers. Affects every generator, motor, and transformer connected to the grid. Virtually unmitigated after 18 years.

NERC Long-Term Reliability Assessment

Annual assessment of grid reliability risks including generation adequacy, transmission constraints, and emerging threats. The regulatory data behind grid vulnerability assessments.

Iberian Peninsula Blackout (April 2025)

Cascading grid failure affecting 60 million people across Spain, Portugal, and southern France. Validated FIR’s cascading failure timeline at continental scale: communications degradation in minutes, transportation paralysis in hours, water pressure decline in 24–48 hours.