DARPA AI Cyber Challenge Final Was Inspired by Salt Typhoon and Volt Typhoon

Salt Typhoon Breaches DARPA AI-Cyber Contest, Raises Global Alert

Summary:

• The news: DARPA says the Salt Typhoon and Volt Typhoon hacking campaigns are shaping the final round of its AI Cyber Challenge (AIxCC).
• Clarification: Salt Typhoon did not hack the competition. The Chinese telecom intrusions inspired the round’s focus on critical infrastructure software.
• Key players: DARPA, the U.S. military’s research agency, and Kathleen Fisher, director of its Information Innovation Office.
• What happens next: Seven finalist teams will build AI systems that find and fix bugs in open-source code at DEF CON in August;

The final round of DARPA’s AI Cyber Challenge will draw on one of the most serious hacking campaigns of recent years. DARPA official Kathleen Fisher told Nextgov/FCW at the RSAC Conference in San Francisco in April 2025 that the challenge is shaped by the Chinese state-backed groups known as Salt Typhoon and Volt Typhoon.

How Salt Typhoon Shaped the Final Round

Seven teams made the final. Each must build an AI-powered system that finds and fixes vulnerabilities in open-source software used by critical infrastructure such as water systems and financial institutions. Fisher said DARPA is “100% inspired by the Salt Typhoon and Volt Typhoon stories.” The aim is sturdier software for critical infrastructure.

Salt Typhoon is the campaign discovered in 2024 that breached at least nine U.S. telecom operators, including the “lawful intercept” systems that handle wiretap requests. Volt Typhoon is a separate group that U.S. officials say has burrowed into critical infrastructure such as water treatment plants.

Why the Telecom Hacks Matter

Fisher said DARPA has consulted critical infrastructure partners across sectors about the threats they see and picked the software for the competition based on that feedback. She would not describe the specific challenges. Fairness to competitors came first, she said, and leaking details would undercut a contest that teams have spent well over a year preparing for.

Speed is the point. Telecom networks mix old and new technology, and the Salt Typhoon hackers found the weak spots. AI tools that patch bugs automatically could close such gaps before they are used.

AI as a Defense Tool

It’s a test of agentic AI. Teams must handle both full code bases and smaller code blocks to mimic real-world debugging.

In the semifinal round in 2024, some simulated flaws were based on known vulnerabilities. Many others were newly created, since real attackers keep changing their techniques.

What to Watch at DEF CON

The finalists will meet at DEF CON in August, where the winning systems will be named. DARPA hopes the results give critical infrastructure operators practical tools to find and fix flaws quickly.

Fisher compared unpatched software to leaving the country exposed to a missile attack. Leaving vulnerabilities in software, she said, is like leaving the country open to that kind of strike.

For defenders, the message is plain. State hackers often get in through old, known bugs that someone could have fixed months or even years earlier if they had the time, the tools and the people to do it.

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.